This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa
File:                     F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa (raw, json)
Hash identifier:          VvXIzi7dvfLzRfzq8yrSH5FHAFTW+ckA8+wnrvNtY0E=
Subject key identifier:   17:A8:D7:43:BA:25:D5:E2:51:3B:CF:B3:AB:31:86:10:B5:8B:3E:95
Certificate issuer:       /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial:       019B7CED66095A34DD90A631876D07036AA6
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa
Signing time:             Fri 02 Jan 2026 04:18:11 +0000
ROA not before:           Fri 02 Jan 2026 04:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215839
IP address blocks:        213.134.27.0/24 maxlen: 24
                          2a14:2c80::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:66:09:5a:34:dd:90:a6:31:87:6d:07:03:6a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
        Validity
            Not Before: Jan  2 04:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=17a8d743ba25d5e2513bcfb3ab318610b58b3e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:ae:cb:6b:7c:4a:df:a2:86:ee:3b:bf:2a:
                    81:1c:62:3c:0f:9c:cd:cd:39:00:49:97:21:a6:05:
                    e6:22:b5:37:f4:5b:a9:ed:a7:58:33:64:a9:15:67:
                    88:27:4a:9f:27:f8:f1:90:b1:79:40:8c:9f:c1:7a:
                    6c:6b:3d:10:1e:8c:a3:8e:3c:87:33:fb:20:81:77:
                    a7:ba:cf:89:d5:71:84:a7:34:e3:1d:7e:c9:5c:e3:
                    68:28:f6:53:85:c6:3b:99:af:c4:33:45:6f:f5:50:
                    1a:d0:05:9f:90:28:84:c8:e4:67:91:40:2d:37:ec:
                    89:9e:d1:f5:57:45:89:c6:3d:f5:2e:bf:0e:36:0a:
                    dd:ce:ad:82:6f:9e:11:1a:9a:85:c8:6d:f9:49:c2:
                    dc:f1:9b:e1:90:39:ab:ac:1b:b3:a1:19:ef:8a:4f:
                    f5:98:b5:8a:3e:51:ba:ca:97:79:1f:e7:08:af:88:
                    8a:f3:1e:1d:0c:3e:03:79:e4:91:da:80:e3:b3:01:
                    ab:af:cc:50:8d:ab:83:08:fe:cc:5b:b0:d0:7e:ce:
                    50:05:7a:0e:6b:96:21:fa:19:e1:1a:a2:5c:ed:22:
                    b7:64:7a:9a:f8:d7:87:0f:2e:59:af:7d:42:ad:33:
                    0b:03:d4:83:78:b1:14:a5:f4:68:df:dd:35:61:da:
                    f2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A8:D7:43:BA:25:D5:E2:51:3B:CF:B3:AB:31:86:10:B5:8B:3E:95
            X509v3 Authority Key Identifier:
                keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.134.27.0/24
                IPv6:
                  2a14:2c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:0a:ca:6f:c7:8b:31:d3:e2:5c:25:7c:8e:2b:9b:d6:0e:
         0a:98:6a:f0:d2:a5:e9:58:ba:2f:77:aa:50:ab:72:ee:5b:07:
         5e:60:0a:95:43:2c:f5:bc:82:ab:33:42:94:f6:cb:1f:11:9a:
         e9:ab:5d:97:fb:ce:5b:b8:8f:d1:af:cc:84:a4:04:aa:04:80:
         4a:15:88:83:82:35:b9:a8:5e:47:1b:5a:c7:ca:76:05:31:33:
         be:e3:6c:67:08:68:f9:7a:5f:36:b4:7e:4d:ef:af:17:82:78:
         a1:c5:12:d0:02:15:e7:b8:d2:df:1c:36:04:ca:bb:3d:38:c3:
         85:ae:1f:ed:8e:25:da:6d:f7:23:d5:91:29:21:8e:a3:fb:73:
         a8:2c:1f:ad:5a:78:98:b4:b5:48:d9:c6:a5:0f:f3:7a:2a:f4:
         37:6e:99:cb:b2:00:49:9a:d8:c4:a5:76:89:6c:0d:8a:d5:56:
         aa:53:50:dd:79:3f:9d:4a:e2:02:77:d2:3e:56:90:45:1d:cb:
         25:8c:0a:6a:9b:7f:cd:28:0b:3f:58:ea:fd:05:5f:f1:d4:1f:
         7c:49:e4:c1:8d:7d:0d:c2:d4:0a:28:b8:76:32:ca:d2:c6:96:
         00:45:3c:96:80:c6:2d:67:a8:b3:32:4e:a8:19:5c:a8:24:03:
         92:e4:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:27 2026 by rpki-client