This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/prj-gjU2FJGtEVAkFqN1UEoiuck.roa
File:                     prj-gjU2FJGtEVAkFqN1UEoiuck.roa (raw, json)
Hash identifier:          MBD1FKmACbSwTw7FTssOYwGdssDUFI7ku4bKYJP3LtI=
Subject key identifier:   A6:B8:FE:82:35:36:14:91:AD:11:50:24:16:A3:75:50:4A:22:B9:C9
Certificate issuer:       /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial:       019B7758F21E4814567D723302A58BFF3C37
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/prj-gjU2FJGtEVAkFqN1UEoiuck.roa
Signing time:             Thu 01 Jan 2026 02:17:56 +0000
ROA not before:           Thu 01 Jan 2026 02:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41751
IP address blocks:        91.206.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:f2:1e:48:14:56:7d:72:33:02:a5:8b:ff:3c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
        Validity
            Not Before: Jan  1 02:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6b8fe8235361491ad11502416a375504a22b9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:bc:39:7a:9f:04:aa:d1:75:65:e7:f2:37:
                    10:2f:a3:3f:39:4a:ab:a2:9d:eb:1d:09:61:15:65:
                    06:b4:ae:b2:62:5b:e7:a9:77:ed:2f:b7:d3:01:08:
                    64:56:80:59:f2:61:6e:db:f5:ee:e8:55:bf:13:c0:
                    d2:48:d9:42:f4:0d:3b:79:94:11:16:89:74:cd:d7:
                    91:80:f4:1a:e1:01:0b:96:28:93:0d:3e:30:48:64:
                    66:fd:10:e0:32:2f:a4:31:12:e0:3c:eb:23:2b:12:
                    ee:04:58:f4:f5:44:82:66:7f:c8:b6:96:c6:a2:ef:
                    61:af:85:4d:0d:22:c4:0d:f5:1b:a9:37:bc:21:4a:
                    89:c7:09:f2:e3:49:4c:c3:74:69:f6:f7:a0:e9:18:
                    08:a5:dc:d7:88:f8:53:37:2d:b5:7e:52:59:2b:72:
                    1d:4b:9d:cb:32:ea:33:1f:7d:17:82:4a:66:e6:77:
                    97:f9:d7:3b:33:a1:e8:a8:c4:58:5d:fc:d8:b5:38:
                    b5:de:95:6d:3e:5d:4b:be:37:cf:d9:e5:4c:e2:f6:
                    5e:d8:39:f8:69:b3:b2:a1:84:a4:78:80:c7:64:33:
                    00:9e:e8:3c:09:35:ae:8d:dd:02:a6:76:b3:24:7d:
                    a2:41:29:35:65:98:6c:9f:8b:b8:ed:47:dd:84:2e:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B8:FE:82:35:36:14:91:AD:11:50:24:16:A3:75:50:4A:22:B9:C9
            X509v3 Authority Key Identifier:
                keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/prj-gjU2FJGtEVAkFqN1UEoiuck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:94:36:2f:33:4c:5b:ca:98:d8:a9:9b:5b:0f:f8:77:d5:fe:
         26:87:fd:0a:ec:05:f6:b5:6e:e9:2d:3d:9e:f6:94:6d:0f:52:
         3b:cf:de:ca:26:13:0e:c1:fb:33:04:72:17:12:29:9c:24:db:
         82:b4:32:fe:97:6d:67:15:4f:49:5a:49:5e:5f:46:22:2c:fa:
         03:6d:5c:cb:24:ff:8e:64:16:c0:89:44:d7:6c:b0:77:74:65:
         f5:ff:13:2a:49:45:c0:74:db:e6:cb:aa:8d:f3:c2:f8:24:d1:
         59:3b:0f:e0:40:3b:0c:cf:b9:53:ac:04:94:95:2e:e6:b1:c1:
         33:a7:5c:58:73:b4:d9:58:d8:48:74:61:1d:5d:8a:3d:d6:c6:
         bb:67:79:52:c1:44:a7:ab:7b:dd:f4:44:82:f0:a2:26:c0:d8:
         f9:fc:3b:bf:79:73:3e:30:10:96:d9:6e:8e:c0:e9:c9:7e:3c:
         d4:85:45:aa:f1:d8:3b:db:01:bc:cc:a8:a2:13:bc:37:93:0a:
         0c:d0:60:ca:0a:88:0b:6c:c9:b5:88:83:a3:db:05:54:b9:68:
         1c:48:c1:57:1b:20:89:0f:9a:5d:71:ef:c3:d6:af:de:33:c9:
         51:69:15:db:fb:b6:27:5c:22:76:6d:cc:b1:08:02:67:75:1d:
         b4:98:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:20 2026 by rpki-client