This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/tq6kMgziYFoXho7XVp0bBOLTUsY.roa
File:                     tq6kMgziYFoXho7XVp0bBOLTUsY.roa (raw, json)
Hash identifier:          O9FhMzBttczXakVkdlx4+Fgz/P4MA/RrEi2IBCBaSDo=
Subject key identifier:   B6:AE:A4:32:0C:E2:60:5A:17:86:8E:D7:56:9D:1B:04:E2:D3:52:C6
Certificate issuer:       /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial:       019B76EB3F75BE65EE328D61E5F17C1D9A45
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/tq6kMgziYFoXho7XVp0bBOLTUsY.roa
Signing time:             Thu 01 Jan 2026 00:18:07 +0000
ROA not before:           Thu 01 Jan 2026 00:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215333
IP address blocks:        91.90.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 00:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:3f:75:be:65:ee:32:8d:61:e5:f1:7c:1d:9a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
        Validity
            Not Before: Jan  1 00:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b6aea4320ce2605a17868ed7569d1b04e2d352c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:18:31:6c:35:2b:07:47:ce:ac:98:a7:c5:
                    70:31:5b:8c:cd:f5:99:0f:46:1b:e8:0c:f2:79:f4:
                    f9:5f:59:f3:a9:61:2c:50:dd:ec:03:fb:d0:55:bd:
                    7d:ff:d0:46:af:ea:ca:fb:c2:db:9e:41:43:ba:b0:
                    99:4a:9e:c7:99:89:00:09:42:9d:42:d7:ed:3e:6a:
                    5d:0c:56:aa:9f:13:22:6e:c7:8d:d8:66:23:12:1e:
                    74:83:3f:fd:50:d6:0a:09:78:1c:31:86:fe:52:d2:
                    b8:af:e3:c9:52:6e:43:ec:97:3b:15:35:40:89:c4:
                    c6:fe:fb:e1:e8:ac:97:b2:09:3d:7b:59:33:b5:d6:
                    de:01:06:60:a6:4f:d0:e2:f7:ae:fb:da:dc:e3:fe:
                    75:dd:6d:27:8e:36:d2:1a:96:78:73:0f:fb:b8:ec:
                    43:e7:d7:02:49:0a:fa:34:38:96:6b:0c:84:65:56:
                    ba:25:3d:62:9c:2a:4b:93:25:ce:18:cb:6d:f5:ad:
                    d9:8a:91:b6:60:3d:18:1e:31:10:23:ec:50:a9:cb:
                    7e:b3:e4:42:bd:7c:e9:be:5d:a6:52:92:e1:d4:04:
                    25:06:40:fc:db:4e:88:ec:8a:2b:c2:aa:b6:7b:bb:
                    01:57:7b:92:6c:1d:4b:23:21:fb:61:d8:b8:a3:81:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AE:A4:32:0C:E2:60:5A:17:86:8E:D7:56:9D:1B:04:E2:D3:52:C6
            X509v3 Authority Key Identifier:
                keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/tq6kMgziYFoXho7XVp0bBOLTUsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.90.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:83:33:45:00:08:10:89:eb:ed:5b:0e:a8:09:e2:c1:77:5e:
         97:ee:a3:59:eb:22:8a:a3:23:40:30:da:f6:df:de:62:74:a2:
         47:df:6c:9f:38:e6:a0:fc:09:d5:62:86:c1:98:20:1b:6f:31:
         da:08:92:a3:a9:be:43:2d:ef:87:35:97:95:5e:28:2f:73:6f:
         78:e0:77:99:cc:1d:6e:d2:17:71:a1:59:94:63:28:27:cd:22:
         d9:06:7b:7f:88:dd:ef:41:29:65:2b:81:ed:da:41:05:a3:f7:
         89:f1:71:b1:33:d3:27:a4:fd:47:d0:77:fc:db:93:11:7f:93:
         25:ca:6e:d3:d9:14:a6:b9:2e:a6:9d:94:10:c3:88:87:84:64:
         12:47:f5:57:75:ff:e0:21:5d:59:00:3c:d2:b1:94:4b:aa:aa:
         70:6f:90:73:28:d9:9c:7e:3a:00:a7:74:1b:d6:55:8c:af:d4:
         4d:b2:2b:ec:f9:c7:17:12:4a:b0:d0:c7:68:04:f8:16:d9:81:
         c6:5c:93:fb:f7:f8:d6:2a:00:94:2c:95:e2:98:48:ad:c9:b6:
         37:1d:05:3c:d6:c2:4a:0a:95:8f:c2:ce:29:be:a8:29:40:a1:
         ca:42:8f:48:a8:91:d7:90:9e:c5:6f:c3:31:df:a0:4b:47:a8:
         11:50:09:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26z91vmXuMo1h5fF8HZpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OWE3Njk0MTJkMmQ5NjNiNDkxZWJlMzFkNDQxMTFkY2Fm
Y2NjOTQwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmFlYTQzMjBjZTI2MDVhMTc4NjhlZDc1NjlkMWIwNGUyZDM1MmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvAYMWw1KwdHzqyYp8VwMVuMzfWZ
D0Yb6AzyefT5X1nzqWEsUN3sA/vQVb19/9BGr+rK+8LbnkFDurCZSp7HmYkACUKd
QtftPmpdDFaqnxMibseN2GYjEh50gz/9UNYKCXgcMYb+UtK4r+PJUm5D7Jc7FTVA
icTG/vvh6KyXsgk9e1kztdbeAQZgpk/Q4veu+9rc4/513W0njjbSGpZ4cw/7uOxD
59cCSQr6NDiWawyEZVa6JT1inCpLkyXOGMtt9a3ZipG2YD0YHjEQI+xQqct+s+RC
vXzpvl2mUpLh1AQlBkD8206I7Iorwqq2e7sBV3uSbB1LIyH7Ydi4o4GFWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLaupDIM4mBaF4aO11adGwTi01LGMB8GA1UdIwQY
MBaAFFWadpQS0tljtJHr4x1EER3K/MyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYt
N2UyNTNlNjM5OGU1LzEvdHE2a01nemlZRm9YaG83WFZwMGJCT0xUVXNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYtN2UyNTNlNjM5OGU1
LzEvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1qjMA0G
CSqGSIb3DQEBCwUAA4IBAQCJgzNFAAgQievtWw6oCeLBd16X7qNZ6yKKoyNAMNr2
395idKJH32yfOOag/AnVYobBmCAbbzHaCJKjqb5DLe+HNZeVXigvc2944HeZzB1u
0hdxoVmUYygnzSLZBnt/iN3vQSllK4Ht2kEFo/eJ8XGxM9MnpP1H0Hf825MRf5Ml
ym7T2RSmuS6mnZQQw4iHhGQSR/VXdf/gIV1ZADzSsZRLqqpwb5BzKNmcfjoAp3Qb
1lWMr9RNsivs+ccXEkqw0MdoBPgW2YHGXJP79/jWKgCULJXimEitybY3HQU81sJK
CpWPws4pvqgpQKHKQo9IqJHXkJ7Fb8Mx36BLR6gRUAk/
-----END CERTIFICATE-----
Generated at Thu Jan 1 06:17:42 2026 by rpki-client