This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/G06i-715DWwzIGeO7ozFvpuVglo.roa
File:                     G06i-715DWwzIGeO7ozFvpuVglo.roa (raw, json)
Hash identifier:          NAlau0Ue6s6TBIRjFefwCaMBe6vvRr2rxlG4HQ5m2NM=
Subject key identifier:   1B:4E:A2:FB:BD:79:0D:6C:33:20:67:8E:EE:8C:C5:BE:9B:95:82:5A
Certificate issuer:       /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial:       019B9D786F35B14638FCC5B57D371A44D4E0
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/G06i-715DWwzIGeO7ozFvpuVglo.roa
Signing time:             Thu 08 Jan 2026 11:57:54 +0000
ROA not before:           Thu 08 Jan 2026 11:57:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62442
IP address blocks:        91.234.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9d:78:6f:35:b1:46:38:fc:c5:b5:7d:37:1a:44:d4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
        Validity
            Not Before: Jan  8 11:57:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b4ea2fbbd790d6c3320678eee8cc5be9b95825a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:05:db:db:de:c6:29:10:a8:21:e2:2e:5c:
                    3d:23:e0:3d:f3:7c:b7:f9:d8:f5:24:48:aa:6f:57:
                    27:a0:c6:c0:e8:4e:dd:f8:b9:16:c5:5e:b7:09:b3:
                    b7:75:de:2e:ec:7d:e0:46:40:07:2e:49:f9:77:8b:
                    97:69:a6:8d:aa:04:b7:bb:8e:44:da:96:cf:55:24:
                    a7:6e:11:ce:6d:6a:ee:ff:9f:5f:28:7d:7f:0e:6d:
                    7b:18:b5:dc:f9:99:a2:44:9a:35:18:8e:1a:f7:d5:
                    fa:6d:ce:69:6d:3a:1c:1e:5d:4d:d0:6a:aa:ce:eb:
                    a2:8e:cd:0f:7f:16:af:fa:4d:33:1a:24:a8:60:54:
                    6e:07:40:f7:e5:8d:6a:88:30:ff:60:0e:7d:b2:aa:
                    c7:26:59:08:79:e6:e1:ea:56:e3:04:53:ad:56:af:
                    af:91:f4:68:96:e9:10:8a:5a:0b:7f:44:97:d1:88:
                    0e:16:4b:6e:6d:51:9f:9e:6a:18:a4:75:0f:d7:7b:
                    01:53:34:04:25:29:88:9b:5d:72:97:ba:86:20:3d:
                    6a:22:5b:04:7f:b7:1f:32:81:35:cb:5a:34:61:59:
                    53:3e:30:e1:d7:64:32:32:f9:56:85:38:36:5e:20:
                    49:ad:c9:22:f9:45:b4:d2:f9:59:89:f7:10:77:a6:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4E:A2:FB:BD:79:0D:6C:33:20:67:8E:EE:8C:C5:BE:9B:95:82:5A
            X509v3 Authority Key Identifier:
                keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/G06i-715DWwzIGeO7ozFvpuVglo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:6c:70:67:62:7b:7e:d6:df:1a:ca:27:6d:6c:62:dd:eb:09:
         1b:90:49:4c:e8:53:1a:c0:e7:b5:52:d4:48:90:08:60:a2:3b:
         fa:3d:28:5d:3f:df:49:a4:c2:0e:84:0e:fd:f0:e5:51:9e:6f:
         d1:7e:16:ce:01:c1:71:ac:c9:bc:4f:07:c9:a9:d4:94:2a:7e:
         45:ec:2d:d0:f9:38:d3:89:86:94:c1:ee:7a:00:22:65:f6:11:
         51:e8:a7:b9:28:21:c5:b9:20:ea:b9:fb:89:55:4a:e6:8a:61:
         0e:82:01:73:9b:d2:aa:38:c9:fb:57:b5:69:81:57:06:27:88:
         00:19:70:64:8c:df:3e:e3:c4:bb:a2:c1:d9:59:d7:a5:1a:40:
         fa:7a:84:19:a3:82:3b:de:37:6c:00:53:4f:1f:50:47:c3:06:
         64:38:4d:6e:ff:8a:89:2f:0d:d0:d5:ca:60:1c:59:17:cd:46:
         2f:46:bf:73:39:b0:a8:d5:e1:04:d1:b0:3d:5d:4d:e7:bd:29:
         64:cb:d9:59:fc:59:c1:d3:e9:53:94:81:27:c4:41:30:fa:c7:
         9a:73:3c:09:2a:e2:2f:39:9b:9f:e8:37:e7:02:61:ba:5d:29:
         9e:80:bb:b7:9b:61:8c:d5:32:89:d7:23:1b:ff:42:b4:5e:f2:
         7f:31:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:02:10 2026 by rpki-client