This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/1-1E1uif61o8C4HWLXAligJFDeqQ.roa
File:                     1-1E1uif61o8C4HWLXAligJFDeqQ.roa (raw, json)
Hash identifier:          D5F7YAusAftPV7C9tS7ICY1e2xvUA57jsFdWv4x/B44=
Subject key identifier:   FB:51:35:BA:27:FA:D6:8F:02:E0:75:8B:5C:09:62:80:91:43:7A:A4
Certificate issuer:       /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial:       019B7F857A4C556BEDE7A487245072C302EF
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/1-1E1uif61o8C4HWLXAligJFDeqQ.roa
Signing time:             Fri 02 Jan 2026 16:23:32 +0000
ROA not before:           Fri 02 Jan 2026 16:23:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58186
IP address blocks:        91.192.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:7a:4c:55:6b:ed:e7:a4:87:24:50:72:c3:02:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
        Validity
            Not Before: Jan  2 16:23:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fb5135ba27fad68f02e0758b5c09628091437aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d7:b9:0b:98:7a:72:34:4b:73:76:66:39:b7:
                    b0:08:f1:ac:e8:b5:8c:d4:54:67:d0:2e:55:ba:90:
                    43:c4:3b:4e:5a:86:65:0d:5e:e9:54:77:76:a5:30:
                    ca:2e:b5:63:0a:2a:3a:df:0b:a8:d6:41:11:31:4b:
                    75:96:8b:16:07:eb:5b:d4:1a:74:b1:9c:48:7b:cd:
                    c6:83:7f:18:05:74:68:1e:bc:f3:9e:7f:a1:2d:bc:
                    2b:5b:08:97:01:bf:57:d7:4c:c7:a2:8a:cb:15:d0:
                    01:d7:31:21:67:ed:36:85:41:39:a0:b3:80:57:a5:
                    c9:a2:85:52:25:c9:4c:6b:0f:b9:a6:10:be:dc:76:
                    c4:66:13:08:93:d9:f4:93:9e:02:ad:e2:40:00:f5:
                    d8:03:6b:4a:1a:48:10:ff:06:6a:0a:ac:b9:22:13:
                    cf:fe:8e:ad:b3:92:d5:c2:9c:17:66:1b:4d:88:de:
                    9c:92:fe:a5:58:b2:fb:e4:78:90:04:12:5a:b2:8e:
                    81:c5:20:20:e3:f9:b2:ad:5f:ff:f1:01:7b:f8:d2:
                    f2:0e:78:2b:ab:a8:ae:6c:15:96:3c:cb:4b:c3:4e:
                    90:15:fe:5a:bf:db:9d:31:5c:c7:37:a4:dd:9b:db:
                    e0:91:fa:da:f7:58:8a:a2:22:f6:82:89:98:10:17:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:51:35:BA:27:FA:D6:8F:02:E0:75:8B:5C:09:62:80:91:43:7A:A4
            X509v3 Authority Key Identifier:
                keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/1-1E1uif61o8C4HWLXAligJFDeqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9c:5f:0d:4e:dd:eb:b3:89:39:ba:5e:b2:d0:6a:74:ea:5e:
         77:54:63:97:76:5d:7e:54:f6:ba:58:50:2b:19:e6:ed:91:8f:
         99:2f:4c:d1:b7:d3:30:cc:f2:fe:59:f9:f0:5c:ee:f3:db:a4:
         48:d6:28:b4:dc:e2:65:be:23:f9:72:44:86:4b:7f:eb:56:c8:
         06:0f:e3:35:82:41:46:48:ea:08:e3:6b:9f:ab:a3:c4:19:00:
         1a:e1:db:51:ac:1c:dd:18:91:6b:c5:05:88:d2:5d:30:2f:8c:
         ff:ab:45:0b:74:e3:c0:be:22:73:8f:78:6f:f5:f0:f4:ec:a8:
         37:40:d7:e3:83:0b:ad:4f:f4:70:be:d3:53:4b:3d:ff:d7:75:
         86:85:01:64:28:6c:6d:e5:da:ad:c3:e6:a5:a5:34:1a:03:b9:
         5a:00:0c:c4:f4:7d:d5:16:eb:4b:4e:9e:c4:14:c2:e5:cc:58:
         46:6f:e6:a9:fa:0e:e9:e0:1e:af:e2:19:91:b8:88:cd:f1:4c:
         09:5a:62:12:b0:65:6e:cf:42:a0:50:ed:52:fd:3f:33:47:23:
         06:f1:79:90:92:5b:49:92:55:be:4c:be:d0:29:ab:34:fc:30:
         32:78:fa:8a:41:db:ef:3d:39:4f:d0:5e:a6:f5:71:5e:36:03:
         6d:2c:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:15:51 2026 by rpki-client