This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/6Bwn8_rs-pHSbDSgPP9FI0fOTP4.roa
File:                     6Bwn8_rs-pHSbDSgPP9FI0fOTP4.roa (raw, json)
Hash identifier:          MdZwgQHSBTRq1Yqj6X/jk474NtBupGJKIS0reJLTT6I=
Subject key identifier:   E8:1C:27:F3:FA:EC:FA:91:D2:6C:34:A0:3C:FF:45:23:47:CE:4C:FE
Certificate issuer:       /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial:       019B7BA36C98AE38DBBDDAD5C7C68A7CDB44
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/6Bwn8_rs-pHSbDSgPP9FI0fOTP4.roa
Signing time:             Thu 01 Jan 2026 22:17:46 +0000
ROA not before:           Thu 01 Jan 2026 22:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59673
IP address blocks:        185.79.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:6c:98:ae:38:db:bd:da:d5:c7:c6:8a:7c:db:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
        Validity
            Not Before: Jan  1 22:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e81c27f3faecfa91d26c34a03cff452347ce4cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:6d:98:ee:9f:0e:f6:44:14:1b:5d:bc:ee:
                    e3:a4:d1:69:1d:15:f9:d2:2a:8b:53:75:e4:24:d5:
                    65:6e:97:53:15:fe:8a:30:79:d1:3d:0e:86:45:1c:
                    8b:6b:20:57:2c:82:0f:ea:d5:2c:1d:d5:49:00:16:
                    f6:97:84:11:26:5b:7b:ea:48:2c:1d:fb:c3:2d:71:
                    f6:04:e8:92:7c:5e:1f:60:22:a9:52:92:21:0f:f3:
                    8d:e0:28:b1:28:5a:6d:84:bf:10:35:98:80:4f:10:
                    a6:45:c1:d8:15:54:6a:e0:89:52:61:8f:70:6b:13:
                    32:c8:b1:a8:f7:de:ed:86:35:d6:19:b0:7a:7f:46:
                    72:f4:5d:f5:ac:c8:2e:cc:0d:aa:ad:6c:89:81:5d:
                    93:72:c4:f0:22:16:9e:12:77:c8:7e:8a:08:bb:3b:
                    48:26:85:6e:3a:24:dc:8f:7d:a2:16:09:70:13:2b:
                    0e:4a:49:fd:d3:88:e8:b1:ed:95:01:a3:a4:41:0c:
                    01:04:8f:ca:22:de:f6:da:9c:51:cc:02:d9:4f:20:
                    ba:3d:5f:c2:45:a9:c5:1a:60:f1:bf:bc:56:4d:86:
                    42:9a:d7:40:97:e8:2d:b2:39:af:d5:84:ca:74:42:
                    1d:36:58:fc:e4:d8:a0:cf:ff:a4:3b:2f:df:bb:82:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1C:27:F3:FA:EC:FA:91:D2:6C:34:A0:3C:FF:45:23:47:CE:4C:FE
            X509v3 Authority Key Identifier:
                keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/6Bwn8_rs-pHSbDSgPP9FI0fOTP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:2a:1f:a8:18:36:d7:ea:2c:ed:67:7d:fb:90:cd:81:aa:1e:
         d4:b2:87:fd:ab:c2:3e:09:f6:2b:7e:f7:cb:87:22:63:af:e9:
         b6:26:94:dd:fa:76:89:5a:22:fc:87:be:4d:02:fb:ff:bd:0e:
         66:f3:db:38:3e:fd:4d:1f:d6:fa:85:0f:87:9f:07:b6:37:34:
         29:f6:42:38:5d:cb:fc:04:b3:11:46:cb:9d:ff:cc:d1:4f:67:
         98:01:fe:e2:d7:70:bd:49:c6:5a:be:db:6c:56:20:a5:fb:be:
         91:e5:c2:73:d7:f2:b1:af:fe:cd:36:04:03:04:49:5d:f1:95:
         57:c1:0b:0e:cd:33:30:65:d6:c1:ec:98:18:b8:26:35:4e:20:
         fc:4f:1c:90:07:e1:84:05:4b:b5:68:3f:c8:f5:a6:27:4f:f7:
         b9:b3:6d:f9:73:a7:da:aa:c2:02:d8:90:7b:00:aa:4f:64:b2:
         6e:82:ad:22:2d:e3:56:ff:17:91:de:a9:40:f1:b8:13:56:4f:
         7f:36:70:a9:1e:ba:d8:42:78:ea:0a:e3:ec:3d:b0:4e:d8:3a:
         38:54:20:27:0f:41:d5:d5:0a:1e:e7:15:4e:46:35:55:dc:9a:
         7e:0f:c4:75:3c:d7:ac:c2:77:68:d3:10:20:12:c6:53:66:8c:
         68:73:84:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o2yYrjjbvdrVx8aKfNtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDYzM2ZlNzlhNjI5NjEwOWZkYmY2NDc1ZDRjMmE2NWUy
ZDRmMWMwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODFjMjdmM2ZhZWNmYTkxZDI2YzM0YTAzY2ZmNDUyMzQ3Y2U0Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC9tmO6fDvZEFBtdvO7jpNFpHRX5
0iqLU3XkJNVlbpdTFf6KMHnRPQ6GRRyLayBXLIIP6tUsHdVJABb2l4QRJlt76kgs
HfvDLXH2BOiSfF4fYCKpUpIhD/ON4CixKFpthL8QNZiATxCmRcHYFVRq4IlSYY9w
axMyyLGo997thjXWGbB6f0Zy9F31rMguzA2qrWyJgV2TcsTwIhaeEnfIfooIuztI
JoVuOiTcj32iFglwEysOSkn904jose2VAaOkQQwBBI/KIt722pxRzALZTyC6PV/C
RanFGmDxv7xWTYZCmtdAl+gtsjmv1YTKdEIdNlj85Nigz/+kOy/fu4KpvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgcJ/P67PqR0mw0oDz/RSNHzkz+MB8GA1UdIwQY
MBaAFLgGM/55pilhCf2/ZHXUwqZeLU8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTkt
MmEwNmVkMTA0NTUzLzEvNkJ3bjhfcnMtcEhTYkRTZ1BQOUZJMGZPVFA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTktMmEwNmVkMTA0NTUz
LzEvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU92MA0G
CSqGSIb3DQEBCwUAA4IBAQCLKh+oGDbX6iztZ337kM2Bqh7Usof9q8I+CfYrfvfL
hyJjr+m2JpTd+naJWiL8h75NAvv/vQ5m89s4Pv1NH9b6hQ+Hnwe2NzQp9kI4Xcv8
BLMRRsud/8zRT2eYAf7i13C9ScZavttsViCl+76R5cJz1/Kxr/7NNgQDBEld8ZVX
wQsOzTMwZdbB7JgYuCY1TiD8TxyQB+GEBUu1aD/I9aYnT/e5s235c6faqsIC2JB7
AKpPZLJugq0iLeNW/xeR3qlA8bgTVk9/NnCpHrrYQnjqCuPsPbBO2Do4VCAnD0HV
1Qoe5xVORjVV3Jp+D8R1PNeswndo0xAgEsZTZoxoc4SC
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:26:48 2026 by rpki-client