This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/I7p2CVdLUND1ZRszmGKzKIrLt74.roa
File:                     I7p2CVdLUND1ZRszmGKzKIrLt74.roa (raw, json)
Hash identifier:          jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=
Subject key identifier:   23:BA:76:09:57:4B:50:D0:F5:65:1B:33:98:62:B3:28:8A:CB:B7:BE
Certificate issuer:       /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial:       019B7CED8830A57B376BF5CDF14126D3E899
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/I7p2CVdLUND1ZRszmGKzKIrLt74.roa
Signing time:             Fri 02 Jan 2026 04:18:20 +0000
ROA not before:           Fri 02 Jan 2026 04:18:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44090
IP address blocks:        91.227.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:88:30:a5:7b:37:6b:f5:cd:f1:41:26:d3:e8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
        Validity
            Not Before: Jan  2 04:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=23ba7609574b50d0f5651b339862b3288acbb7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:71:5b:01:c7:15:3c:d8:1f:25:89:01:2b:
                    70:70:79:22:99:e6:3c:48:95:a7:7f:26:32:4d:ba:
                    47:7d:86:4b:03:4b:c9:40:ed:87:dc:1d:30:6b:61:
                    35:47:3f:da:46:07:9e:2f:dd:ee:4b:24:db:88:d1:
                    3c:f4:a2:02:ee:4a:5a:d4:b1:81:25:5d:0c:56:56:
                    c2:7a:56:60:ec:7c:68:17:08:a4:aa:99:c4:17:eb:
                    88:82:4e:3f:c2:8b:cf:cc:cf:a7:b3:3e:48:92:d6:
                    06:f0:96:0e:a2:e2:81:5b:16:c1:65:e6:4e:60:9b:
                    e0:06:97:3a:2e:9d:cc:46:12:0e:40:8e:14:6b:f1:
                    21:3d:e4:47:86:e7:1c:db:55:2d:f7:6d:b1:3f:c4:
                    f8:c6:0a:43:59:15:9c:43:57:98:96:e3:af:e5:82:
                    d5:0c:20:92:8e:57:b4:cd:7d:6e:ab:5b:2f:87:4b:
                    13:22:15:e0:61:fb:2b:79:f4:ed:49:21:2f:97:9f:
                    e7:7e:73:c0:e4:7a:24:80:71:98:e4:eb:a2:d0:69:
                    88:c8:4f:b5:66:26:ca:e9:36:1e:39:68:38:7e:b8:
                    d4:d8:36:5a:64:27:ce:ac:3d:31:aa:8c:83:1a:c3:
                    4b:8d:12:29:0d:cf:bd:bb:b6:f0:94:a7:9f:3c:c5:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BA:76:09:57:4B:50:D0:F5:65:1B:33:98:62:B3:28:8A:CB:B7:BE
            X509v3 Authority Key Identifier:
                keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/I7p2CVdLUND1ZRszmGKzKIrLt74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:65:b4:9e:c3:80:52:75:f9:14:e0:d0:4f:38:f6:5f:c9:
         56:bb:69:9e:f1:2b:10:4d:cf:26:d1:d4:73:69:7b:99:be:c6:
         d0:e0:14:35:93:c3:c0:aa:45:04:75:60:15:cc:48:b3:4b:d3:
         18:73:20:d8:74:4f:ed:fd:16:aa:a3:bc:d8:8d:b2:52:89:a3:
         49:1e:01:49:04:21:ce:c7:24:30:6a:29:68:d8:9c:9c:5d:21:
         ca:ae:ed:b6:bf:68:37:73:54:20:a2:26:69:57:4b:74:a4:03:
         45:9b:d7:6b:cf:a4:a0:5a:c7:ba:49:e1:79:8b:54:a0:70:a4:
         22:29:81:a3:55:5f:0d:bb:5d:4a:78:cc:c1:99:71:89:dd:ed:
         66:fc:5a:c3:83:c4:db:e6:c5:5f:df:40:fc:30:ce:4d:9a:51:
         0f:46:39:20:6b:59:e0:81:7c:64:8d:de:b6:0a:15:58:41:be:
         6e:67:f1:73:f6:99:05:f7:6d:f8:a6:c7:d1:bc:a6:5c:cf:0c:
         43:c2:b1:e1:a0:a6:2e:45:fc:d3:91:2c:aa:d0:de:14:ef:06:
         69:8c:a7:6b:bd:39:09:a9:d4:81:97:4c:ff:f9:b6:d0:60:6b:
         92:6c:30:c0:20:cf:0d:f7:25:c1:ed:bd:07:38:02:a1:4e:a0:
         40:64:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:37:08 2026 by rpki-client