This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/_ab5WyJA5yqOk-0Js4gZuGEa-fM.roa
File:                     _ab5WyJA5yqOk-0Js4gZuGEa-fM.roa (raw, json)
Hash identifier:          FHDO4ipYFvqzvb+xj5a1Mq5hKmAgkterhZxgIwP7S34=
Subject key identifier:   FD:A6:F9:5B:22:40:E7:2A:8E:93:ED:09:B3:88:19:B8:61:1A:F9:F3
Certificate issuer:       /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial:       019B7910A462EFAC22C36FF6C4CCFD691B9E
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/_ab5WyJA5yqOk-0Js4gZuGEa-fM.roa
Signing time:             Thu 01 Jan 2026 10:18:12 +0000
ROA not before:           Thu 01 Jan 2026 10:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44664
IP address blocks:        91.202.144.0/22 maxlen: 22
                          91.202.144.0/24 maxlen: 24
                          91.202.145.0/24 maxlen: 24
                          91.202.146.0/24 maxlen: 24
                          91.202.147.0/24 maxlen: 24
                          91.225.56.0/22 maxlen: 22
                          91.225.56.0/24 maxlen: 24
                          91.225.57.0/24 maxlen: 24
                          91.225.58.0/24 maxlen: 24
                          91.225.59.0/24 maxlen: 24
                          91.247.224.0/22 maxlen: 22
                          91.247.224.0/24 maxlen: 24
                          91.247.225.0/24 maxlen: 24
                          91.247.226.0/24 maxlen: 24
                          91.247.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:a4:62:ef:ac:22:c3:6f:f6:c4:cc:fd:69:1b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
        Validity
            Not Before: Jan  1 10:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fda6f95b2240e72a8e93ed09b38819b8611af9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:4e:3a:01:05:e5:a6:96:fa:33:ac:f8:e1:
                    ab:a1:9c:e8:50:e8:16:94:13:71:5b:f2:f2:bb:a1:
                    96:fe:4f:99:98:11:51:b2:96:c7:e7:fd:df:b1:3a:
                    59:2d:87:70:64:08:14:87:a1:3b:73:a7:37:b2:24:
                    8e:31:7b:4e:59:66:db:e1:85:89:35:df:1a:96:a3:
                    9d:4d:f7:07:e4:df:f5:44:c7:77:e3:f4:c3:7b:89:
                    75:03:7f:a1:22:88:a2:2e:bc:5c:c9:a1:d1:cf:f9:
                    5f:b0:a9:12:cc:ca:a7:c4:99:0f:d9:41:84:b9:6b:
                    18:2e:83:9e:92:d7:3a:4c:bb:0a:6b:84:3c:6d:79:
                    79:ad:de:fb:37:9c:f9:ab:13:1a:24:00:41:eb:53:
                    11:bb:2b:0e:83:8e:b9:67:3b:ad:f0:ea:ed:e3:42:
                    38:1b:e3:26:56:0f:78:d2:c1:91:57:4f:4c:bd:49:
                    dd:86:b0:e5:82:c2:dd:ad:99:51:5e:a2:45:06:9e:
                    6e:05:b4:9b:38:bb:ea:69:a4:79:a4:47:2d:13:b7:
                    bf:5a:61:df:5b:53:e6:4c:2b:14:fe:fd:af:bf:43:
                    80:bf:f5:b2:de:7c:91:d1:20:1a:44:24:5c:22:93:
                    a7:a5:b7:f3:d3:31:1a:d3:58:93:3d:e1:29:0d:d9:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A6:F9:5B:22:40:E7:2A:8E:93:ED:09:B3:88:19:B8:61:1A:F9:F3
            X509v3 Authority Key Identifier:
                keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/_ab5WyJA5yqOk-0Js4gZuGEa-fM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.202.144.0/22
                  91.225.56.0/22
                  91.247.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:f9:e5:73:5a:9b:43:62:e4:87:36:5c:55:98:73:e1:03:33:
         1a:24:7f:23:0f:b1:33:b4:7a:68:ef:ad:1a:c8:48:06:46:b6:
         bb:73:75:03:3e:af:12:0a:fa:5d:04:3d:7a:e7:11:d7:ce:a9:
         f6:56:28:cd:8d:70:4e:c2:d0:70:dc:e3:67:09:57:93:2a:49:
         cf:39:e9:4e:09:dd:0f:0e:e1:13:69:72:f2:14:e0:ef:fb:4f:
         2a:0a:cd:d1:a1:3b:42:b0:a6:84:c9:a2:d6:95:2e:d4:6c:7b:
         b9:66:d9:13:4b:bd:b8:22:1c:90:a1:f3:30:98:f0:da:e9:ea:
         6f:cc:f9:9c:80:b8:4d:29:ff:41:7b:5b:28:ba:86:1a:63:48:
         93:8e:98:35:34:00:e5:cd:a7:a5:1e:71:d9:72:07:15:e1:2d:
         69:ad:54:a5:6c:f7:43:4c:24:d3:36:af:7b:af:5d:b5:e9:09:
         e3:f2:25:12:b6:fd:ee:7b:73:19:13:29:5e:d3:c7:7e:3d:a0:
         7f:a1:f9:ad:57:93:dd:b4:1a:7b:e2:44:6d:8d:ab:f8:5b:c3:
         f0:16:e2:0e:43:8e:cd:c2:3c:2b:21:1d:8d:3d:13:45:9f:d3:
         ca:ef:8b:7e:d7:77:43:a1:32:73:54:fd:64:50:3b:92:21:3e:
         78:0a:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:21 2026 by rpki-client