This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/b2w6O9WirtRCdzK66va1rPliDCM.roa
File:                     b2w6O9WirtRCdzK66va1rPliDCM.roa (raw, json)
Hash identifier:          stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=
Subject key identifier:   6F:6C:3A:3B:D5:A2:AE:D4:42:77:32:BA:EA:F6:B5:AC:F9:62:0C:23
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       019B78A243AC9E4CFB92E1569D2AD8577021
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/b2w6O9WirtRCdzK66va1rPliDCM.roa
Signing time:             Thu 01 Jan 2026 08:17:38 +0000
ROA not before:           Thu 01 Jan 2026 08:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     22612
IP address blocks:        185.61.152.0/22 maxlen: 24
                          2a02:77e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:43:ac:9e:4c:fb:92:e1:56:9d:2a:d8:57:70:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: Jan  1 08:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f6c3a3bd5a2aed4427732baeaf6b5acf9620c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:ed:6c:7c:20:63:89:3a:3a:3b:4f:de:23:
                    5a:57:f1:84:f1:23:df:86:e9:c8:83:a5:55:0e:90:
                    6c:1b:e0:68:75:40:16:a9:b1:5c:e2:37:d5:19:b3:
                    63:85:fc:a7:5c:21:79:c5:64:4a:d1:b1:1c:aa:79:
                    ee:ed:70:92:05:2b:08:27:19:5e:2d:d1:57:6b:7a:
                    a9:09:e6:82:60:46:00:69:6e:6c:1f:71:c8:d5:2b:
                    60:9f:75:06:09:63:33:ac:41:e6:b4:73:a9:0c:4d:
                    b7:92:3c:20:f7:01:25:85:6e:57:f0:66:80:83:91:
                    79:42:c7:1f:1d:27:4b:96:38:15:46:d0:ce:cc:8b:
                    ee:ef:8e:bb:fe:56:3e:10:7e:2e:72:03:de:f0:4a:
                    63:70:38:7d:f2:e4:30:61:d4:4c:ec:7a:b5:1d:07:
                    15:c5:a0:06:fb:cc:4e:b6:1f:7c:4a:a2:51:a1:bc:
                    03:a2:1f:2f:c6:b3:8e:71:be:72:a2:b2:46:0c:60:
                    ec:e6:a4:25:d0:13:56:9e:83:93:a0:9d:cf:f3:ff:
                    03:e3:32:c6:3a:5d:0c:3f:7a:97:5d:fe:54:11:9f:
                    df:ec:f3:78:3f:e3:92:ca:cf:1f:01:cc:07:3a:61:
                    4a:f8:c7:0a:15:ed:32:75:10:b5:26:24:b5:97:dc:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6C:3A:3B:D5:A2:AE:D4:42:77:32:BA:EA:F6:B5:AC:F9:62:0C:23
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/b2w6O9WirtRCdzK66va1rPliDCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.61.152.0/22
                IPv6:
                  2a02:77e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:16:87:1e:1d:54:1a:6c:f9:c4:3c:c3:22:4d:00:ae:97:fb:
         44:6c:14:2b:b9:09:c9:56:ec:e4:9a:ff:bb:f3:cb:22:21:d2:
         53:9a:28:3a:bd:0f:53:6f:98:ea:e4:a5:61:37:77:a2:e6:a7:
         56:dd:72:9f:db:00:a7:d6:e3:9e:bd:bb:e1:c3:6f:64:35:49:
         f1:23:53:61:53:f5:43:11:24:7e:42:90:93:2d:e1:f8:56:61:
         10:83:2e:08:b6:66:fe:ee:06:99:40:b3:90:8b:f6:53:0f:86:
         d4:5d:bc:9b:8a:8a:4b:82:86:82:c7:81:8f:2a:cb:f7:9a:f3:
         ba:25:e7:41:53:41:3c:cf:26:1f:b8:b6:90:4e:dd:2e:f5:07:
         30:5d:c5:5d:65:90:f6:60:ff:77:36:50:1a:61:0e:37:82:92:
         9d:f3:cc:5a:12:67:bf:1b:1f:02:94:d4:67:22:de:f7:dc:7b:
         44:49:58:36:7d:29:7f:c6:14:8f:39:5d:30:68:99:62:57:a6:
         ce:e4:37:ed:29:6a:5a:b1:ff:35:9a:56:9f:32:14:f4:39:6d:
         06:7a:03:cf:3a:c3:a2:1e:60:4c:c9:a9:f5:56:a1:03:eb:76:
         97:c6:02:eb:00:4e:0e:7d:09:08:dd:94:f3:df:96:85:62:00:
         fc:21:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:02:10 2026 by rpki-client