This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa
File:                     vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (raw, json)
Hash identifier:          8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=
Subject key identifier:   BC:09:11:A6:64:EF:76:3B:16:C3:FD:00:29:A3:D0:CC:51:90:05:94
Certificate issuer:       /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial:       019B7D5C8D46781BF3D7AF28475FAA517654
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa
Signing time:             Fri 02 Jan 2026 06:19:35 +0000
ROA not before:           Fri 02 Jan 2026 06:19:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8811
IP address blocks:        91.231.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:8d:46:78:1b:f3:d7:af:28:47:5f:aa:51:76:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
        Validity
            Not Before: Jan  2 06:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc0911a664ef763b16c3fd0029a3d0cc51900594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:73:59:6a:c7:be:86:6e:2a:91:e4:45:46:
                    a0:25:73:87:83:b8:21:61:85:e8:54:0c:c2:be:9e:
                    2c:d2:97:20:08:99:a4:ee:c2:13:f9:05:1f:7f:d9:
                    85:42:4f:9e:da:25:50:02:98:ed:36:37:7e:e8:c7:
                    e4:48:07:da:18:f7:d1:8e:db:70:7c:81:f6:ea:56:
                    84:3f:da:d2:17:e9:96:7d:84:ff:96:37:d3:a6:59:
                    ad:b9:ec:75:86:7c:4d:ae:cb:67:c4:56:d4:79:99:
                    e6:a8:a8:3e:4b:b2:30:14:c4:8d:7a:8c:96:29:db:
                    9f:00:10:6b:23:e1:9e:cb:03:43:99:b4:a0:39:63:
                    aa:05:9b:44:32:cc:a7:b8:f6:d2:12:e6:85:f4:b7:
                    0f:3c:23:b9:da:63:6e:bc:ca:ff:44:9d:e5:ad:e3:
                    8e:e9:4a:6a:04:4e:c0:1e:16:26:f5:a3:d0:a3:72:
                    0b:fc:97:e6:9c:26:cc:fd:1b:02:24:01:48:67:9e:
                    ae:3c:6e:35:9f:d8:92:dd:84:31:07:d0:b3:98:fd:
                    82:e1:5a:8e:88:d9:5c:9b:e8:c3:54:bd:a1:df:15:
                    dc:d6:fc:d7:e4:2d:85:53:50:a8:34:db:af:72:e4:
                    2a:2d:9e:f8:05:53:a9:2a:21:da:fd:b3:d6:bb:f8:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:09:11:A6:64:EF:76:3B:16:C3:FD:00:29:A3:D0:CC:51:90:05:94
            X509v3 Authority Key Identifier:
                keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:af:af:8e:39:ad:1b:4d:d2:da:c2:64:18:1f:92:66:2f:
         7e:0c:f4:78:a5:09:d4:56:25:f4:90:d3:55:64:c7:83:24:01:
         4b:37:85:90:e7:e2:2b:cc:82:7b:eb:46:2e:e8:22:0a:58:81:
         fc:74:95:e1:d8:30:32:9a:d5:29:95:cb:81:3c:2c:c0:4e:a6:
         74:f6:6b:c0:44:3f:f3:c3:cb:85:f5:2c:45:f7:e3:89:76:de:
         12:06:e5:af:0f:71:3d:0e:14:d9:6b:1b:c1:42:b6:37:5f:e1:
         8f:55:7f:8a:ee:c2:78:ed:99:48:31:4b:9f:42:7d:83:3b:f1:
         50:7f:c4:17:12:43:48:93:98:05:44:05:36:66:44:16:8b:ed:
         fb:7e:12:f6:bd:4d:6a:cd:e4:32:b7:e2:47:aa:f5:70:d8:aa:
         3c:ba:4a:20:39:a8:04:b0:2b:46:2f:2a:06:17:86:8a:df:e9:
         d1:0e:76:28:27:24:bb:f2:fa:80:2f:05:a7:0d:0a:2f:8a:44:
         45:58:c3:a0:71:6e:d8:99:e3:bd:c3:2d:12:ef:b5:dd:98:e6:
         9b:df:a3:a2:74:ff:ed:1d:d8:6f:b2:8d:b3:ea:4c:36:45:02:
         21:ef:0f:6a:8c:ed:06:4a:29:13:23:d6:8f:98:09:0c:30:01:
         47:17:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:58 2026 by rpki-client