This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/8miC2Rsp1615SXSK8OmrRssi2ZE.roa
File:                     8miC2Rsp1615SXSK8OmrRssi2ZE.roa (raw, json)
Hash identifier:          nGqL5IRvbvXVDb+f+fbwv68gM09CPTOSXIrZUMH3uqU=
Subject key identifier:   F2:68:82:D9:1B:29:D7:AD:79:49:74:8A:F0:E9:AB:46:CB:22:D9:91
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       019AC48361B95D9EEF8B3CE53142ABB38CF9
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/8miC2Rsp1615SXSK8OmrRssi2ZE.roa
Signing time:             Thu 27 Nov 2025 08:52:15 +0000
ROA not before:           Thu 27 Nov 2025 08:52:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205014
IP address blocks:        91.206.55.0/24 maxlen: 24
                          91.240.242.0/24 maxlen: 24
                          193.105.93.0/24 maxlen: 24
                          195.43.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c4:83:61:b9:5d:9e:ef:8b:3c:e5:31:42:ab:b3:8c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Nov 27 08:52:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f26882d91b29d7ad7949748af0e9ab46cb22d991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:d6:2b:d7:a5:49:ee:d5:1d:be:28:a0:a6:
                    9c:38:ea:a9:c5:da:81:f4:6e:e2:bc:80:b1:37:a1:
                    cf:5d:0b:1c:24:f7:5f:85:f9:db:d9:cf:29:52:23:
                    e9:d9:4f:e5:fc:c1:11:81:f5:be:bd:05:5c:a2:f4:
                    6a:a9:59:0b:19:b8:c0:b9:53:4e:6d:d1:5d:0e:b5:
                    e1:2d:4f:90:2b:db:60:db:bc:e5:54:3b:b2:38:d6:
                    97:bc:c7:7d:9a:35:5e:35:e7:73:47:53:5e:7e:ba:
                    59:92:0b:73:a6:ce:8b:a4:9c:33:14:8c:a1:04:92:
                    8c:4e:64:50:6e:22:50:01:34:08:22:d7:49:8e:5f:
                    f4:3b:4d:59:f0:e3:ab:a4:ce:97:6c:fe:df:e5:c9:
                    ae:62:fc:27:db:a1:ea:66:44:0a:cc:97:9f:8b:f1:
                    b8:4d:35:69:1a:ad:55:d0:f3:60:09:b0:5b:ea:41:
                    ed:f0:f1:27:cc:2d:65:8a:01:e3:ed:43:29:29:50:
                    b5:76:7b:99:d6:fc:ee:aa:56:33:4e:36:9c:02:6b:
                    49:5e:32:2a:2d:84:c5:ce:6f:38:29:ec:1b:df:9f:
                    92:05:b8:97:e8:25:ae:a7:78:86:bf:0c:d2:87:49:
                    7f:7d:63:4d:b2:22:6e:9f:e2:09:eb:b2:68:ea:dd:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:68:82:D9:1B:29:D7:AD:79:49:74:8A:F0:E9:AB:46:CB:22:D9:91
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/8miC2Rsp1615SXSK8OmrRssi2ZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.55.0/24
                  91.240.242.0/24
                  193.105.93.0/24
                  195.43.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:df:f8:ee:9c:5b:77:e7:41:83:fa:2d:cb:11:9f:7a:52:be:
         67:7b:dd:7c:15:ee:85:02:d4:33:e9:82:e7:65:c9:53:c1:4b:
         d9:63:50:71:3e:b3:f0:18:f3:56:01:95:9a:71:ef:d2:7a:a6:
         20:aa:f6:8f:d4:93:04:01:88:4c:19:f3:5e:f3:de:7f:30:f2:
         79:1f:71:fe:2d:94:d5:99:df:dd:3a:08:2d:be:0d:2c:ec:23:
         45:80:86:08:7f:dc:76:20:d5:0a:3d:99:10:e4:4f:97:f9:53:
         d4:80:a1:17:17:6b:81:9c:bc:9e:ee:dd:31:14:3d:54:ab:e4:
         58:ef:f6:14:da:3c:fd:7d:ee:87:b1:22:b0:45:8b:44:e4:9a:
         12:fc:ea:12:cc:da:49:46:00:54:a6:b5:dd:a7:1c:a6:79:76:
         a0:16:10:47:7b:d5:d9:91:c4:05:c7:61:1b:34:8c:99:48:c7:
         0a:03:7d:6f:c0:02:b5:0f:13:3f:35:6b:a4:b4:ab:98:c4:14:
         80:e7:71:b2:ff:35:35:e6:04:54:5a:0b:f9:56:a8:52:81:64:
         bb:33:e8:58:3c:ab:09:51:da:a4:8a:d4:c3:6c:82:26:0a:90:
         b7:ea:3f:93:a6:74:bd:c0:e5:90:17:06:15:34:6d:c6:fc:78:
         e0:82:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:21:55 2025 by rpki-client