This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/6wW52SOqWXrfAlhosP3ynpLxyA0.roa
File:                     6wW52SOqWXrfAlhosP3ynpLxyA0.roa (raw, json)
Hash identifier:          FwT8E7oaMMyN8V9+/04Bhii7J8JtbQGmipn/OxYLQDA=
Subject key identifier:   EB:05:B9:D9:23:AA:59:7A:DF:02:58:68:B0:FD:F2:9E:92:F1:C8:0D
Certificate issuer:       /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial:       019B7AC7C9E0AABEEB59ABDE598DB2FC803F
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/6wW52SOqWXrfAlhosP3ynpLxyA0.roa
Signing time:             Thu 01 Jan 2026 18:17:52 +0000
ROA not before:           Thu 01 Jan 2026 18:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205366
IP address blocks:        185.201.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:c9:e0:aa:be:eb:59:ab:de:59:8d:b2:fc:80:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
        Validity
            Not Before: Jan  1 18:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb05b9d923aa597adf025868b0fdf29e92f1c80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:9e:91:1d:32:bd:64:64:8a:c0:36:d6:62:
                    92:7a:f4:89:7b:ee:67:25:4d:af:5d:0e:c9:95:24:
                    f0:16:da:b2:72:8f:8a:6f:ce:a5:73:8c:32:40:ee:
                    01:69:80:20:64:d7:2a:86:4b:2c:c9:d2:94:43:a7:
                    30:0d:39:ce:e6:73:5b:a8:67:53:29:68:05:12:eb:
                    cb:e1:7a:ae:50:d7:b1:39:5d:b6:32:11:41:cf:c0:
                    4f:9a:43:84:b8:4b:f5:9c:59:94:19:48:e5:46:4d:
                    a8:76:9c:02:b8:78:b2:71:f2:7d:1c:02:15:60:30:
                    d9:de:4f:a0:00:ac:00:b0:c8:06:41:1c:c0:92:5b:
                    27:27:6d:2f:82:1a:72:71:5e:b5:89:0f:e7:ba:35:
                    c1:32:7c:65:84:ca:dd:a4:78:f3:23:41:3f:4d:da:
                    77:bb:ef:90:a2:ae:dd:66:be:13:23:a4:0b:a6:11:
                    2d:65:e0:d2:e1:ae:dc:5b:5e:77:5a:ec:2d:14:3d:
                    2e:a9:d0:af:54:52:ff:51:b0:42:e1:da:18:16:a6:
                    54:7d:71:6c:6f:a0:e6:0c:05:0d:f8:d7:68:25:85:
                    d9:39:78:50:1a:12:e3:d7:a2:84:bd:63:47:67:75:
                    31:e0:bf:2f:36:af:1c:09:8b:12:b8:53:c7:50:06:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:05:B9:D9:23:AA:59:7A:DF:02:58:68:B0:FD:F2:9E:92:F1:C8:0D
            X509v3 Authority Key Identifier:
                keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/6wW52SOqWXrfAlhosP3ynpLxyA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:66:52:4a:07:10:18:4d:c8:32:f1:06:5d:bc:fd:dc:1b:26:
         52:88:67:ec:bc:28:d5:85:f2:eb:71:45:4b:52:1e:a5:a1:d4:
         9a:d5:f8:8e:dc:2d:b6:f4:ee:d7:3d:d7:97:54:bc:4d:b8:ac:
         73:29:e6:ef:93:18:db:43:92:31:f4:7f:99:04:6f:c9:b5:c6:
         d5:d2:36:8e:24:12:2f:5d:80:bc:09:9d:2b:25:0c:bd:2b:e3:
         7c:62:70:5e:1d:dc:74:e3:58:31:be:50:fa:e4:87:c2:9c:c1:
         cd:72:7b:a5:0c:db:f0:50:e7:c1:a7:7c:86:af:9c:ef:1b:dc:
         14:78:cf:3e:6a:ab:c3:be:a7:99:06:2b:a0:a5:54:2f:c0:2b:
         a7:59:39:21:b5:c5:e1:c1:21:9d:7f:62:ac:f1:aa:8c:14:79:
         1d:7e:de:12:5a:52:85:da:35:9d:c6:b9:ef:7e:81:2b:05:fb:
         87:a3:be:dd:20:24:da:aa:56:47:f5:38:1a:4f:c7:17:70:13:
         c6:c5:47:a5:1c:98:66:5f:e6:6c:df:8c:f3:0d:f5:87:96:20:
         bf:7a:73:38:03:0a:ec:8c:2f:53:c1:a6:c9:73:a4:8e:e2:8c:
         c2:b1:11:53:03:44:bb:17:aa:d4:d3:5a:82:d5:96:ab:6d:5f:
         87:3c:ff:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:51 2026 by rpki-client