This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6_qWk33Cp7rDi1fCV6i6mSBGO44.roa
File:                     6_qWk33Cp7rDi1fCV6i6mSBGO44.roa (raw, json)
Hash identifier:          TBvJTAJ3WdoigBl4FKwDUvPCqllcxV0ilikv9iU3y7I=
Subject key identifier:   EB:FA:96:93:7D:C2:A7:BA:C3:8B:57:C2:57:A8:BA:99:20:46:3B:8E
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       019B7E3943B0135BC786A923EAFDD0B1C965
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6_qWk33Cp7rDi1fCV6i6mSBGO44.roa
Signing time:             Fri 02 Jan 2026 10:20:40 +0000
ROA not before:           Fri 02 Jan 2026 10:20:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208460
IP address blocks:        2a0c:b641:a80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:43:b0:13:5b:c7:86:a9:23:ea:fd:d0:b1:c9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 10:20:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ebfa96937dc2a7bac38b57c257a8ba9920463b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:74:02:a7:76:5b:ae:ce:b5:f1:2f:8d:39:
                    0a:5b:24:3e:c8:48:b9:48:9e:3e:c8:08:55:ad:79:
                    e2:ac:55:99:2d:a7:88:f6:71:e5:2b:59:67:79:4b:
                    88:36:26:b3:ce:39:98:94:73:d0:0a:84:ef:ea:e7:
                    7d:00:09:2a:a3:76:59:1e:c5:fa:73:87:96:0b:10:
                    4e:02:c9:89:f7:7b:a3:c2:10:05:35:fb:3f:93:11:
                    79:d8:87:e8:d0:de:b0:e1:f1:ee:1c:b0:a8:df:8f:
                    7c:35:de:29:fb:f2:c5:3c:09:1a:c9:b2:0f:8d:d0:
                    f1:81:aa:95:ca:ca:aa:34:8b:38:14:fd:4a:7e:dc:
                    8b:50:6f:84:c4:16:a0:65:b3:86:94:8e:33:1d:55:
                    90:40:c8:bb:90:21:86:f1:b5:58:5a:66:20:33:de:
                    b7:dc:ed:c5:de:c7:04:b1:85:68:94:ab:d7:f5:1e:
                    00:7b:20:ee:1e:38:16:39:03:a3:30:7a:9b:aa:c5:
                    2e:27:03:d3:15:48:79:2e:a0:3f:43:3b:8a:bc:d8:
                    ac:36:61:35:fe:bb:bc:51:4c:69:83:67:64:70:99:
                    c0:80:4e:32:0c:66:f1:70:b2:7d:dc:bf:29:ae:fb:
                    22:bf:81:62:03:e3:9a:ba:6a:e2:5d:17:d3:aa:f0:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FA:96:93:7D:C2:A7:BA:C3:8B:57:C2:57:A8:BA:99:20:46:3B:8E
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6_qWk33Cp7rDi1fCV6i6mSBGO44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:a80::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:a1:6b:2f:0f:7a:86:2b:2c:bd:0d:fc:4d:d3:10:c4:95:c7:
         fb:4a:17:e2:95:f5:d0:e6:0d:de:69:48:48:5f:d8:e9:f9:7a:
         d4:19:5d:30:71:da:ee:eb:55:4d:ef:a1:e8:36:94:66:7d:2e:
         49:7e:2c:c7:d3:b8:e9:a4:7f:e3:90:ee:de:0f:95:31:1b:1a:
         86:77:5a:d8:f6:08:de:a5:e5:f0:00:d3:11:23:03:2e:d1:02:
         03:55:0b:84:4b:57:6e:64:3d:50:81:bc:c5:e1:2f:5a:88:f4:
         aa:c8:d5:24:6a:8b:b9:2a:fd:38:8c:f6:d1:8a:b3:8d:9f:c5:
         ff:f1:7d:32:d0:4b:59:59:8d:a9:7d:93:b0:3a:f9:60:ce:f9:
         c1:f2:b9:b0:39:48:69:1a:ea:4c:ed:23:f6:3f:4d:72:1d:94:
         0c:5b:2b:32:5a:ed:9c:dc:dd:ce:62:07:b1:6e:63:07:58:19:
         e5:83:8d:f4:3e:b3:4b:02:9d:93:91:04:4d:2f:ff:01:b2:25:
         e9:64:ac:a4:a3:e2:1d:69:ad:05:68:39:6d:80:10:46:60:c7:
         f8:34:14:03:7f:38:2f:52:ac:e2:39:61:cb:2b:54:78:7a:91:
         f9:d9:a3:d0:18:1e:a8:d8:0e:82:4c:73:db:b1:85:bb:3e:cd:
         1b:55:82:dc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt+OUOwE1vHhqkj6v3QscllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmZhOTY5MzdkYzJhN2JhYzM4YjU3YzI1N2E4YmE5OTIwNDYzYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXd0Aqd2W67OtfEvjTkKWyQ+yEi5
SJ4+yAhVrXnirFWZLaeI9nHlK1lneUuINiazzjmYlHPQCoTv6ud9AAkqo3ZZHsX6
c4eWCxBOAsmJ93ujwhAFNfs/kxF52Ifo0N6w4fHuHLCo3498Nd4p+/LFPAkaybIP
jdDxgaqVysqqNIs4FP1KftyLUG+ExBagZbOGlI4zHVWQQMi7kCGG8bVYWmYgM963
3O3F3scEsYVolKvX9R4AeyDuHjgWOQOjMHqbqsUuJwPTFUh5LqA/QzuKvNisNmE1
/ru8UUxpg2dkcJnAgE4yDGbxcLJ93L8prvsiv4FiA+OaumriXRfTqvAVPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOv6lpN9wqe6w4tXwleoupkgRjuOMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvNl9xV2szM0NwN3JEaTFmQ1Y2aTZtU0JHTzQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQqA
MA0GCSqGSIb3DQEBCwUAA4IBAQBtoWsvD3qGKyy9DfxN0xDElcf7ShfilfXQ5g3e
aUhIX9jp+XrUGV0wcdru61VN76HoNpRmfS5JfizH07jppH/jkO7eD5UxGxqGd1rY
9gjepeXwANMRIwMu0QIDVQuES1duZD1QgbzF4S9aiPSqyNUkaou5Kv04jPbRirON
n8X/8X0y0EtZWY2pfZOwOvlgzvnB8rmwOUhpGupM7SP2P01yHZQMWysyWu2c3N3O
YgexbmMHWBnlg430PrNLAp2TkQRNL/8BsiXpZKyko+Idaa0FaDltgBBGYMf4NBQD
fzgvUqziOWHLK1R4epH52aPQGB6o2A6CTHPbsYW7Ps0bVYLc
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:45:03 2026 by rpki-client