This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/PtaIwv6j_fRPhVi8J0-7j605lCI.roa
File:                     PtaIwv6j_fRPhVi8J0-7j605lCI.roa (raw, json)
Hash identifier:          TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=
Subject key identifier:   3E:D6:88:C2:FE:A3:FD:F4:4F:85:58:BC:27:4F:BB:8F:AD:39:94:22
Certificate issuer:       /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial:       019B77C70D7999778EC81F585E26C7EC5BC2
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/PtaIwv6j_fRPhVi8J0-7j605lCI.roa
Signing time:             Thu 01 Jan 2026 04:18:12 +0000
ROA not before:           Thu 01 Jan 2026 04:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59393
IP address blocks:        91.235.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:0d:79:99:77:8e:c8:1f:58:5e:26:c7:ec:5b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
        Validity
            Not Before: Jan  1 04:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3ed688c2fea3fdf44f8558bc274fbb8fad399422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:1f:7c:17:f6:4a:18:2b:ec:69:d7:e1:70:
                    44:48:d7:39:32:e2:5f:cb:10:cd:ce:80:5e:a8:7c:
                    d3:75:1f:cc:a1:c6:62:0b:af:fb:74:26:6e:91:ef:
                    66:4d:c8:cc:2a:cf:a8:ac:c2:de:09:9f:b1:78:24:
                    75:90:16:c9:73:2a:27:bb:76:20:8c:0d:f5:8c:e1:
                    37:ed:aa:06:a4:5a:92:9a:82:e5:4a:8b:dc:27:1f:
                    6d:72:d1:0b:73:a1:63:b6:72:36:ad:48:c2:68:3e:
                    8c:5b:30:ac:9b:5a:32:ea:8e:52:74:8f:78:9f:dc:
                    1a:a0:8d:2c:fe:64:9c:05:7b:4a:b4:be:dd:ed:e0:
                    45:a8:cd:0a:54:0b:b1:5a:91:05:e0:c6:df:89:29:
                    d2:e3:a3:62:39:bc:c4:69:32:ea:9e:76:da:03:b6:
                    0a:f0:06:7f:86:5d:4f:f7:b6:9b:4b:4e:5f:65:a0:
                    67:f7:5a:11:c8:eb:6b:46:29:19:36:99:ac:53:b9:
                    38:14:a0:44:2b:5f:f8:70:95:d0:37:e9:2a:f5:07:
                    7c:74:59:f0:96:e9:c6:c0:01:84:d7:d9:ee:8c:f3:
                    12:3a:b8:3b:a4:71:6e:2c:09:3b:4d:6e:ce:9c:99:
                    78:17:15:ec:f0:fa:a2:d7:85:82:4b:b6:87:35:aa:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D6:88:C2:FE:A3:FD:F4:4F:85:58:BC:27:4F:BB:8F:AD:39:94:22
            X509v3 Authority Key Identifier:
                keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/PtaIwv6j_fRPhVi8J0-7j605lCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.235.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:05:70:1f:4f:43:11:24:a0:68:b8:9c:b0:cc:39:37:0e:
         d9:0b:a0:b0:d8:14:ab:1b:8f:2b:df:3f:e1:62:a2:f2:9b:71:
         27:8a:ed:90:e8:5b:4a:e8:0b:c7:88:07:ce:23:1d:31:16:a1:
         97:7f:51:6b:0a:1b:85:e8:d0:37:5c:c2:11:0b:03:43:c0:b1:
         a1:1a:b6:5a:69:4d:75:9d:62:de:62:13:a6:fa:2f:f5:1b:44:
         31:f0:b0:64:b3:98:00:ef:a0:2f:25:5a:0e:da:f5:11:38:73:
         1a:2e:a5:5d:d1:45:65:22:f8:1d:68:40:94:ee:f5:33:9d:75:
         57:d1:85:d7:64:d7:90:60:5e:a7:eb:24:78:b7:d3:34:ae:5b:
         5c:c1:b0:a9:c8:e5:13:9a:aa:a6:e3:25:81:4f:c6:1e:79:72:
         79:4b:3d:fc:8e:0d:d0:61:6b:0b:c3:a7:ff:b0:68:12:29:de:
         03:e0:45:d0:48:de:92:a7:47:28:ce:a1:6c:05:45:dc:d1:8b:
         9e:69:70:5a:1c:c6:19:ec:5f:4c:df:de:98:c6:e1:ec:33:b7:
         c0:07:da:40:6e:76:2c:1d:1e:23:86:da:ba:16:6a:87:c3:40:
         8e:35:af:60:d7:90:df:ea:c9:ec:fe:14:f6:d4:32:45:1b:e0:
         ff:e1:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 12:40:47 2026 by rpki-client