This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/l6wS_VO91DxNt91DRsp0DvYwmuo.roa
File:                     l6wS_VO91DxNt91DRsp0DvYwmuo.roa (raw, json)
Hash identifier:          22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=
Subject key identifier:   97:AC:12:FD:53:BD:D4:3C:4D:B7:DD:43:46:CA:74:0E:F6:30:9A:EA
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       019B7FF18EE9A58B63A10D7ECDE9C1C93CCB
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/l6wS_VO91DxNt91DRsp0DvYwmuo.roa
Signing time:             Fri 02 Jan 2026 18:21:35 +0000
ROA not before:           Fri 02 Jan 2026 18:21:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209854
IP address blocks:        193.56.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:8e:e9:a5:8b:63:a1:0d:7e:cd:e9:c1:c9:3c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: Jan  2 18:21:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=97ac12fd53bdd43c4db7dd4346ca740ef6309aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:07:76:71:b8:94:cb:55:4c:21:21:01:c3:60:
                    af:4d:14:55:07:ac:32:44:59:26:50:3e:ed:5f:4b:
                    8f:76:de:ee:20:50:4a:cc:6e:87:9d:5b:a0:2b:aa:
                    6a:77:ee:58:7c:2f:28:8a:de:45:b3:5d:2a:1f:d0:
                    f6:d1:88:a8:7a:63:04:8a:96:0f:0a:e2:6e:2e:5b:
                    e7:35:26:38:d1:75:33:1b:9d:00:b6:61:99:97:15:
                    bf:4c:2a:d0:c9:48:0e:64:30:f8:43:32:13:83:b0:
                    af:0e:7c:d4:d7:b0:04:89:67:ff:b4:bd:26:b5:7a:
                    64:f9:31:3e:b4:70:04:2d:9c:d8:1e:b0:fa:6f:2f:
                    05:1e:80:02:3f:58:e0:e9:bb:5d:2f:d4:e3:c7:6e:
                    ea:94:68:80:09:59:61:77:ce:0c:21:71:26:28:61:
                    36:bf:5e:53:79:55:da:2f:83:b3:05:0c:26:df:c4:
                    41:38:4d:a7:25:33:9c:07:88:0c:8e:ca:39:2a:00:
                    bd:8c:5c:70:65:0d:fa:37:66:50:ba:5e:56:36:a5:
                    a7:c8:6e:e0:4c:1b:83:35:d9:3f:e3:c4:40:74:14:
                    5f:da:37:dd:7b:b5:f9:99:d0:0d:2c:4c:a1:53:c1:
                    65:7a:13:d1:d6:c3:b8:5b:7d:ff:5f:44:e4:3d:11:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AC:12:FD:53:BD:D4:3C:4D:B7:DD:43:46:CA:74:0E:F6:30:9A:EA
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/l6wS_VO91DxNt91DRsp0DvYwmuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:88:3e:4c:5a:f9:5a:51:57:04:9d:ac:25:b6:71:45:d1:cb:
         da:7d:10:27:2b:77:50:a3:28:fb:27:12:2e:6f:dd:46:93:f9:
         d5:30:2f:72:b2:a8:23:2a:17:06:5c:6e:ac:05:1a:0a:11:7f:
         e2:05:12:43:ec:b6:05:3b:e0:e0:0d:e1:4e:70:aa:ce:a2:68:
         6a:58:4a:44:91:13:81:02:6e:41:c5:3b:9e:eb:c3:01:2a:b4:
         45:ef:ee:fb:f5:72:40:6d:a4:72:8e:41:5a:6a:13:9f:fb:63:
         e9:62:de:ee:0c:75:bf:23:12:0e:42:05:48:25:13:35:b6:28:
         ea:f1:54:db:6d:57:30:b9:56:71:38:ba:bf:50:dd:03:1d:29:
         2b:cf:92:5b:98:f2:40:58:33:5c:b1:d6:7b:3c:ad:63:d6:de:
         55:6b:70:89:4e:1b:b7:14:ae:0e:eb:47:38:a7:0a:3d:5c:b9:
         dd:e7:7a:7d:10:05:d3:14:5a:37:5d:4c:0e:15:26:c2:61:57:
         ff:16:1f:3c:05:33:68:d6:0e:5f:16:d5:16:37:f5:35:3f:e8:
         ab:3e:e9:e7:59:a5:9c:2a:3b:8f:98:68:9e:02:07:4f:69:ad:
         52:07:b0:e9:70:34:ad:54:22:76:29:ac:f9:72:74:9a:76:08:
         27:0c:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:31:24 2026 by rpki-client