This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/Ad7Pp9r5M7Wo4XWYiclohNzUXBA.roa
File:                     Ad7Pp9r5M7Wo4XWYiclohNzUXBA.roa (raw, json)
Hash identifier:          haxwidB1aRIJpYmLRPgb8n1KRbAC9Bep58Pbjn7Bw+o=
Subject key identifier:   01:DE:CF:A7:DA:F9:33:B5:A8:E1:75:98:89:C9:68:84:DC:D4:5C:10
Certificate issuer:       /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial:       019B7BA4CDCDBCD6B3EA89B2CA066AF1AF5D
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/Ad7Pp9r5M7Wo4XWYiclohNzUXBA.roa
Signing time:             Thu 01 Jan 2026 22:19:16 +0000
ROA not before:           Thu 01 Jan 2026 22:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209155
IP address blocks:        91.211.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:cd:cd:bc:d6:b3:ea:89:b2:ca:06:6a:f1:af:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
        Validity
            Not Before: Jan  1 22:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01decfa7daf933b5a8e1759889c96884dcd45c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:52:a7:a7:83:01:e7:28:1a:f8:04:70:d3:
                    68:c4:83:76:ff:9b:96:f2:10:5c:42:65:79:a4:7c:
                    be:82:6e:4f:7b:5e:6c:92:a9:b2:f8:e1:75:0b:04:
                    54:10:67:c9:07:de:1b:92:8e:da:37:ec:02:a0:8d:
                    15:78:29:2d:be:8e:db:f3:4a:9b:72:a4:96:ef:01:
                    d6:c6:d2:df:6f:e2:6c:5f:9c:4e:23:15:dd:7c:59:
                    01:e9:3e:cb:92:b8:94:fa:de:80:ca:78:62:df:a7:
                    1a:20:03:0e:94:11:51:b1:80:7b:a2:bd:cc:b2:b4:
                    92:c6:3b:f1:8e:5f:2b:62:39:86:48:92:81:9a:60:
                    4c:a0:54:61:11:c6:de:c4:4d:87:5b:6a:52:a0:31:
                    ff:9a:ad:23:42:b3:5b:af:27:08:6b:72:12:cb:c7:
                    fb:ee:31:95:36:1c:95:dc:2e:b7:0c:53:22:7c:95:
                    0e:73:d5:0e:ee:d6:91:88:fc:20:dd:a3:ad:36:27:
                    ba:aa:c1:8d:e8:f5:3f:16:bd:4b:76:d2:78:67:c8:
                    a1:f2:38:fb:cb:2b:0c:53:00:57:8b:ee:e6:f7:58:
                    b7:fc:af:fa:be:22:76:d2:aa:32:d3:d0:a8:54:38:
                    58:8e:c8:84:71:80:38:22:02:e2:9a:60:2d:27:28:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DE:CF:A7:DA:F9:33:B5:A8:E1:75:98:89:C9:68:84:DC:D4:5C:10
            X509v3 Authority Key Identifier:
                keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/Ad7Pp9r5M7Wo4XWYiclohNzUXBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.211.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:42:7b:d9:97:b9:24:a2:45:b7:4b:cd:95:69:8d:d7:02:c8:
         db:8f:5b:7a:08:46:ec:e0:7f:3e:36:0d:29:fe:95:c7:6c:d3:
         da:1e:d8:ad:2e:78:5d:ea:fb:36:63:ba:6b:1f:fc:73:95:05:
         45:bc:22:90:17:2d:b7:fe:c6:5a:0f:45:1e:e8:73:c5:b3:84:
         40:dc:51:e9:b7:76:74:00:07:7e:e9:37:73:c3:e4:6a:e5:1e:
         ad:35:65:58:c1:98:18:c9:44:2d:cd:e7:57:bf:24:c8:cc:94:
         22:93:9d:4f:26:f0:d0:5b:47:1c:b2:1c:47:4a:47:b7:ba:7b:
         d6:35:f6:26:84:b5:f1:d3:1c:0d:8d:83:db:b7:97:ba:06:c0:
         43:65:a5:4a:dd:cc:5d:1a:d4:61:42:3f:af:f3:ef:b0:e3:d1:
         da:f0:2e:0f:a8:c3:7d:b6:27:bf:38:04:2d:10:7c:06:4b:92:
         9d:1e:93:da:fc:35:7b:cc:49:9d:6b:f9:c4:c4:c2:2e:7c:f0:
         f0:ea:20:fd:26:df:a7:df:1f:1a:da:12:95:0e:5b:f2:57:d2:
         ff:f7:34:c8:30:2b:74:08:58:30:b8:3f:f3:b6:fb:ff:bb:3d:
         6b:f7:aa:26:90:90:45:ca:27:d2:2a:a6:db:08:1c:21:b8:49:
         83:ef:ff:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7pM3NvNaz6omyygZq8a9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2
MWE3MDIwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWRlY2ZhN2RhZjkzM2I1YThlMTc1OTg4OWM5Njg4NGRjZDQ1YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk9Sp6eDAecoGvgEcNNoxIN2/5uW
8hBcQmV5pHy+gm5Pe15skqmy+OF1CwRUEGfJB94bko7aN+wCoI0VeCktvo7b80qb
cqSW7wHWxtLfb+JsX5xOIxXdfFkB6T7LkriU+t6Aynhi36caIAMOlBFRsYB7or3M
srSSxjvxjl8rYjmGSJKBmmBMoFRhEcbexE2HW2pSoDH/mq0jQrNbrycIa3ISy8f7
7jGVNhyV3C63DFMifJUOc9UO7taRiPwg3aOtNie6qsGN6PU/Fr1LdtJ4Z8ih8jj7
yysMUwBXi+7m91i3/K/6viJ20qoy09CoVDhYjsiEcYA4IgLimmAtJyjTyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAHez6fa+TO1qOF1mInJaITc1FwQMB8GA1UdIwQY
MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt
MGRiY2JhMjc1NDE3LzEvQWQ3UHA5cjVNN1dvNFhXWWljbG9oTnpVWEJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3
LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9NaMA0G
CSqGSIb3DQEBCwUAA4IBAQAYQnvZl7kkokW3S82VaY3XAsjbj1t6CEbs4H8+Ng0p
/pXHbNPaHtitLnhd6vs2Y7prH/xzlQVFvCKQFy23/sZaD0Ue6HPFs4RA3FHpt3Z0
AAd+6Tdzw+Rq5R6tNWVYwZgYyUQtzedXvyTIzJQik51PJvDQW0ccshxHSke3unvW
NfYmhLXx0xwNjYPbt5e6BsBDZaVK3cxdGtRhQj+v8++w49Ha8C4PqMN9tie/OAQt
EHwGS5KdHpPa/DV7zEmda/nExMIufPDw6iD9Jt+n3x8a2hKVDlvyV9L/9zTIMCt0
CFgwuD/ztvv/uz1r96omkJBFyifSKqbbCBwhuEmD7//a
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:12:40 2026 by rpki-client