This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/uIfxedIoPtI6sFt6tLFbdFhBmow.roa
File:                     uIfxedIoPtI6sFt6tLFbdFhBmow.roa (raw, json)
Hash identifier:          Q+T15udJmpOitf8fa/5KOsL5hhkwGZ8F5qC5MKVKRFw=
Subject key identifier:   B8:87:F1:79:D2:28:3E:D2:3A:B0:5B:7A:B4:B1:5B:74:58:41:9A:8C
Certificate issuer:       /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial:       019B7C7F3E44CA2E57BCCABF0648C8BDED34
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/uIfxedIoPtI6sFt6tLFbdFhBmow.roa
Signing time:             Fri 02 Jan 2026 02:17:52 +0000
ROA not before:           Fri 02 Jan 2026 02:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48746
IP address blocks:        91.212.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:3e:44:ca:2e:57:bc:ca:bf:06:48:c8:bd:ed:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
        Validity
            Not Before: Jan  2 02:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b887f179d2283ed23ab05b7ab4b15b7458419a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:7f:c8:64:d3:b0:da:9e:9a:7d:be:79:5f:
                    b7:a2:f7:53:2f:c3:f4:f8:01:3f:a5:be:06:66:fe:
                    c2:91:59:5c:cd:c5:a0:88:1d:fd:5e:de:51:24:7d:
                    1b:aa:05:70:43:f0:34:3b:37:93:14:fe:58:13:4b:
                    07:ef:1f:d7:d6:86:9b:e3:e5:5a:2a:d5:2d:cf:cf:
                    d9:f0:f0:af:8b:3e:46:32:00:26:58:90:66:f0:f7:
                    3c:c5:5d:e6:c5:43:e5:64:ce:72:94:b3:3f:f3:8b:
                    40:b2:a6:9d:88:ce:c7:53:d5:11:d7:10:d2:d1:05:
                    ee:6d:0a:53:7a:7c:2b:b9:2b:28:af:29:d5:ea:78:
                    fe:4d:b4:3d:93:2c:7b:c0:d6:04:5c:53:f4:ad:77:
                    10:e6:be:f1:e4:5f:23:90:e4:49:82:f0:41:6e:73:
                    dd:dc:cd:70:f4:ee:d1:85:11:f8:d0:b6:08:cf:ab:
                    a4:bb:bb:4b:d2:2b:e0:76:e2:6c:ac:a9:bd:e3:f5:
                    91:4c:1c:9d:a3:24:71:f3:12:93:3b:cc:eb:5d:c2:
                    fd:0f:d0:66:d1:ee:44:64:85:8a:07:c1:cf:cb:6a:
                    79:5f:50:1f:f0:0d:b2:01:6c:32:95:2a:1d:a9:5d:
                    bc:ee:74:57:b7:2b:d7:5d:c5:b2:b6:ff:f8:c9:f3:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:87:F1:79:D2:28:3E:D2:3A:B0:5B:7A:B4:B1:5B:74:58:41:9A:8C
            X509v3 Authority Key Identifier:
                keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/uIfxedIoPtI6sFt6tLFbdFhBmow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:fc:f2:82:e9:56:ad:bb:ea:96:16:02:27:aa:f3:2b:99:6e:
         64:e2:6e:5e:0c:d0:ce:f4:c2:ce:ef:08:98:9f:a2:7c:38:4c:
         98:21:06:9b:8a:96:7d:b3:bf:97:df:9b:2a:36:d2:87:0c:3e:
         51:ba:15:02:50:10:c2:50:c3:3e:81:1a:4a:19:c7:e9:20:f0:
         11:7d:04:23:2a:7e:b9:3d:21:29:09:ee:1b:7a:9b:51:10:99:
         68:07:99:e1:24:b1:1b:6c:45:1e:a3:78:68:0c:63:65:c0:39:
         af:34:41:5f:86:fe:c6:70:78:f4:2f:19:37:70:2f:1a:76:70:
         76:ad:72:0c:f0:eb:35:3f:e4:1c:83:2b:74:f4:81:fb:27:c1:
         41:74:2c:f9:08:ec:08:4e:b0:55:da:f0:d8:61:ce:2e:58:43:
         bd:0b:9a:b6:52:0d:df:6d:3c:4d:8b:f2:bb:e5:8f:f2:ef:80:
         c4:43:af:a6:14:1a:0e:d4:ed:c8:92:95:85:8e:08:68:65:18:
         e1:4a:12:d2:55:53:d8:5c:a2:d6:0e:cc:5e:9c:57:44:70:85:
         24:5c:87:9c:a2:94:66:df:fd:6f:fa:35:1a:22:14:af:b8:0e:
         81:31:dc:34:3a:bb:de:65:15:21:cb:16:7a:6e:c4:b6:e5:ac:
         5b:cb:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 16:45:54 2026 by rpki-client