This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/d_SE2F6RTJ8Qa9XuTgPK7e07Afw.roa
File:                     d_SE2F6RTJ8Qa9XuTgPK7e07Afw.roa (raw, json)
Hash identifier:          8R+LohTGNLLIRGmEbwOKrhdf1Fobv+r39Rz/f173jc0=
Subject key identifier:   77:F4:84:D8:5E:91:4C:9F:10:6B:D5:EE:4E:03:CA:ED:ED:3B:01:FC
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       019B7C8040060BCC1616F6E60B9852200AC9
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/d_SE2F6RTJ8Qa9XuTgPK7e07Afw.roa
Signing time:             Fri 02 Jan 2026 02:18:58 +0000
ROA not before:           Fri 02 Jan 2026 02:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     63399
IP address blocks:        185.91.8.0/24 maxlen: 24
                          185.91.9.0/24 maxlen: 24
                          2a05:e580::/29 maxlen: 29
                          2a05:e580:100::/40 maxlen: 40
                          2a05:e580:200::/40 maxlen: 40
                          2a05:e580:300::/40 maxlen: 40
                          2a05:e580:400::/40 maxlen: 40
                          2a05:e580:500::/40 maxlen: 40
                          2a05:e580:600::/40 maxlen: 40
                          2a05:e580:700::/40 maxlen: 40
                          2a05:e580:800::/40 maxlen: 40
                          2a05:e580:900::/40 maxlen: 40
                          2a05:e580:a00::/40 maxlen: 40
                          2a05:e580:b00::/40 maxlen: 40
                          2a05:e580:c00::/40 maxlen: 40
                          2a05:e580:d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:40:06:0b:cc:16:16:f6:e6:0b:98:52:20:0a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Jan  2 02:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77f484d85e914c9f106bd5ee4e03caeded3b01fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:5f:29:4e:64:5d:db:da:57:a1:f5:b5:62:
                    34:e2:cb:1f:d0:20:a8:82:7c:97:d4:e1:bb:80:1e:
                    d4:56:7b:dd:15:97:ad:8a:2f:20:b4:06:f1:d4:d2:
                    48:f6:9e:21:6c:74:1d:1e:05:3d:fc:7f:47:d2:e0:
                    1c:af:da:53:d9:87:a5:8b:7b:53:37:6a:2f:c5:f8:
                    a9:9c:05:f2:66:07:b6:fd:3f:6f:ea:cf:ee:e8:e7:
                    dc:fb:ed:5e:02:ef:92:4f:04:1e:9f:e0:9a:5e:ee:
                    0a:b2:36:55:7a:3d:c2:80:8c:1c:f6:94:ab:fe:4f:
                    eb:53:0e:b6:aa:64:9d:2a:b1:aa:0f:18:8a:0d:b8:
                    15:c1:2b:a5:46:bb:39:cb:eb:22:cf:a4:f6:72:01:
                    0d:06:58:4a:3a:ba:d9:03:83:d9:f5:0a:bd:9a:b8:
                    dc:fa:23:ac:51:19:ba:d4:0e:7e:f6:1a:e2:39:54:
                    4a:70:28:a0:f2:82:55:d6:26:68:29:61:82:9f:66:
                    39:2e:fa:a5:04:87:80:fd:66:dc:82:d6:a9:ef:f5:
                    48:87:af:6d:99:9a:1c:a3:e2:23:c6:67:30:37:61:
                    12:6c:c7:16:18:ae:0d:2b:66:b1:7a:13:12:32:22:
                    d1:ea:3b:23:26:dd:db:2f:c0:22:c8:c0:5d:be:89:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F4:84:D8:5E:91:4C:9F:10:6B:D5:EE:4E:03:CA:ED:ED:3B:01:FC
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/d_SE2F6RTJ8Qa9XuTgPK7e07Afw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.8.0/23
                IPv6:
                  2a05:e580::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:a0:eb:c9:b0:88:f9:96:d0:76:87:f4:3a:da:12:a2:86:
         a3:36:12:79:92:2c:35:e7:d9:b1:ca:24:9d:5e:0b:3a:2e:66:
         c3:21:60:9b:9c:0a:ba:9a:cf:e8:76:26:09:1c:5f:72:e7:37:
         d2:57:de:78:93:9d:4c:82:6b:64:d3:b8:87:24:d2:73:8d:f9:
         1c:bc:d0:2e:95:50:57:e0:45:e9:03:d5:33:61:30:c5:5c:2b:
         99:d2:bd:14:22:60:c4:46:6d:35:df:a4:b1:46:49:af:f0:78:
         e5:b1:2a:05:dd:34:2d:fd:7e:d0:cf:fe:df:69:fe:d7:db:42:
         e7:c1:42:8a:e1:66:b4:30:ee:61:f0:9c:f5:79:79:b5:f6:c0:
         76:fe:9f:ce:5a:c2:77:6e:ba:22:fc:de:8f:ae:b5:17:43:55:
         41:ad:e5:90:76:0f:3a:82:89:db:e9:fb:ba:9c:ed:d8:74:20:
         f6:4f:e3:60:1c:21:7d:50:2f:d9:ac:c0:6d:b4:16:00:60:69:
         89:9c:2f:49:bb:3f:57:db:33:30:e2:e9:f5:2c:34:53:68:06:
         34:f6:5d:f4:b5:75:df:2f:30:cb:f9:af:bc:fe:2c:99:b7:df:
         d9:aa:6b:2a:bf:a7:ce:97:b0:47:71:c4:cc:59:cc:38:7a:ea:
         b7:79:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:35 2026 by rpki-client