This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6_Cnce9JvZNX0Wo0PR8uPZxB2FY.roa
File:                     6_Cnce9JvZNX0Wo0PR8uPZxB2FY.roa (raw, json)
Hash identifier:          iKR3kfIAFn2a0LPW4iVTJ4KFinuojhMkZ15qw0uG8us=
Subject key identifier:   EB:F0:A7:71:EF:49:BD:93:57:D1:6A:34:3D:1F:2E:3D:9C:41:D8:56
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       019B7F1446B0643928D3E575AE8A228A920F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6_Cnce9JvZNX0Wo0PR8uPZxB2FY.roa
Signing time:             Fri 02 Jan 2026 14:19:53 +0000
ROA not before:           Fri 02 Jan 2026 14:19:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41925
IP address blocks:        147.45.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:46:b0:64:39:28:d3:e5:75:ae:8a:22:8a:92:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jan  2 14:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ebf0a771ef49bd9357d16a343d1f2e3d9c41d856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:33:c8:9c:a4:7b:12:96:4c:8c:4c:6b:0d:
                    25:45:33:9e:6b:af:ec:9b:36:37:44:76:14:92:6a:
                    75:e9:5c:eb:c0:59:c6:21:df:65:af:dd:23:4e:dd:
                    3e:21:b6:a9:22:38:df:28:62:4b:e9:15:fc:ed:24:
                    bc:97:c6:96:54:62:ab:96:cd:b3:da:5d:62:c0:18:
                    a8:4d:de:84:db:6e:99:0e:e4:4a:c5:d2:7a:5f:0f:
                    e3:8d:e7:b2:19:f1:11:c0:80:dc:7c:d4:26:b2:d3:
                    f3:ac:98:a4:49:4b:8f:8e:ba:60:88:f5:09:b5:b2:
                    ef:1a:bc:9e:92:fb:1a:3a:c6:95:48:91:52:fc:8e:
                    eb:8a:18:71:9e:1c:2e:7a:d7:e5:6a:bb:75:3f:86:
                    be:7b:75:63:0c:27:b6:25:08:0e:0a:81:1f:90:db:
                    c0:a2:33:e3:25:30:a1:0e:59:c2:e6:03:71:d0:4b:
                    54:fc:8c:08:cd:db:4b:b2:47:ba:98:3a:ff:be:8f:
                    5a:ae:af:32:10:f3:38:62:c6:ba:84:e9:43:1b:d7:
                    37:be:ed:1a:31:6f:75:a2:38:ae:10:8b:32:e9:a4:
                    77:b7:4a:17:89:31:f4:05:91:7b:77:93:0e:a6:8b:
                    37:03:20:84:ff:ec:6a:71:39:94:33:56:dd:d4:39:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:A7:71:EF:49:BD:93:57:D1:6A:34:3D:1F:2E:3D:9C:41:D8:56
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6_Cnce9JvZNX0Wo0PR8uPZxB2FY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.45.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:87:dc:93:91:96:37:b7:c8:7f:f2:7d:5d:b4:5e:c1:45:82:
         a2:65:2c:97:1c:33:46:15:22:f0:7f:50:af:7f:05:8c:0d:a7:
         0f:a9:f6:ed:a8:06:c8:61:4a:dc:83:90:4f:1c:07:9f:8c:2d:
         5f:0a:4d:d6:33:a8:b1:0f:60:d0:8a:68:da:ee:da:ae:c3:ca:
         10:90:21:f5:f2:2a:28:d6:68:84:eb:14:74:75:df:52:eb:c4:
         3e:a8:84:4f:9c:c5:26:2f:0a:02:25:93:52:7f:60:6c:d3:81:
         f7:0f:d6:60:b6:f1:60:29:0e:0f:58:64:c8:3d:08:0b:ea:6e:
         8e:3d:64:30:01:67:51:28:a4:63:e1:dd:62:ec:e5:78:46:2d:
         d0:f2:b8:3d:8c:a9:bf:92:61:98:35:d1:85:14:c0:25:13:05:
         59:c1:25:95:fb:1e:48:c5:5d:20:d8:99:d4:35:53:3b:bf:74:
         ef:31:ae:13:0b:25:34:f5:1c:ae:60:60:56:3d:e7:c4:a8:04:
         57:ee:86:87:97:5d:5a:89:6f:41:9e:09:6c:a3:5f:94:a6:b2:
         f3:0c:8e:63:fb:08:16:e7:a1:f8:94:9a:88:c0:55:54:4b:ef:
         0e:6e:c1:ea:dc:fb:19:e0:25:3e:75:2f:2a:73:d2:dc:c1:07:
         f1:d9:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 11:09:50 2026 by rpki-client