This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/qEbYFQoXre_OuLtdayPj8liTJCA.roa
File:                     qEbYFQoXre_OuLtdayPj8liTJCA.roa (raw, json)
Hash identifier:          jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=
Subject key identifier:   A8:46:D8:15:0A:17:AD:EF:CE:B8:BB:5D:6B:23:E3:F2:58:93:24:20
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       019B7D5C76FEBC784B2C6D7E3A1A97B35D20
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/qEbYFQoXre_OuLtdayPj8liTJCA.roa
Signing time:             Fri 02 Jan 2026 06:19:30 +0000
ROA not before:           Fri 02 Jan 2026 06:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7721
IP address blocks:        2a13:b487:1200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:76:fe:bc:78:4b:2c:6d:7e:3a:1a:97:b3:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Jan  2 06:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a846d8150a17adefceb8bb5d6b23e3f258932420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:4a:e5:47:c9:87:2c:4c:41:58:72:ea:bc:
                    9f:32:13:2f:34:c4:4e:a4:4b:12:d5:5e:70:7a:93:
                    0c:e8:10:20:77:19:30:0b:28:db:40:66:b1:78:c8:
                    06:8f:af:09:ae:70:c7:15:19:aa:6c:af:d1:a2:fc:
                    dd:f8:1a:dc:de:07:79:26:6f:f0:e0:da:88:f8:92:
                    f8:3c:52:37:c2:46:89:2a:69:7c:27:11:86:0f:f1:
                    93:0c:ab:6f:73:c1:66:1e:aa:20:b0:91:a8:31:69:
                    97:33:ef:b4:13:17:e2:c0:85:92:3c:3c:4b:9c:cf:
                    dc:2b:c5:8f:46:df:01:0e:1d:e8:2f:f5:33:ff:b7:
                    ec:2f:fd:75:83:94:bd:f3:67:f9:74:fc:f0:26:0f:
                    52:d5:ca:77:ff:23:61:35:fd:9f:a7:ae:74:df:1b:
                    82:67:38:c9:d8:50:68:63:c4:c2:aa:2f:e3:bb:03:
                    af:00:91:21:7b:8f:68:95:3d:dd:17:2d:78:4c:0a:
                    cf:c3:1b:07:15:5e:28:2b:26:ad:e0:6d:f6:18:9e:
                    f1:55:38:71:5f:b6:64:83:ed:e1:8f:07:b9:c2:32:
                    d7:22:93:4a:60:dd:6f:1e:c9:21:db:dd:e3:fd:ee:
                    35:7e:02:3e:a3:4a:7d:af:ab:ed:43:f0:5d:b6:43:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:46:D8:15:0A:17:AD:EF:CE:B8:BB:5D:6B:23:E3:F2:58:93:24:20
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/qEbYFQoXre_OuLtdayPj8liTJCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:b487:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:28:b7:c4:fb:dd:1e:23:aa:bf:36:18:b1:37:06:55:8d:ac:
         6a:80:b1:fc:ac:5b:d4:5c:2f:0c:11:66:97:be:73:7d:26:8c:
         af:a5:6e:f3:8e:a4:5b:01:13:e6:46:38:dd:80:b8:78:99:51:
         49:07:60:b7:33:cc:f9:0d:cd:7e:9e:d5:b9:8a:0a:12:3c:4e:
         5d:01:1b:eb:e6:ca:af:dd:86:78:5a:03:a2:d1:0f:5e:ef:2c:
         ed:fc:21:12:99:0e:ee:a8:96:fb:ac:4c:bd:67:5d:cc:75:ba:
         63:ed:ad:1f:f9:62:9f:0f:2d:38:7a:fe:a4:63:31:10:b0:1f:
         d3:55:02:c8:bb:72:6d:67:98:5f:03:c1:5b:fd:73:0c:12:1b:
         9f:05:bb:dc:c0:99:8a:3d:92:f8:fc:56:30:36:75:5a:3c:5d:
         06:39:86:b5:ce:d7:a7:5a:39:46:b8:c4:0d:74:2b:4e:a7:ba:
         40:5e:c0:49:8b:e8:15:c1:73:f4:1a:79:69:df:7c:3c:29:74:
         81:14:70:6b:ac:35:c3:3b:ff:3b:25:a7:4a:c5:ba:47:24:11:
         ea:93:b3:40:8c:ae:69:bd:da:d8:57:5f:3b:55:82:31:31:9b:
         9f:5d:27:80:e4:d5:8f:7e:25:78:8b:45:46:ac:ef:57:15:94:
         b5:50:5c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 06:18:43 2026 by rpki-client