This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/69rAqslmUNQ4jxhqRukN3nUhlgk.roa
File:                     69rAqslmUNQ4jxhqRukN3nUhlgk.roa (raw, json)
Hash identifier:          IDmbzyv/bIKti6JCgd65/6aVCqu//LwD+RovZywUSK8=
Subject key identifier:   EB:DA:C0:AA:C9:66:50:D4:38:8F:18:6A:46:E9:0D:DE:75:21:96:09
Certificate issuer:       /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial:       019B7D5BC6FA8CBC15AC314F811EF83CF58E
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/69rAqslmUNQ4jxhqRukN3nUhlgk.roa
Signing time:             Fri 02 Jan 2026 06:18:45 +0000
ROA not before:           Fri 02 Jan 2026 06:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51654
IP address blocks:        91.220.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:c6:fa:8c:bc:15:ac:31:4f:81:1e:f8:3c:f5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
        Validity
            Not Before: Jan  2 06:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ebdac0aac96650d4388f186a46e90dde75219609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:d2:1c:80:9a:ca:1a:8c:ab:b6:97:98:98:
                    0e:4b:2b:ea:12:8a:bc:2f:04:b4:3e:2e:34:fb:45:
                    f4:f6:9e:52:0e:c9:ac:75:b2:2e:28:0a:62:f7:00:
                    e8:eb:74:00:08:4d:83:5f:98:97:ea:a3:e7:60:15:
                    69:fa:97:8d:19:36:01:a8:6f:d9:08:ba:88:41:67:
                    15:7c:07:94:5d:67:0c:db:f3:d6:09:6d:7c:7a:d2:
                    40:18:fe:cf:80:a9:56:12:20:94:4b:10:57:78:75:
                    41:9d:9d:cb:27:06:b3:2e:53:3e:18:0d:98:ab:37:
                    98:6d:dc:f9:bc:a0:a2:3d:73:d5:cd:03:7b:9f:63:
                    7c:de:c1:34:da:13:3f:58:fa:af:04:53:29:e8:bd:
                    a0:f4:93:9a:79:38:00:cc:41:d0:ce:3a:c8:1f:a1:
                    98:fb:8d:2b:f0:f6:b3:35:a9:05:f3:2f:49:53:31:
                    d4:6d:6a:71:ef:e9:01:bd:bc:0e:e3:f5:6a:4c:23:
                    a4:74:df:56:ce:ac:eb:3f:bd:b0:4d:d1:44:6f:83:
                    05:0e:8b:c0:75:81:8a:2a:a8:d2:e6:38:90:b5:4d:
                    2e:c5:14:4e:e2:22:45:27:97:00:f3:bb:4b:f1:87:
                    60:54:23:49:fd:9c:4d:a5:01:69:79:88:25:b1:07:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:C0:AA:C9:66:50:D4:38:8F:18:6A:46:E9:0D:DE:75:21:96:09
            X509v3 Authority Key Identifier:
                keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/69rAqslmUNQ4jxhqRukN3nUhlgk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.220.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b4:35:0b:70:ad:d7:70:45:f1:ad:e5:06:d4:41:18:38:fa:
         e1:17:fa:df:db:3f:b8:9b:01:44:38:ca:69:8f:80:26:75:7d:
         db:a5:dd:f3:25:54:5b:a3:62:a8:da:84:7a:03:59:3a:1b:af:
         ad:7d:7f:24:47:08:d1:62:7d:c5:91:21:c2:3a:2f:4a:cd:d9:
         d5:f7:d2:33:d4:76:3e:3f:a9:f4:20:3d:78:0f:06:d6:6e:91:
         78:da:3f:6e:a2:17:2c:79:ac:99:16:7b:9f:86:de:4e:42:bd:
         0d:b9:8e:06:b6:84:c2:61:62:53:e0:b5:68:cb:ce:92:03:97:
         02:1a:53:63:2b:06:a1:b8:cd:7c:d1:0f:39:e6:08:b4:4c:ea:
         be:12:38:77:31:96:3b:3f:eb:9f:a8:f2:9b:de:93:68:62:b4:
         24:49:43:fd:9b:3b:da:7b:00:f7:33:3f:95:5f:37:93:a8:47:
         57:53:05:35:f8:d3:61:ff:00:4f:cc:be:6e:74:37:52:8c:27:
         eb:b3:3d:e5:e5:72:43:1e:f7:35:72:62:38:9a:75:cc:d3:6c:
         58:0e:2e:24:49:35:9b:00:dd:74:10:0f:11:a0:67:71:3b:ef:
         95:72:fd:70:a3:aa:b5:12:d0:e5:50:74:80:0b:1c:83:db:b7:
         8c:b3:43:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W8b6jLwVrDFPgR74PPWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjg2YjdiYjAwYTQ0MmUwOGNiM2I4NWE2M2U3YjQ4NDg3
NDJlNzYwHhcNMjYwMTAyMDYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmRhYzBhYWM5NjY1MGQ0Mzg4ZjE4NmE0NmU5MGRkZTc1MjE5NjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNrSHICayhqMq7aXmJgOSyvqEoq8
LwS0Pi40+0X09p5SDsmsdbIuKApi9wDo63QACE2DX5iX6qPnYBVp+peNGTYBqG/Z
CLqIQWcVfAeUXWcM2/PWCW18etJAGP7PgKlWEiCUSxBXeHVBnZ3LJwazLlM+GA2Y
qzeYbdz5vKCiPXPVzQN7n2N83sE02hM/WPqvBFMp6L2g9JOaeTgAzEHQzjrIH6GY
+40r8PazNakF8y9JUzHUbWpx7+kBvbwO4/VqTCOkdN9WzqzrP72wTdFEb4MFDovA
dYGKKqjS5jiQtU0uxRRO4iJFJ5cA87tL8YdgVCNJ/ZxNpQFpeYglsQeq9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvawKrJZlDUOI8YakbpDd51IZYJMB8GA1UdIwQY
MBaAFG64a3uwCkQuCMs7haY+e0hIdC52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUt
MDc3OTAyOWFlMjIyLzEvNjlyQXFzbG1VTlE0anhocVJ1a04zblVobGdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iODFlNmUtMmZlZi00NjRjLTg5MzUtMDc3OTAyOWFlMjIy
LzEvYnJocmU3QUtSQzRJeXp1RnBqNTdTRWgwTG5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9waMA0G
CSqGSIb3DQEBCwUAA4IBAQBWtDULcK3XcEXxreUG1EEYOPrhF/rf2z+4mwFEOMpp
j4AmdX3bpd3zJVRbo2Ko2oR6A1k6G6+tfX8kRwjRYn3FkSHCOi9KzdnV99Iz1HY+
P6n0ID14DwbWbpF42j9uohcseayZFnufht5OQr0NuY4GtoTCYWJT4LVoy86SA5cC
GlNjKwahuM180Q855gi0TOq+Ejh3MZY7P+ufqPKb3pNoYrQkSUP9mzvaewD3Mz+V
XzeTqEdXUwU1+NNh/wBPzL5udDdSjCfrsz3l5XJDHvc1cmI4mnXM02xYDi4kSTWb
AN10EA8RoGdxO++Vcv1wo6q1EtDlUHSACxyD27eMs0PM
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:05:22 2026 by rpki-client