This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/Blotrpr7MpBhfTIOMAd4QzI4MTU.roa
File:                     Blotrpr7MpBhfTIOMAd4QzI4MTU.roa (raw, json)
Hash identifier:          7tg4tSbcWIkD3S9S1Cn28G+hcZYO6KUz7cO5Ike+MUg=
Subject key identifier:   06:5A:2D:AE:9A:FB:32:90:61:7D:32:0E:30:07:78:43:32:38:31:35
Certificate issuer:       /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial:       019B7B362B413074CF50011520A255DE2BB6
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/Blotrpr7MpBhfTIOMAd4QzI4MTU.roa
Signing time:             Thu 01 Jan 2026 20:18:26 +0000
ROA not before:           Thu 01 Jan 2026 20:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15404
IP address blocks:        91.213.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:2b:41:30:74:cf:50:01:15:20:a2:55:de:2b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594b79990f616a8344c860148fc922910e154dad
        Validity
            Not Before: Jan  1 20:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=065a2dae9afb3290617d320e3007784332383135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:67:8a:c3:58:a6:c2:11:79:8b:af:29:a4:
                    05:c5:d5:43:97:92:98:8f:32:6e:82:32:55:52:46:
                    cb:4e:99:fb:a2:84:bf:03:09:f0:3c:1f:e5:da:97:
                    7e:55:ec:23:f3:4b:82:48:8e:b9:06:4b:2e:ce:34:
                    e9:5e:c6:28:6a:43:5b:ca:4f:f8:95:8c:7c:60:cc:
                    d2:cd:82:70:92:57:56:cf:17:ed:65:49:dd:f7:8a:
                    c7:07:e1:e3:85:48:db:25:13:ed:21:26:cc:1b:4a:
                    16:55:37:eb:e6:2b:49:3d:6b:11:c9:ae:bb:54:1a:
                    b0:5e:be:08:d8:c1:61:8a:bd:2f:a0:04:92:60:b6:
                    03:12:71:6b:aa:15:b3:fa:17:bf:2f:8f:83:b2:99:
                    fe:16:e9:31:6d:d4:9f:e6:5f:86:e2:f4:d0:97:0a:
                    04:64:4a:e9:a2:53:ca:e9:22:b3:fe:43:78:58:79:
                    d1:c2:79:6f:8f:27:48:16:39:03:c6:53:27:bc:22:
                    53:6f:c1:22:73:8f:26:bf:19:ab:0a:91:ac:26:44:
                    d8:52:df:eb:5d:49:ed:28:b9:7b:89:eb:64:1c:a2:
                    6c:6c:e2:02:c5:18:5a:e8:7e:8e:e0:c7:59:21:cb:
                    85:99:88:72:ec:4c:5b:6c:26:8f:8e:c6:14:4f:a9:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5A:2D:AE:9A:FB:32:90:61:7D:32:0E:30:07:78:43:32:38:31:35
            X509v3 Authority Key Identifier:
                keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/Blotrpr7MpBhfTIOMAd4QzI4MTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:98:99:05:2a:1b:ad:f7:e3:68:f9:28:5d:c7:23:69:53:
         64:44:b5:04:f7:d7:c4:65:8a:1e:da:63:e0:c6:7f:0f:2c:0b:
         24:b1:91:4c:3f:8f:85:6a:dc:62:6c:11:40:06:3e:39:c8:e4:
         f6:7c:bf:6c:0b:86:d1:7a:a7:ab:7c:77:f0:9a:98:6c:65:4f:
         43:dd:4e:3f:00:3b:e6:a9:b6:0e:5b:3d:e8:fb:86:29:33:a4:
         b7:c1:d9:12:62:94:42:c3:4b:37:0d:25:41:4a:27:42:2f:2d:
         22:9d:4e:11:1c:b4:f0:c9:7e:3b:7a:56:79:b2:eb:d5:65:72:
         25:16:39:fd:83:21:2b:fc:81:57:12:96:97:e3:a0:68:6f:64:
         14:a9:05:6a:d3:72:bf:25:93:e8:0b:6b:99:35:b5:da:ae:ca:
         3a:37:05:e8:16:1a:e1:0f:1b:5d:5a:65:bf:8e:6b:ef:b4:d0:
         29:98:3a:37:5c:d8:d2:cd:73:d0:d0:d7:86:cc:6d:4f:43:15:
         98:c5:93:66:13:12:40:be:75:4c:80:a4:e1:50:89:1c:d5:69:
         5f:51:5d:74:4d:fd:89:7f:e1:f9:46:cc:50:66:c1:a2:33:8e:
         14:e5:d2:f4:d0:b6:a5:e3:6f:4f:11:26:aa:9f:32:9f:08:f7:
         23:3e:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:18:01 2026 by rpki-client