This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/1-X9f31YmOI6sGDiMsygwz3v06EQ.roa
File:                     1-X9f31YmOI6sGDiMsygwz3v06EQ.roa (raw, json)
Hash identifier:          lBKrn9OkfPE6uE/SW8MJqqSzuyUTtFebuy/HpzOS5Gw=
Subject key identifier:   F9:7F:5F:DF:56:26:38:8E:AC:18:38:8C:B3:28:30:CF:7B:F4:E8:44
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019B7D5BBF4CAB7CB4E423CE8BE9660CFAFD
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/1-X9f31YmOI6sGDiMsygwz3v06EQ.roa
Signing time:             Fri 02 Jan 2026 06:18:43 +0000
ROA not before:           Fri 02 Jan 2026 06:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211291
IP address blocks:        87.249.61.0/24 maxlen: 24
                          87.249.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:bf:4c:ab:7c:b4:e4:23:ce:8b:e9:66:0c:fa:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Jan  2 06:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f97f5fdf5626388eac18388cb32830cf7bf4e844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:42:77:ba:ab:ac:22:f1:85:88:89:57:cb:
                    cf:4f:ae:da:f2:92:fa:b0:ef:11:86:28:2a:64:c4:
                    89:b0:76:52:ec:50:3f:ee:f5:39:a1:a9:ed:f2:b9:
                    7a:45:b6:7c:fd:2a:e6:eb:6e:c6:31:a3:a4:21:47:
                    d9:8d:14:47:03:da:06:77:51:0f:9c:8f:ab:a9:03:
                    1a:ed:55:cf:f9:5c:d3:98:d6:3c:3b:3e:ec:96:03:
                    3a:ba:1e:c2:7c:67:df:c0:9b:ad:59:9a:97:f4:ba:
                    b1:06:18:6e:65:ee:7e:cb:eb:c6:b1:e3:f4:3d:3e:
                    56:e3:96:2b:4d:a5:c0:12:60:94:6b:b5:7a:56:cf:
                    2f:f5:c8:1a:0a:3e:c8:ea:31:0f:3e:a4:0d:a8:80:
                    f2:6d:2d:63:23:27:fc:02:f1:13:6f:54:f7:16:f4:
                    01:82:18:70:3b:f5:c3:7b:46:5e:18:6f:e4:a6:86:
                    7a:33:6e:d4:5d:fd:d7:f3:76:13:3f:36:16:6d:4c:
                    8b:e5:68:3d:1b:81:42:02:92:c0:8c:d3:66:98:09:
                    59:1f:16:d6:79:00:98:49:73:3e:2b:35:1b:1f:71:
                    2c:36:86:00:68:e0:5e:95:53:ec:36:a2:5c:f5:f3:
                    be:a0:3d:df:50:09:d4:5f:97:5d:c2:59:e2:35:2f:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:5F:DF:56:26:38:8E:AC:18:38:8C:B3:28:30:CF:7B:F4:E8:44
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/1-X9f31YmOI6sGDiMsygwz3v06EQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.249.61.0-87.249.63.255

    Signature Algorithm: sha256WithRSAEncryption
         9e:99:bc:d0:b6:bd:56:c3:c6:de:71:4f:f7:ab:db:56:f7:aa:
         78:ea:23:a3:df:fb:4f:ba:f3:2b:8f:f0:b1:b7:20:24:d7:e6:
         9e:6f:40:7a:aa:f8:e6:76:fe:f9:b0:b7:ab:cc:56:42:0f:0c:
         ed:17:31:39:fb:ae:c1:65:ac:2d:5f:32:8d:ff:f2:71:be:cc:
         35:e0:23:34:50:93:1f:77:03:85:07:e5:f6:61:fc:80:45:7a:
         57:d7:a6:fb:03:f2:4f:3f:9b:1e:23:c6:9a:c4:37:5c:21:cb:
         df:4f:54:07:4d:09:16:3f:1f:99:c1:18:da:e8:72:ca:0d:b8:
         eb:8b:0f:7b:bc:f6:d5:c6:f1:5d:57:0f:ab:97:b6:1a:3f:92:
         97:68:5b:f8:0f:b8:ab:71:9d:92:61:a0:e0:de:85:d9:79:df:
         13:66:e9:f2:ca:13:74:dd:74:9b:12:8f:df:d9:c2:05:17:75:
         57:fe:67:33:7e:97:2b:22:cb:f6:b1:e1:b1:6e:4f:10:f9:a8:
         cb:12:23:bc:0b:fc:3e:0c:c3:0a:4d:44:b1:b9:5a:ef:da:8a:
         bd:32:d3:56:32:39:9d:69:f7:c7:4a:b4:54:59:45:e9:ff:5a:
         88:bc:a5:49:c5:10:9a:bd:00:c3:62:d0:2b:c3:66:0e:c7:3a:
         24:8b:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:40:32 2026 by rpki-client