This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/CD6jTd_TdOPKGlsQYuA0aPGO26g.roa
File:                     CD6jTd_TdOPKGlsQYuA0aPGO26g.roa (raw, json)
Hash identifier:          t58/eGwC58jwWOrJ22eZzC9bcrP/pHmuhrh6+2TXzK4=
Subject key identifier:   08:3E:A3:4D:DF:D3:74:E3:CA:1A:5B:10:62:E0:34:68:F1:8E:DB:A8
Certificate issuer:       /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial:       019B7F154C233DB731B6949746DC72E1FE9A
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/CD6jTd_TdOPKGlsQYuA0aPGO26g.roa
Signing time:             Fri 02 Jan 2026 14:21:00 +0000
ROA not before:           Fri 02 Jan 2026 14:21:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56744
IP address blocks:        91.238.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:4c:23:3d:b7:31:b6:94:97:46:dc:72:e1:fe:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
        Validity
            Not Before: Jan  2 14:21:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=083ea34ddfd374e3ca1a5b1062e03468f18edba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:b2:db:d7:b4:5c:ba:65:f5:b1:f1:cb:99:
                    84:3d:cf:76:b9:32:3c:21:eb:a5:46:34:b8:a9:87:
                    4f:69:9f:57:ef:2f:f9:76:ce:ff:fc:eb:15:00:14:
                    31:d0:20:a0:29:d5:0d:e2:03:18:fe:30:f2:5d:cb:
                    2c:32:06:90:bb:cd:b0:90:f5:eb:90:9b:63:dd:bb:
                    96:32:cb:88:5b:b9:ed:10:ec:f6:02:b1:bb:7a:dd:
                    a6:ab:2b:13:f9:cb:e5:e9:35:fc:4e:c7:34:69:a5:
                    b7:25:2e:3d:f7:eb:5e:68:40:af:d3:c8:60:f4:36:
                    bc:b2:e4:04:0a:08:e6:1c:a8:de:23:5e:37:48:82:
                    a2:c7:75:1b:ad:df:39:a2:de:8d:f1:4c:71:a5:bd:
                    c8:bb:c7:c0:bd:13:03:14:0a:c4:61:64:db:f6:08:
                    66:d0:aa:6d:b0:61:f6:1a:51:e7:77:19:32:1e:73:
                    71:4b:89:13:9c:82:51:24:7c:bc:99:d9:f1:74:8b:
                    bb:3c:90:f9:31:b2:13:33:7a:9d:ed:7a:d4:e0:9a:
                    9a:30:4b:fa:e5:bb:4d:59:58:43:24:c5:18:e7:bb:
                    53:d7:36:66:f7:2c:5c:5a:6a:30:17:00:e9:b0:5f:
                    07:51:cf:32:0e:ce:f7:ba:f4:8c:70:6a:50:82:d3:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3E:A3:4D:DF:D3:74:E3:CA:1A:5B:10:62:E0:34:68:F1:8E:DB:A8
            X509v3 Authority Key Identifier:
                keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/CD6jTd_TdOPKGlsQYuA0aPGO26g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:92:c0:d8:e4:08:5a:f5:d2:cf:57:d3:5a:02:09:05:f2:18:
         4a:92:c3:e1:09:9e:9a:9f:09:b5:2d:1a:72:6c:5b:e7:67:49:
         53:eb:35:b3:e9:bf:8e:02:87:88:60:1d:23:e0:3a:04:bd:0f:
         a1:73:03:f3:4e:54:d4:85:b7:08:a3:6f:cf:47:c2:d5:d0:1b:
         07:d0:d5:a9:92:42:d7:db:94:c5:6b:f5:28:a3:de:33:57:b5:
         6a:94:7e:70:f1:d7:84:17:bb:1d:6d:48:87:fe:6f:af:e4:49:
         2c:f5:f8:5f:17:4a:88:ac:53:1b:11:ba:af:f3:78:4c:84:07:
         ac:cc:ea:a8:3f:7f:a4:5f:cb:21:ee:c3:27:4b:e8:c7:d4:75:
         d0:58:bf:b0:48:34:52:91:d3:fe:7d:19:ca:53:3b:9a:fd:86:
         bc:81:51:e0:73:78:33:c5:97:fe:f1:0a:6e:06:d7:26:51:da:
         1f:a8:a2:1f:6d:c6:46:33:7b:0a:ab:4c:be:d5:ef:e8:ec:f7:
         8f:00:64:17:11:d3:42:df:3e:b1:e8:2c:37:25:13:49:14:02:
         4a:0a:35:aa:16:6c:51:dc:d3:99:d8:f0:50:3a:de:83:b7:b4:
         75:40:88:b5:50:45:63:8f:6c:b7:19:f1:24:af:70:1c:88:7d:
         f0:2f:d1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:00 2026 by rpki-client