This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/m31omT_27UL9_8TqT3dZ0O1Xy54.roa
File:                     m31omT_27UL9_8TqT3dZ0O1Xy54.roa (raw, json)
Hash identifier:          rFLDJzjWnty+Ky2kZezUhQGZshkPkxWj6t4wCRGgxlE=
Subject key identifier:   9B:7D:68:99:3F:F6:ED:42:FD:FF:C4:EA:4F:77:59:D0:ED:57:CB:9E
Certificate issuer:       /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial:       019B79ECC496E434B1BB5CF3D17E5BE0FCEA
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/m31omT_27UL9_8TqT3dZ0O1Xy54.roa
Signing time:             Thu 01 Jan 2026 14:18:38 +0000
ROA not before:           Thu 01 Jan 2026 14:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42344
IP address blocks:        91.142.32.0/20 maxlen: 20
                          185.18.144.0/22 maxlen: 22
                          185.107.8.0/22 maxlen: 22
                          2a01:418::/32 maxlen: 32
                          2a06:3fc0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:c4:96:e4:34:b1:bb:5c:f3:d1:7e:5b:e0:fc:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
        Validity
            Not Before: Jan  1 14:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b7d68993ff6ed42fdffc4ea4f7759d0ed57cb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:47:9f:50:3e:a8:50:f1:9e:69:22:ab:2e:
                    63:cd:de:8e:01:92:96:ff:88:3f:8e:22:d3:67:ef:
                    cd:f3:00:fc:c8:37:d6:53:6d:4a:00:e0:41:dd:da:
                    3f:5d:ec:df:84:1a:17:0c:36:35:8f:7e:09:75:7c:
                    50:38:d5:e8:94:43:69:b7:f6:74:5b:f9:fc:e0:ed:
                    78:79:16:86:6a:ae:9c:99:c3:87:6a:dc:8a:24:12:
                    8e:8b:f9:41:eb:e2:12:29:a2:9b:9e:82:68:38:e2:
                    16:c4:3e:7e:05:b2:9d:86:50:ef:a5:00:b6:ba:23:
                    29:9f:98:3f:f3:00:ab:1e:b4:c8:c8:e1:43:c3:22:
                    ca:f8:7c:fc:4f:e6:38:43:8d:bb:b0:ff:fa:fa:f9:
                    b5:08:3f:ea:d6:91:af:fc:69:92:54:cc:16:ce:57:
                    64:83:0d:ff:fb:a0:06:93:74:68:48:6d:26:37:37:
                    0d:be:1e:45:61:a9:56:cc:39:63:f5:24:9d:23:c0:
                    ec:0c:16:57:fd:07:38:f6:f6:b7:3d:e3:c8:4a:cf:
                    4b:9a:6c:32:56:3b:c4:4c:6b:2a:cd:a8:0b:fe:86:
                    f5:02:49:dd:06:ec:b3:a4:0f:6b:ed:e6:92:0d:33:
                    d6:50:7d:2f:75:b6:47:b6:ec:b4:a8:f9:e9:f8:59:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:68:99:3F:F6:ED:42:FD:FF:C4:EA:4F:77:59:D0:ED:57:CB:9E
            X509v3 Authority Key Identifier:
                keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/m31omT_27UL9_8TqT3dZ0O1Xy54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.142.32.0/20
                  185.18.144.0/22
                  185.107.8.0/22
                IPv6:
                  2a01:418::/32
                  2a06:3fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:3d:d5:c8:6f:a3:32:cd:d2:e8:c9:e1:48:18:7c:ce:8d:4f:
         2b:93:9e:f6:f4:79:98:1f:ea:ef:db:96:71:3f:2e:65:98:8c:
         6e:c4:cc:1f:32:1f:1e:5d:e2:cc:e3:63:fc:b6:a9:3c:43:bf:
         d2:ca:50:ce:b1:fc:36:0d:b6:ab:98:23:51:b3:99:9a:1f:08:
         1d:aa:2a:97:cd:9d:ac:ba:03:a5:8c:f3:df:da:19:23:1b:01:
         bb:cd:7f:5d:9d:73:67:2f:47:9a:99:f3:b6:ce:a9:b5:95:fc:
         55:1c:97:b9:f2:8c:f0:8e:b5:f2:20:35:c4:a9:19:4b:d1:98:
         06:8d:1d:43:fe:31:63:63:ae:d4:c7:1f:bf:0e:f6:50:c1:db:
         ac:f1:93:df:a2:3b:ee:af:ca:86:19:cb:a6:b4:dc:95:a2:e5:
         37:25:78:05:41:d8:35:39:f0:42:ca:b7:36:2d:13:4e:5f:54:
         ab:23:da:29:24:49:0c:90:03:89:fe:d3:08:00:81:00:e0:c1:
         cc:67:b8:f1:28:54:41:84:eb:27:27:1c:5b:4c:56:0b:09:62:
         49:8a:7d:bf:be:b7:32:c3:0e:90:4c:7f:f4:ff:2f:5f:f5:08:
         c2:ab:b8:3d:05:04:7b:3b:7f:a9:20:59:41:19:92:4c:99:d4:
         6f:df:76:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:41 2026 by rpki-client