This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa
File:                     6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (raw, json)
Hash identifier:          NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=
Subject key identifier:   E8:C5:CF:AF:C9:F6:15:5C:1D:03:E5:6D:EA:8A:81:75:11:AE:FC:C8
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019B79EC09995DFFB9E54ACAF2F6377A406C
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa
Signing time:             Thu 01 Jan 2026 14:17:50 +0000
ROA not before:           Thu 01 Jan 2026 14:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211122
IP address blocks:        77.75.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:09:99:5d:ff:b9:e5:4a:ca:f2:f6:37:7a:40:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan  1 14:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8c5cfafc9f6155c1d03e56dea8a817511aefcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:a1:15:51:8a:bf:7f:04:53:b4:a3:c1:c6:
                    9d:ce:95:37:18:7c:31:7e:e4:1a:19:eb:0f:bb:93:
                    1b:0d:21:fc:bb:97:60:b5:eb:e9:90:2a:33:25:87:
                    45:e7:de:c9:96:89:d9:09:33:69:6e:cc:b6:7a:f3:
                    b5:dc:00:86:ac:19:b9:9d:28:3f:31:84:7d:f5:93:
                    8d:15:13:d7:4f:a5:2c:37:fe:f9:70:22:f9:90:93:
                    fb:4d:a3:6c:6e:9d:85:7f:99:5c:f8:bf:43:bf:90:
                    5a:12:f5:f0:77:a3:f9:f0:45:9d:cb:de:98:77:55:
                    1e:37:6b:96:42:44:35:84:e5:e8:d5:72:91:8d:d3:
                    3c:09:81:c9:87:81:00:52:7d:f1:06:e1:b8:ef:d0:
                    2b:ed:46:05:b5:4b:6e:2a:a9:a9:5e:a6:1e:87:f9:
                    0f:fa:50:7d:bc:f7:67:0e:e5:8a:2b:ee:77:d0:1f:
                    75:52:64:98:45:8c:9a:97:22:7f:6f:85:ee:bc:76:
                    bf:f1:9a:5b:40:67:80:00:a9:ae:41:56:9c:45:08:
                    71:08:c0:78:13:68:5c:1b:f7:e6:bb:39:84:d0:0f:
                    50:b3:ba:8e:87:99:53:1d:43:e0:05:3b:67:61:70:
                    7e:ec:5f:fc:fd:80:ed:d9:0d:c0:b7:92:11:b8:99:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C5:CF:AF:C9:F6:15:5C:1D:03:E5:6D:EA:8A:81:75:11:AE:FC:C8
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:46:4a:04:16:34:c4:12:5e:fa:85:f4:79:a8:a0:4f:6c:12:
         4e:cd:3a:f2:d0:0f:53:4f:df:82:42:17:2a:b8:84:44:1f:69:
         d5:f8:c6:e9:d6:a0:d9:33:47:25:07:61:16:b6:91:47:29:32:
         09:1c:09:82:d5:67:3e:cc:71:3c:99:d5:0e:60:bd:2b:dc:8b:
         80:4d:89:85:9a:b3:c6:ca:5e:78:b3:35:66:f8:64:79:a9:b5:
         a6:88:6f:f4:5a:ad:09:fe:0d:d7:4b:12:6a:2c:20:2c:fb:76:
         cf:b5:bf:80:46:fe:8b:8f:fe:84:64:3c:bf:fd:a3:35:e9:0c:
         d5:c7:06:9f:7c:76:ae:a6:af:8b:f7:5c:3f:c4:32:47:7d:4b:
         02:41:03:89:38:5a:ac:ec:ad:dc:e9:f8:20:b7:d6:81:92:2b:
         e2:14:af:50:32:99:a5:92:f8:c6:18:7a:bd:d8:9f:50:f0:2d:
         a5:bf:a2:26:c2:ce:be:7b:9f:4f:3f:4d:12:0d:b1:0b:21:46:
         14:bd:f2:e2:78:0f:9f:c5:b5:80:a6:78:f5:cb:16:6f:38:6f:
         3e:8f:7f:3f:f1:3d:8b:c5:9c:d1:83:c2:f7:61:63:01:74:6c:
         d5:6e:9b:19:0a:92:ab:6a:9f:51:b6:c1:88:d4:8f:a4:55:9e:
         7d:0b:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:16:00 2026 by rpki-client