This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6WsYGv-pSKP6ZzJjI3qB33MOgXk.roa
File:                     6WsYGv-pSKP6ZzJjI3qB33MOgXk.roa (raw, json)
Hash identifier:          gmhuU19AYYZVOUgU+6LiaTx3y8WKPDmPoobM8/JmPm0=
Subject key identifier:   E9:6B:18:1A:FF:A9:48:A3:FA:67:32:63:23:7A:81:DF:73:0E:81:79
Certificate issuer:       /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial:       019B7C12ED63BE34D9B91D4EB5F937921254
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6WsYGv-pSKP6ZzJjI3qB33MOgXk.roa
Signing time:             Fri 02 Jan 2026 00:19:33 +0000
ROA not before:           Fri 02 Jan 2026 00:19:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16114
IP address blocks:        194.209.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:ed:63:be:34:d9:b9:1d:4e:b5:f9:37:92:12:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
        Validity
            Not Before: Jan  2 00:19:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e96b181affa948a3fa673263237a81df730e8179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:11:12:d8:c2:e0:1a:7b:75:5d:b0:87:bf:
                    e8:23:8e:cf:81:6b:0a:54:ed:af:ee:47:30:d2:c5:
                    0d:59:30:c7:4d:d8:c2:f9:14:3b:64:a6:13:e1:57:
                    4c:3c:d3:1b:f9:9b:c6:6e:97:6a:9a:fe:8b:d8:bf:
                    65:23:c7:b7:40:19:b7:13:fb:38:ad:8d:dc:cf:10:
                    05:42:45:c7:67:50:c5:65:30:2b:b2:b3:94:55:ac:
                    67:5e:10:36:0b:1d:ac:09:59:cf:15:09:26:dd:9c:
                    9d:60:b5:ae:10:1c:4a:86:28:bd:00:85:4e:7e:73:
                    a1:29:49:a6:12:b1:02:73:11:31:1d:38:59:99:3b:
                    80:ef:25:7d:33:16:9c:fd:a1:92:27:21:9d:6e:8b:
                    4f:1b:92:83:ca:78:61:ce:dd:78:22:46:85:83:5e:
                    85:7a:e7:0d:c3:f2:cb:2b:d1:ab:a7:5b:ff:68:8b:
                    13:98:50:fd:b8:51:78:d2:e8:ef:d9:a0:33:28:bb:
                    1f:1e:d9:ee:6d:7f:93:68:dd:9a:48:f1:0e:71:dc:
                    f2:fa:1e:b2:84:c5:71:d4:33:b9:58:1f:8c:31:71:
                    6d:0c:f8:f6:5e:e4:83:34:64:b3:c4:b3:08:cd:23:
                    df:93:ee:0a:22:81:d5:56:4c:a7:23:86:b5:76:89:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6B:18:1A:FF:A9:48:A3:FA:67:32:63:23:7A:81:DF:73:0E:81:79
            X509v3 Authority Key Identifier:
                keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/6WsYGv-pSKP6ZzJjI3qB33MOgXk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.209.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:43:39:1b:67:0b:c7:39:a5:d7:33:55:45:83:74:e1:1b:c8:
         26:b9:c7:24:e4:12:6f:d5:bb:5b:d0:a9:5e:87:bb:62:75:2e:
         4d:dc:74:f8:1b:92:54:e7:76:60:20:f2:01:be:4c:2a:99:e4:
         68:3c:9a:5f:bf:c6:89:4e:ed:cc:8d:98:36:b8:9a:61:77:25:
         e9:f4:9b:17:4a:a1:6f:bc:eb:f8:b2:67:2d:2b:cd:0a:10:29:
         c4:e0:3b:8c:a5:de:ac:5e:15:cc:ce:ca:38:63:23:7e:7b:9c:
         9f:f3:63:2e:8e:c9:b7:ae:69:d6:1e:25:99:11:5e:c3:70:65:
         54:35:8b:34:70:c6:a0:e0:59:0e:0c:dc:ec:4a:db:3c:ea:13:
         eb:7d:5f:23:63:a6:78:b3:36:4d:c7:d4:f7:ff:70:f5:f4:63:
         32:fe:62:e4:c3:73:ab:df:b2:f8:8e:de:87:a0:0f:01:c9:8c:
         f0:e7:fa:9d:09:03:2b:c3:7d:1e:0c:21:fa:2d:c6:de:45:c1:
         f9:e2:c2:96:23:e8:f2:c5:7c:b7:bf:d5:e5:43:3e:63:45:25:
         f4:56:7b:e6:49:86:4f:f8:6e:b1:9c:e0:21:67:51:ab:22:b1:
         9a:6c:20:cb:5f:9e:4f:19:0d:e1:7e:56:7c:09:22:c7:c5:ea:
         8d:5c:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:45:35 2026 by rpki-client