This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa
File:                     6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (raw, json)
Hash identifier:          z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=
Subject key identifier:   E8:29:F4:2C:C1:CF:0C:1B:26:E0:D9:BC:84:57:2C:29:2E:AD:63:DE
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       019B797E1A0A61C68CB9FAA6C4D8DF1896B5
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa
Signing time:             Thu 01 Jan 2026 12:17:45 +0000
ROA not before:           Thu 01 Jan 2026 12:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209733
IP address blocks:        45.82.61.0/24 maxlen: 24
                          45.82.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:1a:0a:61:c6:8c:b9:fa:a6:c4:d8:df:18:96:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Jan  1 12:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e829f42cc1cf0c1b26e0d9bc84572c292ead63de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:0e:7b:d5:a3:8f:6a:e1:c1:7f:66:14:aa:
                    e3:aa:13:9f:21:3e:ca:dc:f7:a7:14:99:93:be:d1:
                    c5:76:7a:79:db:5e:39:58:fc:9e:58:22:db:d1:e2:
                    c0:7f:27:f2:06:04:3c:d6:ab:c4:8a:61:06:67:d3:
                    b0:95:1f:63:ba:29:95:10:de:72:02:fa:fc:91:7b:
                    25:c4:a7:08:49:05:88:64:8c:20:a0:04:22:58:13:
                    52:0b:7e:09:e4:46:dd:6c:a0:8c:22:65:58:df:f9:
                    f9:fc:81:bb:63:1f:71:97:fc:8f:b2:46:73:22:1b:
                    cc:87:2e:68:4b:30:1b:a8:05:d5:10:e7:e8:27:b4:
                    bc:5b:3c:97:df:22:09:8e:af:eb:89:d1:cb:e0:2b:
                    53:58:23:f5:6b:8f:8c:92:05:a2:be:6f:42:e5:60:
                    ca:70:ed:58:d6:ae:64:3f:10:39:7d:1d:b1:85:c4:
                    7e:20:6c:f1:7f:8d:eb:e6:fa:e9:67:41:00:61:2e:
                    b3:96:7e:db:1a:2f:7e:65:a9:ee:71:8d:bf:ef:b2:
                    31:6a:ce:0a:fc:0c:f7:32:8a:5c:61:10:6e:0b:53:
                    ef:5f:1f:c6:ec:8f:ab:55:5d:2f:bf:95:5b:57:c9:
                    d2:46:56:ba:35:84:0c:39:9f:54:2b:52:1d:4c:fa:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:29:F4:2C:C1:CF:0C:1B:26:E0:D9:BC:84:57:2C:29:2E:AD:63:DE
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.61.0-45.82.62.255

    Signature Algorithm: sha256WithRSAEncryption
         80:10:99:9c:07:1e:52:a4:26:cf:c2:eb:bf:9e:50:0b:67:3f:
         2c:44:97:ee:ae:db:f5:74:d1:9a:4d:3d:9b:d2:3d:63:e7:e6:
         ad:d4:6b:5f:6a:14:f7:5d:b2:44:32:7f:73:92:3a:55:07:28:
         9e:36:7d:01:ea:35:39:7c:78:bf:66:51:59:db:48:92:d3:8a:
         87:80:7e:30:5d:38:cc:0c:fe:71:5b:51:44:56:52:2f:7b:9d:
         09:53:c7:72:30:17:de:82:26:17:64:ea:0e:70:13:ce:b1:87:
         b9:00:83:d7:8e:75:be:ae:90:cb:d1:f0:44:77:41:a1:e1:7c:
         64:8f:7f:b4:40:c7:3b:07:36:6b:78:33:78:73:c1:87:f1:77:
         10:b4:4f:d0:62:10:e0:ee:58:e7:26:5f:88:4f:6f:04:f0:d7:
         8f:71:84:60:c5:bf:2a:f9:63:27:92:35:88:b6:f1:fb:38:22:
         f4:52:7b:f3:a1:7d:45:1a:80:ac:ed:d8:10:c1:71:c3:36:f8:
         74:a1:62:60:37:3b:c6:fa:35:a8:d4:fd:d1:36:c5:c8:de:2b:
         e4:06:fd:97:8b:6e:c8:6d:71:cf:7e:69:df:f6:7f:00:81:ad:
         fa:30:ec:7b:4c:63:0a:91:ac:2e:b5:65:4d:92:a6:5f:d6:15:
         f2:a1:57:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:30:34 2026 by rpki-client