This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa
File:                     6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (raw, json)
Hash identifier:          mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=
Subject key identifier:   E9:7E:09:93:AA:A8:EF:91:10:63:90:2A:67:B2:F2:68:C9:8F:3A:3E
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       019B7F80F7A449ED199CDEFD5AFBD9F3B863
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa
Signing time:             Fri 02 Jan 2026 16:18:36 +0000
ROA not before:           Fri 02 Jan 2026 16:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49234
IP address blocks:        193.24.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:80:f7:a4:49:ed:19:9c:de:fd:5a:fb:d9:f3:b8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Jan  2 16:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e97e0993aaa8ef911063902a67b2f268c98f3a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:df:16:9e:97:93:c5:46:7c:57:ca:94:7c:
                    c8:6c:79:c0:2a:d1:38:f7:b1:a7:47:f4:6a:f4:9e:
                    cf:f6:12:5b:98:75:1e:9b:ea:e7:6d:7f:31:cf:19:
                    d8:af:03:7d:ad:32:58:81:eb:87:87:ad:93:7b:15:
                    5c:13:13:68:66:58:99:fc:1d:53:58:2a:c0:78:4c:
                    e8:a9:5f:55:c6:dd:f7:81:2e:3a:89:7f:89:b5:25:
                    78:e4:80:a7:77:d5:b5:5f:1e:a1:73:25:7b:3a:86:
                    6f:0f:f4:0d:88:1f:e0:f3:3a:b7:58:17:7e:5e:ec:
                    c9:86:0e:a1:45:48:03:c8:6a:75:53:e1:32:a0:ec:
                    00:da:b5:c0:bc:fd:5e:93:3e:69:7a:a9:70:e9:2f:
                    48:c3:80:68:17:23:4b:41:ef:dc:e4:63:91:31:37:
                    0b:c9:f3:62:f2:ad:99:3e:02:db:c7:28:c4:4d:e0:
                    a7:b2:7d:ca:08:b7:3a:04:ce:f5:3f:6b:56:06:fb:
                    0c:5b:ec:61:ad:81:35:d1:7a:bd:1c:43:d3:be:04:
                    c6:d1:ac:60:2e:f6:13:0e:4a:44:90:88:e8:88:fe:
                    c5:db:80:65:61:a2:32:1b:10:03:9b:81:5b:ac:5c:
                    45:bd:a7:a6:01:51:83:65:84:55:b1:77:d2:e0:a0:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7E:09:93:AA:A8:EF:91:10:63:90:2A:67:B2:F2:68:C9:8F:3A:3E
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:be:a8:f5:48:91:76:b5:c3:19:52:ce:4d:5e:27:b7:da:8b:
         04:fc:2c:7f:81:c6:98:2d:8f:12:a8:13:19:7d:06:fb:01:2e:
         e9:3d:55:5f:63:91:6f:63:09:c1:ec:9a:55:68:42:64:43:65:
         f6:4c:5b:1c:d0:93:64:5f:ce:ce:c8:cd:d2:26:99:38:38:55:
         af:a8:df:0f:da:29:58:6c:ff:09:07:73:4f:6a:74:42:e7:b6:
         3f:02:42:c8:ca:bd:23:7a:4c:f9:c3:8d:66:5e:21:b3:94:4c:
         9d:b5:96:25:7a:12:2d:38:e8:f5:6c:e0:bf:34:a5:e0:01:fa:
         0f:3b:bc:0e:04:fa:86:76:f1:08:77:09:a3:f2:47:bc:d1:15:
         48:0f:2c:ca:87:14:50:cb:ce:2f:b7:ee:fb:83:06:0b:df:09:
         09:b6:ec:22:67:8f:fd:1a:7d:39:e6:ad:b9:bb:7e:65:a1:54:
         07:78:96:82:dc:69:13:ad:f9:30:bf:46:5e:14:29:d4:f5:ea:
         58:71:21:70:18:78:57:c9:bd:25:f8:fb:96:cc:a4:51:7b:b1:
         6d:21:84:02:06:1f:80:65:b9:b2:a2:69:b8:ac:3c:9c:65:b8:
         1a:3e:57:3f:04:4c:b3:39:ed:68:0b:2b:db:ff:a3:7b:c7:29:
         19:07:45:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/gPekSe0ZnN79WvvZ87hjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MmM5YTFjOWM0ZmY3OTNlODg4YmQ1ODNkY2E5ODE1Y2M0
NTc0YzAwHhcNMjYwMTAyMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTdlMDk5M2FhYThlZjkxMTA2MzkwMmE2N2IyZjI2OGM5OGYzYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru/fFp6Xk8VGfFfKlHzIbHnAKtE4
97GnR/Rq9J7P9hJbmHUem+rnbX8xzxnYrwN9rTJYgeuHh62TexVcExNoZliZ/B1T
WCrAeEzoqV9Vxt33gS46iX+JtSV45ICnd9W1Xx6hcyV7OoZvD/QNiB/g8zq3WBd+
XuzJhg6hRUgDyGp1U+EyoOwA2rXAvP1ekz5peqlw6S9Iw4BoFyNLQe/c5GORMTcL
yfNi8q2ZPgLbxyjETeCnsn3KCLc6BM71P2tWBvsMW+xhrYE10Xq9HEPTvgTG0axg
LvYTDkpEkIjoiP7F24BlYaIyGxADm4FbrFxFvaemAVGDZYRVsXfS4KAI+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOl+CZOqqO+REGOQKmey8mjJjzo+MB8GA1UdIwQY
MBaAFFUsmhycT/eT6Ii9WD3KmBXMRXTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEt
Yjc4ZmY4MGE4MDI3LzEvNlg0Sms2cW83NUVRWTVBcVo3THlhTW1QT2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEtYjc4ZmY4MGE4MDI3
LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwRiAMA0G
CSqGSIb3DQEBCwUAA4IBAQCTvqj1SJF2tcMZUs5NXie32osE/Cx/gcaYLY8SqBMZ
fQb7AS7pPVVfY5FvYwnB7JpVaEJkQ2X2TFsc0JNkX87OyM3SJpk4OFWvqN8P2ilY
bP8JB3NPanRC57Y/AkLIyr0jekz5w41mXiGzlEydtZYlehItOOj1bOC/NKXgAfoP
O7wOBPqGdvEIdwmj8ke80RVIDyzKhxRQy84vt+77gwYL3wkJtuwiZ4/9Gn055q25
u35loVQHeJaC3GkTrfkwv0ZeFCnU9epYcSFwGHhXyb0l+PuWzKRRe7FtIYQCBh+A
Zbmyomm4rDycZbgaPlc/BEyzOe1oCyvb/6N7xykZB0XI
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:12:02 2026 by rpki-client