This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D6EihVqjMUZlfm_2CSnRPYElQyk.roa
File:                     D6EihVqjMUZlfm_2CSnRPYElQyk.roa (raw, json)
Hash identifier:          +uh3AcUeZOvvNNzGAn1oVEhYK5M+xwZn/VchN4VxIVA=
Subject key identifier:   0F:A1:22:85:5A:A3:31:46:65:7E:6F:F6:09:29:D1:3D:81:25:43:29
Certificate issuer:       /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial:       019B7C1307B532791B24306FB9C977795354
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D6EihVqjMUZlfm_2CSnRPYElQyk.roa
Signing time:             Fri 02 Jan 2026 00:19:40 +0000
ROA not before:           Fri 02 Jan 2026 00:19:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209326
IP address blocks:        212.243.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:07:b5:32:79:1b:24:30:6f:b9:c9:77:79:53:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
        Validity
            Not Before: Jan  2 00:19:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0fa122855aa33146657e6ff60929d13d81254329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:b6:5a:a1:93:6e:5a:53:33:b7:e0:80:f2:
                    51:a7:08:84:59:cc:07:1b:09:2d:6d:1c:f7:06:0d:
                    a2:c7:a3:ed:a1:dd:bb:36:f2:16:3d:2a:91:e8:d7:
                    aa:eb:6e:9f:27:1f:cc:23:dc:85:9e:ae:53:67:37:
                    d8:7a:6e:0f:6d:c2:f8:b2:73:fb:09:0f:36:3b:f3:
                    af:dd:48:ac:b3:e0:68:17:6a:95:dc:f9:6f:ab:a4:
                    de:b2:8c:bb:20:f4:93:0f:b3:94:80:61:d5:d7:26:
                    b5:ba:11:5a:13:e1:d2:a9:32:42:36:5b:01:03:fc:
                    a7:1e:3d:15:e8:3e:2a:87:e0:a6:cf:8d:9f:dc:b8:
                    81:bf:ad:4c:66:0d:69:99:45:8b:4f:f1:fa:65:8e:
                    54:02:c2:8b:bf:a5:a2:69:6d:8c:42:a1:0f:7a:bd:
                    e2:8c:5c:a7:14:03:4c:bd:5c:e1:08:aa:68:17:80:
                    58:27:40:c6:96:45:01:e6:6c:b4:f0:15:83:2f:aa:
                    3f:55:24:0a:9f:ff:35:0b:88:b8:65:f8:47:64:eb:
                    c5:55:eb:c3:cd:b7:a3:f2:40:17:07:b5:93:b9:e5:
                    83:b8:96:a7:bf:a6:15:9c:91:c4:b3:d2:b4:71:d2:
                    d7:04:e9:00:11:fc:78:35:20:13:6e:22:12:ac:1c:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A1:22:85:5A:A3:31:46:65:7E:6F:F6:09:29:D1:3D:81:25:43:29
            X509v3 Authority Key Identifier:
                keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D6EihVqjMUZlfm_2CSnRPYElQyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.243.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:8a:f2:96:2b:15:9a:86:b2:00:73:07:7a:88:e7:b5:0d:85:
         c1:8a:95:0c:06:b2:c1:27:ee:e7:83:61:69:52:c2:2b:39:20:
         04:79:83:5d:40:67:72:1f:be:64:58:97:3e:e9:b3:97:38:96:
         cf:fb:72:61:0a:3e:f1:b2:20:5e:d5:e7:7c:9f:c6:28:92:97:
         5a:b3:a6:1c:f4:33:55:f2:88:45:b5:ab:ac:04:dc:e6:e6:8b:
         19:8c:a9:a2:53:74:15:a5:95:84:cb:14:86:89:70:8e:57:8e:
         82:a2:7e:0f:a0:a6:53:c5:e8:33:c0:62:68:8f:45:03:34:c3:
         f1:75:61:0b:1c:5a:33:87:fe:d8:21:06:8b:79:52:a8:cc:f1:
         cf:a5:ee:dd:e3:bf:4f:7d:68:bb:bc:a9:0d:78:ff:15:94:5d:
         a5:75:27:a9:0a:26:df:d1:eb:ea:99:c5:ae:62:b0:56:4c:6a:
         fc:4f:04:ae:79:53:b1:ae:65:bf:8b:a5:85:a3:a1:3e:89:a5:
         3e:07:8e:25:7a:a3:f5:ed:d9:2e:41:5b:d1:21:85:2d:eb:9d:
         c0:3b:57:f7:ca:36:0f:67:7c:c9:05:76:6f:9c:19:80:59:9e:
         8f:99:0e:21:ba:85:a0:4d:bc:99:ad:03:d3:65:96:21:de:c4:
         8a:58:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:00:21 2026 by rpki-client