This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/6g9Sdo-eJYElfuGgjU1PsahjZn8.roa
File:                     6g9Sdo-eJYElfuGgjU1PsahjZn8.roa (raw, json)
Hash identifier:          Q4WRD5ukCrgnTo+xu8mbOedNwPrNG14LcRDJEgtOWxI=
Subject key identifier:   EA:0F:52:76:8F:9E:25:81:25:7E:E1:A0:8D:4D:4F:B1:A8:63:66:7F
Certificate issuer:       /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial:       019B791103717283B6E0F37279C9015C90C8
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/6g9Sdo-eJYElfuGgjU1PsahjZn8.roa
Signing time:             Thu 01 Jan 2026 10:18:36 +0000
ROA not before:           Thu 01 Jan 2026 10:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198472
IP address blocks:        91.235.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:03:71:72:83:b6:e0:f3:72:79:c9:01:5c:90:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
        Validity
            Not Before: Jan  1 10:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea0f52768f9e2581257ee1a08d4d4fb1a863667f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:0b:cc:c8:b6:f3:a1:84:77:fa:63:ba:52:
                    de:fe:32:1f:4d:62:21:85:83:c6:60:e0:ca:5b:ad:
                    22:03:9e:8b:76:ca:de:3e:9c:89:d2:31:58:da:4d:
                    49:45:69:f3:cd:b4:ad:34:f9:ef:cc:c0:74:04:e5:
                    2a:9c:36:a4:1e:36:72:a1:d7:43:c3:bd:c7:65:88:
                    b8:51:82:7c:f7:f3:d1:b0:0b:0b:35:0b:5d:42:ff:
                    1d:6f:88:cd:41:47:ea:76:bd:d6:53:cc:ee:2e:8b:
                    a3:93:76:95:18:53:39:e2:8a:86:4b:75:36:8f:1e:
                    f1:51:88:f6:c3:e5:36:f6:97:ba:ec:8c:52:f0:72:
                    4d:a8:40:cf:26:1a:53:65:3c:e9:ff:77:90:14:3b:
                    1a:94:ca:a0:f5:5e:ec:99:9e:23:d5:19:90:e2:c2:
                    19:d8:7a:65:4f:02:09:4a:03:f0:cc:1d:48:75:64:
                    0e:21:31:7a:1d:87:c3:a4:6b:da:d4:40:dd:e4:36:
                    2a:50:fd:2b:47:7f:1a:66:06:fb:58:98:93:7c:a6:
                    0f:5a:29:50:1a:ed:39:91:28:dc:a7:7a:a2:99:b1:
                    88:aa:e5:d3:88:64:8c:0b:a7:58:96:8f:e2:82:0f:
                    af:a0:20:8c:2a:cf:1b:88:90:fa:6c:4f:46:13:5f:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0F:52:76:8F:9E:25:81:25:7E:E1:A0:8D:4D:4F:B1:A8:63:66:7F
            X509v3 Authority Key Identifier:
                keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/6g9Sdo-eJYElfuGgjU1PsahjZn8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.235.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:52:51:cf:42:0c:73:2a:1f:9e:09:eb:5f:e5:2c:02:d4:f4:
         43:f4:f8:e0:ae:60:fe:0a:13:31:75:cc:48:31:a4:c8:26:04:
         b1:ee:95:52:87:54:69:f2:bc:e6:2b:6a:2a:a5:f9:8f:f7:19:
         d5:50:0a:09:a4:ad:17:ce:28:6c:14:5f:87:0b:b1:4a:d2:1d:
         f4:3c:24:01:cb:77:48:bd:4e:80:1d:68:89:a5:44:98:c6:34:
         38:3e:11:2e:db:1d:c9:5e:d5:47:74:57:8f:b9:cf:50:92:f5:
         27:ad:df:0f:7a:f6:c3:61:dc:5b:93:fb:fc:bf:c5:72:f5:22:
         42:3b:ec:69:14:42:fb:06:29:46:10:bd:13:34:10:93:ae:f1:
         ff:83:59:3a:0d:a8:44:71:c4:e9:4e:a5:c7:6c:19:28:2c:5d:
         d6:5c:bc:7b:2a:20:61:04:3e:e9:13:14:06:65:46:87:6d:1a:
         44:9f:ee:33:51:f7:a9:d9:f4:b8:e0:13:b4:e0:65:61:0d:31:
         df:c4:bd:73:52:a2:83:ed:8e:5a:de:d9:0e:26:8c:cf:34:bd:
         6b:8c:b0:e9:77:ac:76:90:cc:ea:0c:5b:05:b8:6e:13:27:51:
         c8:1c:e3:b3:de:7f:a2:87:7e:eb:24:19:01:57:b1:cc:9c:c4:
         d7:e5:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:50 2026 by rpki-client