This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/6RCyfK5lXrZ-Fh1wJT4DIHh_aJA.roa
File:                     6RCyfK5lXrZ-Fh1wJT4DIHh_aJA.roa (raw, json)
Hash identifier:          NIpHTgNjvpFbiNgadzTTlusGjeYh5ejFtu9e6cmiZmM=
Subject key identifier:   E9:10:B2:7C:AE:65:5E:B6:7E:16:1D:70:25:3E:03:20:78:7F:68:90
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       019B7F82C3F529CB752366A7404A15A0E746
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/6RCyfK5lXrZ-Fh1wJT4DIHh_aJA.roa
Signing time:             Fri 02 Jan 2026 16:20:34 +0000
ROA not before:           Fri 02 Jan 2026 16:20:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199654
IP address blocks:        2.56.164.0/24 maxlen: 24
                          185.227.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:c3:f5:29:cb:75:23:66:a7:40:4a:15:a0:e7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 16:20:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e910b27cae655eb67e161d70253e0320787f6890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:12:71:05:51:98:06:6f:c9:66:ff:73:f1:
                    d7:cf:61:b9:58:17:e8:20:57:76:7f:87:40:14:ee:
                    09:45:dd:12:56:e1:53:01:b3:f9:f7:eb:50:5d:99:
                    c8:10:77:d3:ba:78:d5:48:16:ca:bf:da:8c:be:c8:
                    25:38:de:93:71:66:c0:67:04:bd:2a:cd:4b:ad:09:
                    e6:44:c1:d8:e2:a0:fe:18:1a:6f:41:35:f3:40:72:
                    41:96:0d:28:bb:de:23:4a:12:b3:9c:6a:90:0d:a2:
                    be:12:ea:94:37:e4:18:8f:9a:f2:56:82:ba:b3:f8:
                    ea:bf:ca:a3:aa:99:96:c1:de:98:34:f8:25:c6:7e:
                    09:e3:c6:fa:bb:e3:31:fe:3f:56:97:d2:75:d7:55:
                    a1:a2:09:69:b7:5f:f5:b3:9c:82:96:70:b1:6c:8f:
                    dd:e6:3a:13:2c:96:b7:b3:22:40:1e:e7:e0:33:75:
                    a0:93:be:f7:23:99:ae:43:20:fb:fa:ae:9d:cf:2f:
                    ff:47:b5:38:9d:45:54:63:00:f2:35:b9:ea:cf:e2:
                    01:08:db:4f:85:d6:a4:62:db:5d:8a:c3:1b:dc:9e:
                    0e:34:28:0d:18:07:12:a2:a2:20:67:82:64:2a:56:
                    2d:5b:6e:4c:95:df:e1:de:34:3e:a5:28:e5:b7:8d:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:10:B2:7C:AE:65:5E:B6:7E:16:1D:70:25:3E:03:20:78:7F:68:90
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/6RCyfK5lXrZ-Fh1wJT4DIHh_aJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.164.0/24
                  185.227.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:35:2c:01:92:fe:13:a0:28:63:2d:87:fd:b4:b1:34:59:
         24:fe:e0:e2:13:3f:ae:2f:96:dd:06:3f:6e:50:c5:b9:e2:db:
         0d:c3:8b:02:9d:6f:75:de:db:50:c7:87:45:af:b9:0a:17:89:
         53:7b:82:ad:0e:12:77:6d:dc:ba:67:37:a7:19:0d:6e:75:7a:
         49:3b:44:61:cb:d4:fd:89:3d:af:9e:49:f8:8a:3a:18:6a:69:
         2b:da:43:e2:cf:9e:8c:aa:07:0d:1e:f3:ba:36:fd:70:e3:30:
         79:f4:fc:62:5f:fb:1f:ec:10:43:88:f1:f9:06:a3:b5:c6:37:
         78:47:53:7e:f4:81:f8:c3:ed:5b:d2:5d:01:d0:a8:fa:ff:ec:
         a5:22:f6:83:f5:c6:6f:b0:b6:03:14:3d:9c:c9:d7:de:4c:c3:
         c1:5a:bf:79:6d:13:b6:88:06:29:7b:c4:cf:cd:6b:2f:5d:ce:
         f2:4b:f7:c4:a2:6f:16:0f:10:cc:38:22:81:4e:8a:75:73:9d:
         69:b2:13:41:ba:55:cd:5f:54:13:68:52:28:4d:82:71:d5:ca:
         9c:75:b1:35:6c:e9:dc:94:bc:ca:6d:32:7e:9b:07:9a:d9:8c:
         44:4f:11:72:5c:e4:d5:5b:26:e6:bf:33:e0:25:67:ba:35:51:
         1f:79:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:23:28 2026 by rpki-client