This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa
File:                     ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (raw, json)
Hash identifier:          nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=
Subject key identifier:   8A:5B:FA:A4:91:65:6E:BE:06:58:FC:36:1B:03:90:CD:E6:95:26:B0
Certificate issuer:       /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial:       019B7B366C0B3580BB0596F976D9EC3623E5
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa
Signing time:             Thu 01 Jan 2026 20:18:42 +0000
ROA not before:           Thu 01 Jan 2026 20:18:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59442
IP address blocks:        91.241.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:6c:0b:35:80:bb:05:96:f9:76:d9:ec:36:23:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
        Validity
            Not Before: Jan  1 20:18:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a5bfaa491656ebe0658fc361b0390cde69526b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:36:fb:dd:19:fd:46:13:72:b6:ae:65:a6:
                    48:f4:ed:2f:ab:c4:46:a5:75:f9:b5:b0:ab:38:da:
                    c0:a8:17:d2:ad:62:bb:8f:22:a4:1a:ca:6d:2c:8a:
                    26:b2:63:ae:91:3e:a9:21:c7:d1:51:f9:58:33:4f:
                    99:4c:ff:da:c7:d7:75:18:7c:39:73:a3:09:94:e1:
                    f6:76:5e:22:18:85:b0:8c:31:74:29:9f:d8:aa:bd:
                    a4:0d:ca:bb:77:c6:4d:11:cd:e5:3a:c0:47:eb:ea:
                    20:8c:37:1d:88:d0:5d:a9:9b:89:01:65:7b:a7:98:
                    f8:57:67:1d:8e:cf:6c:2f:06:c1:47:59:d0:48:56:
                    8e:f9:cb:79:30:58:18:f6:f8:ee:69:45:69:ba:13:
                    6c:78:00:7d:32:72:7f:04:03:41:b7:f1:18:ca:d6:
                    e0:30:34:e1:c5:e3:cc:77:30:a6:5d:36:c7:40:b8:
                    a4:b5:c5:c3:b7:12:1e:8d:32:88:a6:94:d5:4d:f9:
                    a7:35:04:0d:07:4b:d8:f0:d0:20:76:9a:10:14:b7:
                    4f:f9:9b:d4:72:87:61:2c:ab:6b:71:0f:82:6a:f6:
                    21:f8:93:6d:76:31:a0:e6:83:4c:c7:8b:1f:b7:9f:
                    de:8d:30:35:f9:9a:9d:8c:4d:f8:8c:12:73:40:8d:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5B:FA:A4:91:65:6E:BE:06:58:FC:36:1B:03:90:CD:E6:95:26:B0
            X509v3 Authority Key Identifier:
                keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.241.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:58:05:fa:c5:19:66:cc:c6:ca:d4:ab:8d:f7:3f:59:86:dd:
         47:19:0a:42:32:36:9a:b6:27:26:a1:b7:a6:01:f0:79:f9:c7:
         17:3a:59:fe:e2:9d:af:01:ef:12:c5:01:e4:b6:a9:28:3f:05:
         57:7e:a7:1e:b5:5a:89:44:61:ef:b3:23:dc:2f:ce:bd:78:0a:
         4b:e4:26:9a:92:5b:7d:a4:6d:bc:b7:fa:1e:39:fb:2d:cd:2b:
         34:aa:95:89:a4:69:45:b2:ae:af:b8:39:97:52:58:45:81:f0:
         25:3f:0e:1b:43:80:b4:8c:dd:9e:36:c1:24:38:4d:01:ed:bd:
         63:45:20:ba:88:c9:11:49:a1:52:ae:4b:94:7f:45:01:a6:0c:
         ab:bb:bd:43:60:de:31:9e:02:25:24:17:26:34:3f:23:48:8a:
         6f:63:d7:33:a8:d9:6f:1a:01:02:2a:62:60:6f:a3:7a:d3:fc:
         c8:51:75:66:3a:ea:9c:cd:78:07:15:11:69:56:ce:b4:b4:4d:
         05:2a:98:9f:db:25:46:52:d1:c5:b1:22:b4:c7:b1:42:34:bc:
         d7:6c:b2:49:0c:97:ff:91:c6:66:f9:5b:f3:60:13:29:47:41:
         10:f5:17:7f:53:ab:8d:c4:53:21:da:6a:22:e2:7e:78:fc:2a:
         4c:a7:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:51:40 2026 by rpki-client