This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/jv18kUzHEBlDlkIHJKkxODrKqc0.roa
File:                     jv18kUzHEBlDlkIHJKkxODrKqc0.roa (raw, json)
Hash identifier:          wdFZODPpunDdGOXTc+SSGtgRA0zL9y523IFxS0/YWn0=
Subject key identifier:   8E:FD:7C:91:4C:C7:10:19:43:96:42:07:24:A9:31:38:3A:CA:A9:CD
Certificate issuer:       /CN=ce49fc134b706542caf1a1efbe034f7011b49436
Certificate serial:       019B79EBBBF241F46BEDB3A1108478C1911E
Authority key identifier: CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/jv18kUzHEBlDlkIHJKkxODrKqc0.roa
Signing time:             Thu 01 Jan 2026 14:17:30 +0000
ROA not before:           Thu 01 Jan 2026 14:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215563
IP address blocks:        91.223.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:bb:f2:41:f4:6b:ed:b3:a1:10:84:78:c1:91:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce49fc134b706542caf1a1efbe034f7011b49436
        Validity
            Not Before: Jan  1 14:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8efd7c914cc710194396420724a931383acaa9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:85:43:0b:a8:9c:08:1a:31:d3:4f:a1:46:36:
                    10:4e:78:14:67:13:2b:03:32:88:d6:5d:d7:f0:65:
                    d2:38:38:75:83:53:40:28:5a:70:eb:b4:fa:da:0e:
                    bb:80:2f:b7:08:e0:7a:95:cd:ce:ad:52:06:9b:16:
                    c7:cd:d9:5f:53:e1:82:a5:d6:bc:02:72:1d:6e:14:
                    87:2d:a6:39:5c:15:52:94:a3:2d:c6:fd:a9:8c:e6:
                    1f:9a:24:3e:4a:70:00:39:68:ce:b3:28:0c:7f:c8:
                    23:c5:31:49:95:65:1d:90:a1:7d:04:3e:62:2a:c5:
                    13:71:45:49:9b:dc:2b:76:9f:bf:96:c2:5a:57:f5:
                    45:0d:90:9b:ca:04:8f:24:c7:02:3f:70:ec:cb:da:
                    d1:fa:b6:86:8b:fd:32:87:a9:6e:f8:0d:46:2e:08:
                    88:c7:e6:8e:16:bb:c3:2e:43:5c:18:34:6b:09:4e:
                    a2:4a:5f:9d:1e:83:3f:57:92:e0:e5:38:88:ab:36:
                    a1:11:f1:51:f6:74:e7:26:ff:ac:e6:6c:a1:4b:98:
                    64:68:af:bd:4b:08:da:6d:88:19:61:c3:64:5e:ea:
                    a0:08:67:9e:40:35:aa:3b:9c:f1:db:5b:5e:cb:53:
                    cd:ff:fc:14:53:37:21:db:33:83:e6:3e:1f:b6:90:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FD:7C:91:4C:C7:10:19:43:96:42:07:24:A9:31:38:3A:CA:A9:CD
            X509v3 Authority Key Identifier:
                keyid:CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/jv18kUzHEBlDlkIHJKkxODrKqc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:96:9a:c2:b1:66:e3:ee:4d:e4:e5:ca:b9:8c:77:04:10:63:
         e9:19:80:36:91:f5:c4:24:96:7d:fe:dd:29:80:d9:3c:97:6b:
         85:67:a0:28:92:37:ce:b5:37:7c:de:02:4f:2d:2f:f4:71:15:
         00:b9:80:19:fd:ff:24:34:0f:dd:db:10:04:73:22:60:8a:ce:
         29:3a:6a:54:b7:d2:0b:87:a5:0e:5e:93:8b:1c:5b:7f:ed:b5:
         47:ca:8b:b3:f7:fa:b2:8f:e5:3f:15:37:db:5e:69:56:0d:81:
         e0:a2:73:11:29:22:4d:c5:05:42:1d:16:a1:ab:27:3d:61:a7:
         3d:98:9d:b7:0f:72:d1:d1:b8:1c:b6:79:20:c6:50:da:3f:d9:
         d7:6d:4c:cf:0a:a6:53:e2:14:61:10:5c:78:4f:b6:ee:c2:88:
         07:2e:b5:4a:12:16:19:ef:2c:2a:11:65:69:c5:42:33:f2:23:
         cd:87:36:fc:c8:8f:09:11:bb:c3:d2:19:fc:67:c4:23:23:d9:
         9f:16:12:44:99:2a:c7:15:c1:61:29:36:58:eb:ab:e7:7d:26:
         23:c9:68:31:02:86:ae:76:cd:be:54:f8:55:f8:e6:6e:3d:da:
         7b:54:98:ac:a8:c8:8b:89:b2:1b:24:7d:99:2b:29:5a:02:cd:
         55:0b:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:46:04 2026 by rpki-client