This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/E6j5x-9cUF2jZ4o83WvGg6QS0fk.roa
File:                     E6j5x-9cUF2jZ4o83WvGg6QS0fk.roa (raw, json)
Hash identifier:          y8rSEBRdZoC/DsraWGFCwBOgPT4J+IhEzX382mx+Nv0=
Subject key identifier:   13:A8:F9:C7:EF:5C:50:5D:A3:67:8A:3C:DD:6B:C6:83:A4:12:D1:F9
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       019B78350CEC27E492BB3C73CB18BFF9EFAE
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/E6j5x-9cUF2jZ4o83WvGg6QS0fk.roa
Signing time:             Thu 01 Jan 2026 06:18:21 +0000
ROA not before:           Thu 01 Jan 2026 06:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47957
IP address blocks:        91.208.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:0c:ec:27:e4:92:bb:3c:73:cb:18:bf:f9:ef:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: Jan  1 06:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13a8f9c7ef5c505da3678a3cdd6bc683a412d1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:de:6d:85:6d:92:d3:5f:fb:8c:aa:51:7c:
                    d9:4c:67:0f:9a:53:38:c7:d1:9c:90:ef:77:1c:57:
                    e1:78:c5:0a:ec:60:9c:7e:0e:8a:6d:14:fc:86:ea:
                    43:67:c4:0a:5d:a7:95:50:b2:b5:ef:50:09:2c:a6:
                    bb:31:58:2a:48:f8:cf:ac:f9:4f:64:7f:8c:ca:c5:
                    6c:1d:0c:e2:10:16:af:5f:f8:9f:eb:d3:b9:f9:4d:
                    d0:80:f4:a2:15:3b:a0:a8:ab:cb:c0:18:ea:74:69:
                    92:07:d4:2d:5c:c9:7d:ba:38:f8:3c:ed:36:3a:c5:
                    53:56:a2:98:6f:83:eb:be:92:29:8b:42:a1:fd:a5:
                    b5:30:83:8c:4b:30:5b:45:f7:3b:27:86:82:b1:ba:
                    07:c6:6f:be:e4:49:31:cb:79:66:87:fc:76:3f:05:
                    df:d8:5a:27:0f:a0:28:bc:97:28:41:e7:00:19:49:
                    84:54:f0:24:25:a4:48:c2:bd:46:f7:6c:73:36:60:
                    f5:d3:84:86:78:15:ec:53:4d:73:a8:ef:58:8b:9f:
                    5f:19:6e:16:07:eb:ec:00:7e:67:7b:ef:9f:ae:44:
                    83:b8:1e:73:d8:d7:f1:46:68:54:64:f3:aa:a9:7b:
                    b0:fe:f8:ef:25:fe:11:10:45:c4:03:46:1e:c3:1e:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:F9:C7:EF:5C:50:5D:A3:67:8A:3C:DD:6B:C6:83:A4:12:D1:F9
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/E6j5x-9cUF2jZ4o83WvGg6QS0fk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c6:80:77:05:8f:3c:ef:13:f7:b0:ae:85:87:37:97:42:09:
         ca:50:07:ea:aa:54:ea:12:14:4a:51:c9:3e:aa:1d:90:dd:b2:
         83:c0:f9:ad:97:44:05:ee:67:41:13:a7:49:a8:9f:c7:0c:bf:
         61:5e:36:79:eb:ac:c4:7b:27:39:0c:4c:c3:3a:42:a8:c9:08:
         6e:de:fe:9d:68:21:71:c7:71:0a:b8:b3:b1:f5:8b:6c:6a:ea:
         d1:f8:f1:39:d1:09:90:c8:39:26:35:13:fa:22:b2:5e:eb:9c:
         d8:9a:88:9f:47:75:58:9d:8a:32:d9:bf:82:b0:70:c8:66:1f:
         e1:df:32:98:02:35:fc:71:27:1f:e3:78:f7:c1:18:61:ac:c0:
         66:45:f6:7c:f9:ee:a3:e4:60:4a:a7:4a:a2:d0:74:3d:03:48:
         36:58:12:bb:cf:ef:91:e6:9c:1b:ff:a4:17:13:82:b1:2a:04:
         7d:50:84:a9:1c:12:cf:a8:a5:50:c1:b0:97:e3:06:e9:ed:f8:
         ea:b4:b0:85:93:55:8a:60:cc:d3:4d:a8:48:97:51:cc:6d:83:
         34:1b:d3:30:48:c4:9e:92:a8:06:25:9e:64:d4:3b:03:1a:0d:
         89:57:0d:58:e1:5f:95:e7:1b:ca:e2:a6:64:66:e3:fb:2b:6c:
         97:a4:e9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:06 2026 by rpki-client