This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/kpUSwA2owhRDQsiRkLkFCKzeDjY.roa
File:                     kpUSwA2owhRDQsiRkLkFCKzeDjY.roa (raw, json)
Hash identifier:          twtnbiLdWRxoWIEkMo+bxkXNXgyJd8H1k69QIGS4cRk=
Subject key identifier:   92:95:12:C0:0D:A8:C2:14:43:42:C8:91:90:B9:05:08:AC:DE:0E:36
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019B7F1503D2106A5600023706EAE87080C2
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/kpUSwA2owhRDQsiRkLkFCKzeDjY.roa
Signing time:             Fri 02 Jan 2026 14:20:42 +0000
ROA not before:           Fri 02 Jan 2026 14:20:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201634
IP address blocks:        87.107.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:03:d2:10:6a:56:00:02:37:06:ea:e8:70:80:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jan  2 14:20:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=929512c00da8c2144342c89190b90508acde0e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:93:4d:0c:53:a8:b0:a8:b5:8b:c0:a0:ec:e1:
                    b7:b2:38:d0:3b:02:02:59:2d:78:f1:03:1f:ba:a0:
                    db:3e:a3:44:12:56:36:c7:ae:18:1c:b0:a5:7b:d8:
                    92:eb:42:d5:a0:e8:c6:1c:83:ca:a1:76:64:36:b2:
                    c4:ca:18:41:37:02:8d:f4:53:fe:41:4a:a3:32:29:
                    8b:a8:51:41:97:07:df:ce:a6:6b:f0:2d:83:05:47:
                    c2:7c:26:71:3a:67:de:32:9a:9f:d1:99:15:31:ec:
                    94:d8:95:7b:79:15:81:6b:f6:04:4a:c0:4d:4e:c0:
                    f5:58:48:b7:09:9c:7e:77:81:80:cc:6d:1e:8e:5a:
                    6d:30:c6:16:71:62:de:43:09:13:92:c7:13:8b:4b:
                    58:21:e2:9a:ea:3e:83:00:56:ba:38:53:4b:27:0f:
                    e1:82:b7:88:e0:41:fb:93:d1:78:ab:7d:50:db:1d:
                    99:fd:fb:1f:26:35:96:62:c6:b6:2f:aa:34:4d:de:
                    a5:ce:af:f5:0e:10:77:3a:33:4a:68:4f:2f:ab:51:
                    a7:1f:ad:34:11:2b:ee:cf:d3:f1:d0:9b:05:3a:6e:
                    b8:3d:fa:15:93:de:ac:26:3e:d8:e3:00:fb:d4:63:
                    1d:3f:53:20:e4:c1:a0:ad:6b:ac:d8:86:69:2e:fa:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:95:12:C0:0D:A8:C2:14:43:42:C8:91:90:B9:05:08:AC:DE:0E:36
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/kpUSwA2owhRDQsiRkLkFCKzeDjY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.107.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:4b:3f:8f:65:00:6a:b6:d0:24:e9:d7:db:61:27:3e:db:75:
         52:ea:09:1c:9a:7a:55:06:70:cc:fe:60:31:ef:7e:2f:cc:09:
         f5:73:91:db:5f:94:a2:8d:a3:9c:45:a7:cb:4e:b8:5e:8e:d9:
         96:da:ac:de:ad:22:cd:91:9d:d4:7f:2b:53:2a:36:45:05:e9:
         23:81:9c:d1:e2:84:e4:c8:37:49:50:7c:b9:d2:9d:16:20:71:
         5f:64:a9:75:f7:e1:90:8a:fb:d1:54:04:75:57:7b:d8:49:ef:
         d5:78:a9:33:fb:16:32:f4:4b:1c:39:0c:92:09:a5:2e:19:e8:
         08:18:ee:ac:0e:7d:56:8d:7d:59:7a:65:7b:ee:50:45:59:95:
         99:64:6d:d3:90:65:d5:64:d4:83:ea:97:14:cc:fc:ba:c4:3c:
         32:01:10:4a:ee:30:6c:44:bd:01:d1:4f:ce:26:c4:1c:e7:1b:
         76:be:f8:36:bc:68:68:b7:1f:aa:16:cc:97:38:ae:0e:ea:f8:
         12:de:64:10:da:c0:66:41:e8:10:88:ac:7d:b7:52:42:e9:0d:
         8f:3a:43:25:9a:e6:02:b3:3f:fa:5d:64:2c:d0:98:ac:69:f2:
         c3:d0:35:65:27:28:92:47:36:d4:6f:68:0d:ae:e1:0b:9f:e6:
         1d:bf:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:47 2026 by rpki-client