This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/6XE4eDrC06d690GkRlprAnwbaW8.roa
File:                     6XE4eDrC06d690GkRlprAnwbaW8.roa (raw, json)
Hash identifier:          Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=
Subject key identifier:   E9:71:38:78:3A:C2:D3:A7:7A:F7:41:A4:46:5A:6B:02:7C:1B:69:6F
Certificate issuer:       /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial:       019C168B4087503984826758CB2CD7A11281
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/6XE4eDrC06d690GkRlprAnwbaW8.roa
Signing time:             Sun 01 Feb 2026 00:12:30 +0000
ROA not before:           Sun 01 Feb 2026 00:12:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215528
IP address blocks:        188.65.165.0/24 maxlen: 24
                          2a01:f9c0:cafe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:16:8b:40:87:50:39:84:82:67:58:cb:2c:d7:a1:12:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
        Validity
            Not Before: Feb  1 00:12:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e97138783ac2d3a77af741a4465a6b027c1b696f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:9d:b0:55:22:b7:25:8e:94:cf:fd:81:40:
                    46:5a:8b:0f:56:d0:14:a4:c2:1f:c9:2f:a9:14:7c:
                    05:06:e0:2e:ec:17:2c:3d:da:77:2c:0c:71:79:93:
                    91:87:74:f2:71:d6:e7:07:53:33:b6:71:78:96:40:
                    46:96:c5:93:9d:c4:9d:61:ff:37:ec:35:06:66:2b:
                    a5:52:c3:62:a7:7f:81:d8:e9:6d:95:05:6e:09:4b:
                    d5:22:34:2d:26:92:21:b4:30:83:a1:96:5a:24:1d:
                    23:d3:ac:bb:2e:9f:6a:d6:ef:5c:7c:ab:25:40:19:
                    c7:65:fa:02:8f:30:e0:9f:4a:76:93:60:c7:23:22:
                    b5:72:2b:60:ef:e6:65:a0:ae:04:84:4b:f0:a0:9d:
                    26:9d:ee:d7:a8:c9:ba:de:b5:a6:13:ba:9d:42:4d:
                    77:b1:52:51:e9:78:7c:e0:1d:14:95:2b:c1:3a:71:
                    fd:c6:29:6a:94:15:02:62:97:00:fd:56:43:0d:16:
                    3f:41:ce:f1:7e:70:64:42:a9:d5:46:29:37:58:81:
                    0a:c9:db:7a:34:27:f1:87:54:63:1a:db:1e:be:ef:
                    38:7f:8b:c7:5a:03:21:3a:d0:7f:2c:a7:4f:c4:f8:
                    8c:ed:e3:a9:8c:71:f7:ba:b5:03:77:72:4e:36:2f:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:71:38:78:3A:C2:D3:A7:7A:F7:41:A4:46:5A:6B:02:7C:1B:69:6F
            X509v3 Authority Key Identifier:
                keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/6XE4eDrC06d690GkRlprAnwbaW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.65.165.0/24
                IPv6:
                  2a01:f9c0:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:fe:1a:91:50:a7:1b:4b:b3:fc:91:3d:10:0b:60:ba:f9:44:
         82:81:6f:65:11:fa:73:d9:96:13:25:d4:22:1b:08:f1:11:47:
         67:d8:30:ba:45:7c:00:97:6d:64:e2:df:6f:2a:64:73:fc:e7:
         b0:cd:1d:1c:c1:0d:d1:b1:3b:6c:63:ca:3e:04:78:ed:3d:2b:
         d2:25:6f:d6:9c:a2:1e:d0:c7:d1:52:b9:f0:e7:f4:11:90:e6:
         4f:e6:b9:1c:af:48:ec:6c:3f:74:f3:c5:a5:8d:1d:20:93:ca:
         b9:f3:04:45:35:e5:cb:84:f3:73:57:e2:f1:05:66:7b:5f:9f:
         b3:38:c0:67:1a:07:d0:42:25:df:19:a4:f4:e4:2d:be:63:62:
         59:fa:32:d3:8d:13:be:76:5a:45:99:5e:12:1d:8f:24:0f:0d:
         74:e8:f0:74:97:88:cc:1f:93:29:ec:f5:05:af:a4:f8:25:f9:
         a8:75:71:6a:00:b0:5e:00:42:02:eb:68:19:79:de:90:9d:9f:
         13:a6:5d:fc:9b:9e:8b:78:1c:60:f7:c9:ca:59:5e:8d:b1:77:
         91:ab:8a:e5:12:eb:ba:62:d2:2b:90:be:ec:3a:77:f1:de:a9:
         b1:a2:9e:b3:ed:eb:1c:5a:da:d0:b9:18:49:23:96:cb:7e:b9:
         0d:c1:2c:3d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZwWi0CHUDmEgmdYyyzXoRKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNTMzMDgxMzdiNDU1YjY1YTZjMjg5ZWIwM2M0ZDRlMGZi
NmZjZmUwHhcNMjYwMjAxMDAxMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTcxMzg3ODNhYzJkM2E3N2FmNzQxYTQ0NjVhNmIwMjdjMWI2OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX6dsFUityWOlM/9gUBGWosPVtAU
pMIfyS+pFHwFBuAu7BcsPdp3LAxxeZORh3TycdbnB1MztnF4lkBGlsWTncSdYf83
7DUGZiulUsNip3+B2OltlQVuCUvVIjQtJpIhtDCDoZZaJB0j06y7Lp9q1u9cfKsl
QBnHZfoCjzDgn0p2k2DHIyK1citg7+ZloK4EhEvwoJ0mne7XqMm63rWmE7qdQk13
sVJR6Xh84B0UlSvBOnH9xilqlBUCYpcA/VZDDRY/Qc7xfnBkQqnVRik3WIEKydt6
NCfxh1RjGtsevu84f4vHWgMhOtB/LKdPxPiM7eOpjHH3urUDd3JONi+o0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOlxOHg6wtOnevdBpEZaawJ8G2lvMB8GA1UdIwQY
MBaAFCpTMIE3tFW2WmwonrA8TU4Ptvz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNTE5NTAtYjkxMi00YWI4LTlhNTgt
NzgyMjgxNTE1OTA3LzEvNlhFNGVEckMwNmQ2OTBHa1JscHJBbndiYVc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mNTE5NTAtYjkxMi00YWI4LTlhNTgtNzgyMjgxNTE1OTA3
LzEvS2xNd2dUZTBWYlphYkNpZXNEeE5UZy0yX1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAvEGlMA8E
AgACMAkDBwAqAfnAyv4wDQYJKoZIhvcNAQELBQADggEBAH/+GpFQpxtLs/yRPRAL
YLr5RIKBb2UR+nPZlhMl1CIbCPERR2fYMLpFfACXbWTi328qZHP857DNHRzBDdGx
O2xjyj4EeO09K9Ilb9acoh7Qx9FSufDn9BGQ5k/muRyvSOxsP3TzxaWNHSCTyrnz
BEU15cuE83NX4vEFZntfn7M4wGcaB9BCJd8ZpPTkLb5jYln6MtONE752WkWZXhId
jyQPDXTo8HSXiMwfkyns9QWvpPgl+ah1cWoAsF4AQgLraBl53pCdnxOmXfybnot4
HGD3ycpZXo2xd5GriuUS67pi0iuQvuw6d/HeqbGinrPt6xxa2tC5GEkjlst+uQ3B
LD0=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:41:41 2026 by rpki-client