This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/N6W-eQiPRjqw3-6I_QmctyffMuY.roa
File:                     N6W-eQiPRjqw3-6I_QmctyffMuY.roa (raw, json)
Hash identifier:          Zu+HeLoruNEi/OX9srfF84zysLGJyEcbFNJHAud3tiU=
Subject key identifier:   37:A5:BE:79:08:8F:46:3A:B0:DF:EE:88:FD:09:9C:B7:27:DF:32:E6
Certificate issuer:       /CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Certificate serial:       019B77588914F980CA42F1CC04C883CF1D9E
Authority key identifier: 6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/N6W-eQiPRjqw3-6I_QmctyffMuY.roa
Signing time:             Thu 01 Jan 2026 02:17:29 +0000
ROA not before:           Thu 01 Jan 2026 02:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49068
IP address blocks:        91.212.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:89:14:f9:80:ca:42:f1:cc:04:c8:83:cf:1d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4428f7f17b19c15068cab939d377940e8d4c70
        Validity
            Not Before: Jan  1 02:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37a5be79088f463ab0dfee88fd099cb727df32e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:d3:ed:e9:bd:27:e8:ae:57:79:46:45:9d:
                    0d:a1:9f:e2:fb:1d:ca:8d:4c:84:d0:5f:82:04:15:
                    44:4d:36:76:e9:db:12:a1:2d:32:f8:96:d1:a4:89:
                    08:9e:c4:fd:20:87:3b:c6:fe:5b:25:a3:83:a4:75:
                    c7:06:1d:32:6d:cd:51:1c:9a:bd:a2:2a:08:fd:0a:
                    2f:bf:5d:cf:81:a8:c3:f5:1e:1e:26:6d:73:74:69:
                    27:7c:73:48:fc:02:ce:42:92:23:3f:fb:19:7f:79:
                    c1:1d:d9:f2:ac:36:ab:91:a4:64:99:ff:4d:55:8c:
                    a5:bc:d3:de:4a:ca:6e:e6:0a:db:c6:df:43:c7:4c:
                    f9:29:a0:98:ce:cc:62:13:b8:96:a8:f7:df:c7:f6:
                    ab:12:0c:f8:2a:61:94:88:c9:06:e4:a0:6d:79:57:
                    21:ad:d4:fa:d1:20:3c:b1:bf:cd:f3:f9:b9:a3:8f:
                    11:98:52:fa:60:16:fd:7a:f7:de:31:6e:ea:51:80:
                    95:82:1f:ad:1f:c6:b4:3a:7d:d1:23:98:b0:69:5d:
                    f9:f0:52:00:a4:e2:f5:eb:95:00:db:d3:f7:70:76:
                    7d:29:02:bd:85:6d:ca:ff:44:61:b3:18:9e:32:23:
                    a7:84:90:1a:02:69:40:e5:99:b5:40:81:62:a1:5c:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A5:BE:79:08:8F:46:3A:B0:DF:EE:88:FD:09:9C:B7:27:DF:32:E6
            X509v3 Authority Key Identifier:
                keyid:6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/N6W-eQiPRjqw3-6I_QmctyffMuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:a0:20:42:7a:0f:f3:73:b1:bf:b2:03:95:42:68:1f:8d:96:
         47:f1:22:8d:3e:86:55:80:d4:78:bf:1f:2b:43:00:30:d3:9e:
         bc:17:95:08:c0:bc:ec:c5:20:6b:bc:d9:57:e6:c9:cd:e5:89:
         10:5c:75:c6:87:e6:8b:1d:12:67:a3:76:2a:b5:97:5c:6a:3b:
         d2:e6:30:77:ba:c5:0a:15:a1:4c:f0:24:ca:79:3f:d4:84:12:
         82:2e:3d:b2:bf:46:0f:96:c2:29:42:56:de:78:0f:bc:eb:e3:
         77:b9:70:90:40:b9:38:aa:52:c6:7f:b2:10:f6:48:20:1b:49:
         ed:a5:bd:b2:6d:08:eb:db:75:92:c5:b9:6b:b2:36:46:6d:52:
         11:00:a0:ec:eb:b6:e4:3b:fa:f5:db:54:e2:e6:6a:ee:4b:1a:
         93:da:d5:8d:bd:06:17:16:94:da:d3:d8:3f:bb:c5:6e:77:c5:
         05:1c:b2:f8:8f:8a:7d:c3:b0:51:44:04:ea:d6:63:d9:7c:2d:
         fc:9a:97:96:97:2d:c4:17:fe:f3:86:45:83:af:80:67:93:fe:
         05:96:df:26:5b:e9:1e:fa:5c:a5:16:00:26:35:bc:57:37:ce:
         cb:e0:62:d6:55:02:5b:df:9c:30:9d:7e:08:4c:cd:ef:1b:54:
         8c:48:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:29 2026 by rpki-client