This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8UdzMd9qVQ2DQhyZJWiJ_ldfqmU.roa
File:                     8UdzMd9qVQ2DQhyZJWiJ_ldfqmU.roa (raw, json)
Hash identifier:          RASI4VhIjb5uzRS2pv3aXc0f9fBfqSjFCHiU3OvucsE=
Subject key identifier:   F1:47:73:31:DF:6A:55:0D:83:42:1C:99:25:68:89:FE:57:5F:AA:65
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       019B797F2C8D4377D6B36AD3F151D559D5B0
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8UdzMd9qVQ2DQhyZJWiJ_ldfqmU.roa
Signing time:             Thu 01 Jan 2026 12:18:56 +0000
ROA not before:           Thu 01 Jan 2026 12:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57724
IP address blocks:        91.192.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:2c:8d:43:77:d6:b3:6a:d3:f1:51:d5:59:d5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Jan  1 12:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f1477331df6a550d83421c99256889fe575faa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:34:c9:70:de:08:9c:a8:39:8f:fb:56:74:
                    f1:22:6f:1e:c5:72:49:a5:a2:0c:43:5e:98:17:37:
                    8b:a6:61:37:2a:ab:b0:92:73:c7:bc:12:0b:1f:e6:
                    7b:cc:55:6f:a8:ba:10:ee:99:ae:59:d8:23:33:5f:
                    97:fb:8e:09:69:3b:7e:63:96:e8:e7:ae:26:f0:8f:
                    74:ff:e9:82:47:82:27:0c:b4:76:34:82:28:e3:d7:
                    d8:66:34:5b:0d:e9:f7:5e:b8:f4:92:f5:28:0a:ed:
                    01:a1:e0:f0:c9:1e:8b:00:12:3c:ac:bb:0e:b4:ff:
                    1a:22:5b:ea:ba:09:a9:cd:97:89:c2:4b:f5:8e:ea:
                    21:57:a0:56:91:dd:99:a3:0e:b5:e3:1f:1c:57:52:
                    9d:1d:73:0d:68:30:24:87:7a:dc:55:0c:b1:64:6a:
                    7e:aa:1a:75:8e:c5:2e:c0:de:66:99:a3:61:fe:e7:
                    df:16:49:d4:65:06:e3:a2:1d:4d:0f:71:93:a1:3d:
                    d4:b5:57:5b:8c:b4:42:d6:7f:40:01:2d:4b:7c:95:
                    1e:3a:e1:cc:a2:da:60:ad:fb:34:42:5c:ef:d0:a0:
                    a6:e0:42:c8:5a:e0:3f:62:ed:07:37:65:f3:3e:33:
                    9d:f2:ef:52:96:fa:b9:09:b7:15:b3:8e:aa:6b:1e:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:47:73:31:DF:6A:55:0D:83:42:1C:99:25:68:89:FE:57:5F:AA:65
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8UdzMd9qVQ2DQhyZJWiJ_ldfqmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:23:e2:20:a8:96:16:f2:12:62:12:ba:da:3e:b7:1e:1b:57:
         8b:d3:f5:a3:66:d2:42:37:c1:65:cc:a5:66:80:16:c7:56:36:
         f8:fc:bc:7f:d6:be:74:04:eb:29:b5:a2:d1:1f:f5:c2:bf:12:
         f8:f5:d4:37:d8:8c:03:b5:e8:d9:29:ec:bf:b6:d9:db:64:df:
         85:8b:f4:68:5b:7e:b7:94:15:63:6f:15:86:14:ee:b3:41:69:
         c7:22:17:86:c1:c0:75:13:9e:92:91:11:49:98:61:eb:b4:a9:
         f4:14:92:60:f4:3f:25:23:b6:d9:ba:89:1f:6f:8d:e6:90:ba:
         f4:7c:b4:43:34:6f:ce:86:a0:e4:ce:83:24:e2:15:50:fb:51:
         3e:2a:73:cd:25:89:bf:2a:eb:97:4c:7c:22:ef:75:d7:49:9c:
         b6:03:44:04:c3:57:58:1a:45:8e:6c:0d:ed:5a:53:c2:d1:0a:
         86:07:bd:7d:a6:12:b2:c8:be:5d:60:8e:0a:c8:80:be:d5:50:
         0a:fb:5e:c0:45:ad:7f:d6:8a:11:be:11:bf:e1:b3:96:5f:8e:
         7a:80:d9:cc:90:62:17:cb:a8:5a:48:79:f2:28:2c:e7:4a:43:
         9b:d0:ff:92:09:91:5d:e4:8d:b3:35:0b:9f:49:3f:f6:ea:87:
         d6:4b:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:28:42 2026 by rpki-client