This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/_r56llLnHAPpXxxxkXq1tr0D3E8.roa
File:                     _r56llLnHAPpXxxxkXq1tr0D3E8.roa (raw, json)
Hash identifier:          GaXEko33otm3bGM4yo2EOeA4n0z4wsimGbz5tJkDlo0=
Subject key identifier:   FE:BE:7A:96:52:E7:1C:03:E9:5F:1C:71:91:7A:B5:B6:BD:03:DC:4F
Certificate issuer:       /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial:       019B77C673E4F000D36B6A108AEC7876210A
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/_r56llLnHAPpXxxxkXq1tr0D3E8.roa
Signing time:             Thu 01 Jan 2026 04:17:33 +0000
ROA not before:           Thu 01 Jan 2026 04:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8860
IP address blocks:        89.187.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:73:e4:f0:00:d3:6b:6a:10:8a:ec:78:76:21:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
        Validity
            Not Before: Jan  1 04:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=febe7a9652e71c03e95f1c71917ab5b6bd03dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:8c:d7:94:40:73:ba:ab:21:67:df:b9:93:
                    d7:0c:42:1d:02:63:17:f4:c1:d7:c8:4e:c8:a3:7b:
                    d5:41:a5:8b:f2:1c:89:7d:8a:6e:6b:2b:b6:8f:fc:
                    8f:3c:db:d7:c7:fe:08:f1:5c:72:6e:10:af:5a:ec:
                    ce:88:6e:a1:bd:22:46:dc:e9:65:76:2e:43:4b:93:
                    74:6e:13:6b:1a:52:5c:47:11:b6:0c:e1:47:bd:2a:
                    99:43:4a:52:55:3c:42:87:03:7b:b2:a6:e2:b3:44:
                    13:f6:21:2a:f5:2b:91:1c:6c:6e:10:9c:29:f0:8d:
                    b6:03:f3:72:db:5b:c2:f1:b1:09:17:7e:21:44:7c:
                    70:b3:33:92:ec:bb:59:8d:9b:42:5f:8d:ac:50:97:
                    23:2b:7e:d9:25:71:fb:de:47:ea:cf:48:7d:d6:55:
                    c3:9d:15:51:63:71:81:a6:df:58:87:91:f6:8c:73:
                    72:07:5f:55:d8:7b:65:ba:53:d3:bb:fd:4f:73:8a:
                    77:00:f5:a6:2b:60:1b:f7:b0:1e:46:1e:a9:d6:b6:
                    cc:50:ac:18:6b:99:83:f2:26:00:c3:c8:cf:7b:ff:
                    b5:13:76:a5:d4:c9:13:fd:a5:fa:ae:f8:90:1f:a8:
                    31:fd:ac:76:27:19:e9:8d:26:77:5f:15:b3:2d:33:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BE:7A:96:52:E7:1C:03:E9:5F:1C:71:91:7A:B5:B6:BD:03:DC:4F
            X509v3 Authority Key Identifier:
                keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/_r56llLnHAPpXxxxkXq1tr0D3E8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.187.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:06:64:b3:a9:7b:17:98:91:d9:f9:03:e9:6d:62:34:57:
         36:46:2e:7b:b1:c5:16:ec:a4:a2:27:ec:07:f5:59:d6:9d:2e:
         93:12:f2:22:64:d2:58:9e:1e:0e:59:7c:3f:fc:4c:e2:34:56:
         48:a2:d1:6f:85:34:39:2f:2f:5e:00:99:55:76:c4:0d:7b:74:
         07:a0:a3:b8:1f:5f:bb:a7:28:4b:75:86:3b:7c:63:aa:c4:28:
         24:fc:6d:58:84:32:be:bc:25:c9:e7:90:a7:e0:56:f6:48:4f:
         eb:f3:d6:e9:bd:41:8c:47:14:f2:9f:dc:76:c5:88:39:04:f9:
         e5:ae:d6:52:7f:88:52:92:3f:40:aa:d6:5a:1e:60:a1:22:25:
         6a:b6:f4:e5:55:71:14:95:43:c9:85:9f:6a:71:74:45:27:9a:
         40:26:98:4b:22:18:a2:49:04:01:07:25:df:a6:ed:5f:98:2f:
         e0:11:c3:5e:5b:02:8e:a6:6d:7f:2c:d8:ba:8a:a5:04:f0:a7:
         c6:ac:bf:cb:89:bc:01:ee:94:3c:8a:db:47:20:cb:8d:f6:a6:
         4f:64:89:d4:10:98:fd:8d:ca:68:ec:33:7d:3d:63:fc:88:23:
         01:71:85:8f:4d:17:69:eb:92:66:e5:55:bf:9b:42:48:ec:4b:
         1b:27:40:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:08 2026 by rpki-client