This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/9KB6jsA15iDe5hTvYqZPtVlVLBA.roa
File:                     9KB6jsA15iDe5hTvYqZPtVlVLBA.roa (raw, json)
Hash identifier:          dgedybpWr2Mko0EXnuNN0p3FXF1lj/f5Eij3mnR2u6A=
Subject key identifier:   F4:A0:7A:8E:C0:35:E6:20:DE:E6:14:EF:62:A6:4F:B5:59:55:2C:10
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       019B78A211F896600FAD7411E7745E936D57
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/9KB6jsA15iDe5hTvYqZPtVlVLBA.roa
Signing time:             Thu 01 Jan 2026 08:17:25 +0000
ROA not before:           Thu 01 Jan 2026 08:17:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        178.175.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:11:f8:96:60:0f:ad:74:11:e7:74:5e:93:6d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: Jan  1 08:17:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f4a07a8ec035e620dee614ef62a64fb559552c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:a0:00:40:be:15:80:c0:b4:f3:30:24:23:
                    82:9b:79:95:95:99:16:53:68:4f:50:20:54:f3:b5:
                    1f:df:19:8a:5b:ed:81:da:64:d4:ac:b2:b7:24:24:
                    ea:d9:01:d9:72:83:ba:3d:24:1a:ea:01:c6:b3:1e:
                    4f:f4:6b:3b:a7:db:f9:3a:3e:47:12:00:38:c7:c8:
                    6a:59:a6:2a:f3:1e:d8:29:ec:dd:55:c4:6b:b7:3d:
                    ca:97:60:76:65:6a:c4:d1:47:c8:bf:41:d9:67:40:
                    86:6a:07:22:92:99:85:2e:4e:ac:14:68:f9:24:da:
                    b8:63:6e:d6:7b:8a:e3:f4:a0:14:13:b8:ea:b4:93:
                    92:35:57:29:19:d3:a5:6c:71:72:89:3a:f3:33:e2:
                    d5:e6:fe:98:a2:ea:36:d6:f9:81:00:2a:af:6f:19:
                    b6:4a:44:f5:96:18:bb:2e:1a:51:77:b0:25:c5:7c:
                    5c:57:91:ed:8a:08:ed:1a:eb:f1:4f:f8:1c:4a:4b:
                    7f:53:87:b2:16:ae:1f:cd:cb:a8:46:a8:87:c3:b0:
                    91:21:fd:d1:07:1d:e8:e0:fb:03:ac:ed:70:51:23:
                    70:41:8e:02:2d:e2:ee:e2:8a:cf:73:fd:b9:be:cc:
                    3a:d5:7e:52:09:8a:f2:e0:b2:9d:cf:68:80:55:4d:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A0:7A:8E:C0:35:E6:20:DE:E6:14:EF:62:A6:4F:B5:59:55:2C:10
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/9KB6jsA15iDe5hTvYqZPtVlVLBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:c4:7a:b9:65:71:d8:a8:9d:fe:cd:df:c1:d0:32:4e:cc:5b:
         91:e6:e0:ed:8c:10:4b:e5:53:83:c4:41:3f:27:76:1a:9c:41:
         86:aa:4c:b5:8c:40:fd:f7:a3:ba:8c:ca:44:1f:e3:f3:c2:d5:
         23:1a:09:dc:41:bb:b5:be:34:19:e0:7a:91:2c:80:3b:1b:7f:
         18:d5:ed:e5:e9:ea:c3:3a:08:60:70:df:60:eb:10:10:87:61:
         36:f0:60:fa:28:72:08:e3:eb:05:c4:f5:f3:f2:86:ec:09:45:
         71:42:1e:2a:d5:01:7f:67:ed:3a:78:55:cd:a8:1a:06:5b:b6:
         dd:72:98:9d:b1:2e:62:cc:81:8b:12:4d:da:d9:0b:e1:87:e3:
         7f:9c:07:9d:e2:71:80:65:9c:bb:4c:75:2a:bf:23:30:0f:89:
         15:a8:e7:a8:08:87:0f:0f:5a:7a:48:0e:37:b9:ff:f8:88:37:
         0d:77:60:cb:5b:fb:ea:1c:f2:8b:01:6a:eb:89:6b:68:7e:df:
         01:8f:0d:62:67:bd:5c:68:6d:56:60:cf:2a:d8:9b:ac:1e:e8:
         c9:fc:07:6e:a7:5a:89:4c:b3:a0:29:71:75:3f:95:6e:b4:2f:
         05:54:fd:de:69:b6:9c:f2:ad:89:ce:88:5d:fd:11:03:dc:9c:
         74:75:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 17:06:36 2026 by rpki-client