This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/AeJUYs8KPvdeXojsNmXjmiR1Wh4.roa
File:                     AeJUYs8KPvdeXojsNmXjmiR1Wh4.roa (raw, json)
Hash identifier:          QZQFb9zgvngTfrMDFz4cGmkMiycjMvXPVgZGd4lxN9o=
Subject key identifier:   01:E2:54:62:CF:0A:3E:F7:5E:5E:88:EC:36:65:E3:9A:24:75:5A:1E
Certificate issuer:       /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial:       019B7C801B6127F8A1E267BAAA6B1318B567
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/AeJUYs8KPvdeXojsNmXjmiR1Wh4.roa
Signing time:             Fri 02 Jan 2026 02:18:48 +0000
ROA not before:           Fri 02 Jan 2026 02:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210474
IP address blocks:        91.199.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:1b:61:27:f8:a1:e2:67:ba:aa:6b:13:18:b5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
        Validity
            Not Before: Jan  2 02:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01e25462cf0a3ef75e5e88ec3665e39a24755a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:17:a7:4a:e3:c5:23:20:9b:0f:35:a7:d1:74:
                    74:7a:59:44:40:fe:71:4c:43:c8:64:b5:e5:6f:cd:
                    32:cc:96:19:70:cb:af:53:5c:73:a2:5f:aa:5d:8e:
                    39:54:20:9a:61:a7:24:3e:b0:2e:6a:27:f6:36:44:
                    5c:18:1a:9b:dc:87:e0:e3:b2:35:09:21:5b:f3:0c:
                    33:c5:58:4d:44:f9:5d:b3:73:2d:49:7d:a2:b6:af:
                    ab:22:4e:01:71:83:c7:a8:55:46:3c:1c:d0:ea:f4:
                    19:a8:64:de:91:e6:c0:8e:fe:33:6e:5f:17:1b:33:
                    4a:7b:cb:14:9e:75:3f:65:54:74:dc:89:be:bd:57:
                    91:a8:65:7c:2e:9e:39:4c:6f:96:88:86:b0:fd:31:
                    43:0a:e7:9f:01:01:b5:1f:84:96:06:98:a8:96:88:
                    06:0f:99:7c:2f:de:90:53:2b:4d:04:d2:82:da:4a:
                    97:a5:13:0a:a3:53:88:83:c2:33:d2:e4:07:c6:15:
                    c4:38:83:45:3c:3b:27:af:4c:64:c3:73:8a:fd:6a:
                    58:37:20:e7:75:f9:c4:d8:19:cf:a9:42:1f:6e:92:
                    63:ba:a8:33:11:eb:c8:b0:3b:e2:22:22:91:d5:be:
                    ed:86:d5:b7:59:a3:82:a8:91:89:90:df:86:e9:9e:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E2:54:62:CF:0A:3E:F7:5E:5E:88:EC:36:65:E3:9A:24:75:5A:1E
            X509v3 Authority Key Identifier:
                keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/AeJUYs8KPvdeXojsNmXjmiR1Wh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:22:fd:b8:79:c2:89:4f:e9:b2:7b:de:86:fa:ee:c1:18:d6:
         bc:31:38:9d:a9:51:f9:6a:9f:70:9b:47:28:0b:74:af:01:a0:
         4b:86:65:0e:b0:06:2d:93:d8:d5:22:15:d8:db:7b:37:3c:0a:
         b4:b0:6c:5b:50:45:c0:b6:9c:20:53:3d:ce:5c:e8:f3:78:4a:
         94:95:02:63:22:92:d4:d9:89:d2:23:a0:21:58:3b:5e:ee:28:
         ea:f3:44:31:cc:be:2e:73:83:de:e4:4e:55:61:2b:08:fa:fa:
         84:6d:b7:17:cb:56:5c:87:b3:e0:9d:11:aa:c2:ac:8b:5a:56:
         c3:72:7c:bc:d7:63:69:f5:a2:90:97:f1:33:52:29:19:0c:6c:
         e6:b4:2d:d2:de:05:7c:68:83:c8:e3:89:11:16:07:74:67:ff:
         12:9b:6a:d3:9c:1c:79:dd:27:7c:67:64:4e:38:b4:7a:66:47:
         a8:40:bf:34:16:f0:26:b3:ac:0c:a4:dc:c0:35:c6:51:10:2d:
         a0:58:95:60:69:73:6c:d1:04:1c:7b:8d:9e:35:ef:a5:c9:83:
         76:c0:50:64:a6:0e:1a:31:47:1d:09:af:54:bd:7a:81:33:36:
         21:00:b4:e6:8e:7c:7d:e1:ac:2d:14:64:91:51:6d:d5:88:ee:
         79:00:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:56 2026 by rpki-client