This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6oElc0dUwA7AHZH6Bg_1dx3-yjw.roa
File:                     6oElc0dUwA7AHZH6Bg_1dx3-yjw.roa (raw, json)
Hash identifier:          m7QlpdOiyJONzUGhrj5jHii1ieyCmu+Up2brCo4vl9A=
Subject key identifier:   EA:81:25:73:47:54:C0:0E:C0:1D:91:FA:06:0F:F5:77:1D:FE:CA:3C
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       019B7E37B0A99A2069D352412C95503ECDC6
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6oElc0dUwA7AHZH6Bg_1dx3-yjw.roa
Signing time:             Fri 02 Jan 2026 10:18:57 +0000
ROA not before:           Fri 02 Jan 2026 10:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14061
IP address blocks:        124.198.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 00:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:b0:a9:9a:20:69:d3:52:41:2c:95:50:3e:cd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: Jan  2 10:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea8125734754c00ec01d91fa060ff5771dfeca3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:d6:25:aa:58:e8:63:f5:c3:d4:12:20:f6:
                    cf:a3:62:5f:3d:fd:d5:0d:bb:25:3e:f1:d1:f4:96:
                    69:5d:e4:d1:ab:40:88:87:2a:35:c0:4c:0e:b0:44:
                    83:1f:6a:6f:49:20:0b:18:ff:2e:36:db:3f:f1:4f:
                    23:f4:09:f1:ce:1d:8a:38:48:a6:3c:45:60:2c:f1:
                    da:1d:01:b5:29:27:20:7a:5f:34:ff:a3:e2:28:b8:
                    87:b5:c1:b1:d9:f7:7b:0a:32:ca:3b:91:57:ae:f5:
                    0f:5c:55:19:8b:5c:61:c7:e6:6c:7f:c5:4b:10:b1:
                    d0:50:8b:f4:b9:ad:a1:7c:a9:ee:5b:5d:6b:fc:2c:
                    d6:48:d3:9f:e8:96:07:a4:df:88:75:33:e1:87:44:
                    19:24:52:b9:f9:38:c9:49:47:85:05:d0:c4:47:29:
                    9e:be:c7:d9:d3:52:73:fd:a8:a1:a1:10:e6:40:2d:
                    4f:01:bc:0a:11:6f:7f:8c:e4:8a:81:f0:5b:8d:17:
                    08:df:fd:8c:f2:fd:ff:41:40:34:0b:52:82:bc:b6:
                    f7:c4:1e:7f:72:03:13:64:e0:11:8f:52:cd:93:21:
                    5b:12:fd:a0:5f:6a:19:f0:a2:5c:90:e0:07:fd:d6:
                    90:ef:b7:45:8f:67:5b:01:33:7d:6e:ba:a1:99:41:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:81:25:73:47:54:C0:0E:C0:1D:91:FA:06:0F:F5:77:1D:FE:CA:3C
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6oElc0dUwA7AHZH6Bg_1dx3-yjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.198.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c1:a5:1c:84:4b:de:a4:cc:45:69:29:62:86:87:f9:94:71:
         26:c7:bd:12:6f:3a:0f:9d:79:37:a1:65:4f:e3:b2:11:16:c8:
         6e:30:21:27:88:c6:fe:eb:6e:72:7d:ef:0a:23:6a:08:41:fa:
         86:62:c9:45:7f:fe:c5:cd:6e:9e:9e:a8:7f:1c:18:4d:f2:45:
         66:51:6c:2a:ac:31:c7:74:8c:3e:07:1f:00:5a:01:db:42:75:
         49:8d:84:99:a5:fc:57:a7:56:df:91:b9:d8:72:8d:e7:f1:1d:
         e1:58:5b:bd:57:c6:86:ed:7d:5f:28:ce:50:2a:18:29:1d:31:
         33:45:c7:e4:be:05:f4:33:fc:44:5c:f9:00:fb:e2:3d:f1:2b:
         53:d1:21:61:fd:e6:82:80:5a:5d:92:5b:fe:89:4d:31:ad:b3:
         7e:5c:f4:21:da:a6:76:03:d8:04:e8:07:39:e7:f0:cf:06:2e:
         bb:83:58:ac:66:46:84:c0:9c:e0:a0:76:e1:86:ef:0a:14:d0:
         63:49:6d:9c:7b:29:4b:9d:fa:cd:ee:fe:d6:f2:47:38:76:6e:
         45:10:c0:b9:3b:5b:db:88:c1:50:6d:5f:f1:c4:d6:ad:d1:0b:
         83:70:72:c1:97:ae:4e:34:8b:71:d6:4b:4c:8a:4a:4d:12:21:
         b3:a8:a8:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N7CpmiBp01JBLJVQPs3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTgxMjU3MzQ3NTRjMDBlYzAxZDkxZmEwNjBmZjU3NzFkZmVjYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlPWJapY6GP1w9QSIPbPo2JfPf3V
DbslPvHR9JZpXeTRq0CIhyo1wEwOsESDH2pvSSALGP8uNts/8U8j9Anxzh2KOEim
PEVgLPHaHQG1KScgel80/6PiKLiHtcGx2fd7CjLKO5FXrvUPXFUZi1xhx+Zsf8VL
ELHQUIv0ua2hfKnuW11r/CzWSNOf6JYHpN+IdTPhh0QZJFK5+TjJSUeFBdDERyme
vsfZ01Jz/aihoRDmQC1PAbwKEW9/jOSKgfBbjRcI3/2M8v3/QUA0C1KCvLb3xB5/
cgMTZOARj1LNkyFbEv2gX2oZ8KJckOAH/daQ77dFj2dbATN9brqhmUH1KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqBJXNHVMAOwB2R+gYP9Xcd/so8MB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvNm9FbGMwZFV3QTdBSFpINkJnXzFkeDMteWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfMaQMA0G
CSqGSIb3DQEBCwUAA4IBAQAowaUchEvepMxFaSlihof5lHEmx70SbzoPnXk3oWVP
47IRFshuMCEniMb+625yfe8KI2oIQfqGYslFf/7FzW6enqh/HBhN8kVmUWwqrDHH
dIw+Bx8AWgHbQnVJjYSZpfxXp1bfkbnYco3n8R3hWFu9V8aG7X1fKM5QKhgpHTEz
RcfkvgX0M/xEXPkA++I98StT0SFh/eaCgFpdklv+iU0xrbN+XPQh2qZ2A9gE6Ac5
5/DPBi67g1isZkaEwJzgoHbhhu8KFNBjSW2ceylLnfrN7v7W8kc4dm5FEMC5O1vb
iMFQbV/xxNat0QuDcHLBl65ONItx1ktMikpNEiGzqKgM
-----END CERTIFICATE-----
Generated at Fri Jan 23 04:39:21 2026 by rpki-client