This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SZ_6ylScpPiEH0ZCa12sLX6zagk.roa
File:                     SZ_6ylScpPiEH0ZCa12sLX6zagk.roa (raw, json)
Hash identifier:          vrYlrzbxZBY+EsFYdOVrTApQB/bbmGVeGVEG1+3s1HQ=
Subject key identifier:   49:9F:FA:CA:54:9C:A4:F8:84:1F:46:42:6B:5D:AC:2D:7E:B3:6A:09
Certificate issuer:       /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial:       019B7FF1BE5C59E852EC95D54E5F0F16F469
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SZ_6ylScpPiEH0ZCa12sLX6zagk.roa
Signing time:             Fri 02 Jan 2026 18:21:47 +0000
ROA not before:           Fri 02 Jan 2026 18:21:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208084
IP address blocks:        2a03:5840:12b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:be:5c:59:e8:52:ec:95:d5:4e:5f:0f:16:f4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
        Validity
            Not Before: Jan  2 18:21:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=499ffaca549ca4f8841f46426b5dac2d7eb36a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:c2:fa:3c:ad:a7:fe:62:78:b8:ca:ac:ba:
                    5f:9f:e3:da:29:51:9a:68:84:05:b5:a1:3c:17:2c:
                    d8:15:34:e1:4f:ec:57:cf:ad:fe:66:d2:60:00:de:
                    2e:ac:de:89:e2:34:3a:ef:96:01:f2:74:20:ca:3d:
                    37:02:b2:e7:7c:85:e4:4e:28:f1:1a:ab:2c:49:0f:
                    b2:19:65:d5:fe:41:83:ae:d6:3b:06:61:17:5d:40:
                    b4:11:5b:96:5d:03:ba:ef:19:90:c1:32:53:97:55:
                    54:a3:8e:70:08:62:8c:91:34:f5:52:c5:2a:35:3e:
                    72:8b:fe:3c:01:56:85:93:02:da:5a:15:a6:1a:9f:
                    f9:8c:49:d1:ed:5c:a8:78:8a:02:49:5b:7c:21:83:
                    3f:37:58:3c:28:83:bb:09:37:d9:a4:47:e3:15:b3:
                    a4:06:b2:33:c3:6c:f2:87:ba:f5:98:43:f6:73:4c:
                    c9:ed:11:44:78:b2:d3:e3:c1:2c:a1:d5:38:84:3e:
                    b2:01:d5:81:cd:22:bf:91:49:e9:0c:d6:56:5f:89:
                    d5:e8:29:03:5a:e1:15:82:95:dd:c2:df:18:65:d3:
                    27:34:52:f0:79:33:7c:7e:a8:54:7c:63:e6:b0:8c:
                    1d:3b:72:10:e0:e7:4c:53:70:e7:77:8d:87:10:22:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9F:FA:CA:54:9C:A4:F8:84:1F:46:42:6B:5D:AC:2D:7E:B3:6A:09
            X509v3 Authority Key Identifier:
                keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SZ_6ylScpPiEH0ZCa12sLX6zagk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5840:12b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:65:71:d7:57:d3:80:b2:07:b2:0d:8a:f5:b5:c5:39:b5:59:
         3d:69:32:1a:5e:5d:67:87:8b:a1:19:b4:d2:5c:17:10:af:8d:
         6a:65:44:e7:b1:8f:1f:44:40:2f:9f:a6:2a:32:a2:71:05:bc:
         15:2b:a7:4f:f8:42:ac:80:1c:dc:c8:4f:bb:a2:ee:7a:4f:e6:
         7e:5d:7d:17:11:b6:96:02:a9:dc:63:e5:2c:55:c8:df:88:28:
         6b:78:c3:83:19:46:e4:25:52:b2:56:95:0f:cd:8c:fc:65:83:
         98:78:b8:28:6c:a2:e3:cf:7f:35:e2:44:f5:63:22:63:1f:53:
         6e:92:3b:6c:89:11:68:2d:94:a3:b1:f6:44:9c:47:28:10:8a:
         fb:7b:14:12:fc:f7:b0:6e:f1:60:da:b8:3e:fc:60:c0:aa:cf:
         3b:41:8d:17:f9:57:68:b0:8b:23:9d:a1:00:d3:cf:c3:dd:64:
         21:c7:f5:85:3c:46:36:f4:1d:e9:03:88:eb:f3:4f:78:bd:09:
         59:66:a5:b4:d6:d9:2a:fe:fd:7a:dc:18:3a:5d:df:03:97:fa:
         9a:d1:4f:ce:d7:a7:eb:8b:0c:d4:69:1f:ef:de:60:3e:59:65:
         74:e4:e6:bf:d1:2b:0b:ff:3f:80:cd:d0:e1:36:32:16:35:af:
         59:0c:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:22:08 2026 by rpki-client