This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa
File:                     k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa (raw, json)
Hash identifier:          5Ng2eom8lxcHR5nDEgtd/5I+6rVuKWoiMkhVtoQFVJM=
Subject key identifier:   93:EE:AA:99:57:8A:11:41:9C:FB:47:33:E4:79:EC:C7:D8:66:50:F1
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       019B7D5D26C5B8006E0A024A1BE59C75413A
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa
Signing time:             Fri 02 Jan 2026 06:20:15 +0000
ROA not before:           Fri 02 Jan 2026 06:20:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214238
IP address blocks:        92.118.88.0/24 maxlen: 24
                          92.118.89.0/24 maxlen: 24
                          92.118.90.0/24 maxlen: 24
                          92.118.91.0/24 maxlen: 24
                          92.119.200.0/24 maxlen: 24
                          92.119.201.0/24 maxlen: 24
                          92.119.202.0/24 maxlen: 24
                          92.119.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:26:c5:b8:00:6e:0a:02:4a:1b:e5:9c:75:41:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Jan  2 06:20:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=93eeaa99578a11419cfb4733e479ecc7d86650f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:a6:2f:34:1f:63:0e:c4:08:45:90:60:2f:
                    c3:4b:60:7c:c7:79:74:10:5a:2d:58:a4:e0:90:40:
                    6c:30:6f:52:d1:c4:d2:d7:40:33:a1:d3:b7:4d:b7:
                    5e:5f:f3:46:de:be:0c:06:2e:4e:4b:c1:f9:5b:94:
                    ed:08:74:ea:b5:12:dc:14:e7:b9:ea:0a:34:e0:45:
                    63:6a:e7:09:52:7a:d8:8e:f0:1a:e3:bc:2b:3d:5c:
                    08:09:14:18:1f:8b:48:81:4a:4c:48:30:29:4b:55:
                    53:ca:99:9d:91:d0:55:8d:b2:ca:b2:e8:1f:e8:73:
                    c9:54:56:09:c9:3a:2f:08:a1:d2:e6:82:ff:97:1a:
                    30:c9:2d:56:3b:7a:cd:88:fc:1d:a3:87:9f:68:51:
                    0e:f8:d2:87:39:92:6b:32:73:08:17:09:c6:75:e5:
                    0d:dd:92:2c:df:ea:84:6c:50:33:b7:40:d5:e9:73:
                    81:f6:19:0c:74:c9:74:9f:e1:49:80:b5:01:f9:ac:
                    5e:a4:05:4b:80:26:58:e4:ef:77:e0:06:35:03:17:
                    c6:eb:c7:37:01:19:4b:db:5d:b1:6c:4c:84:f1:77:
                    b5:ba:10:f3:41:e1:a3:ab:02:e8:70:ca:97:a6:a5:
                    60:72:22:f7:1d:b8:1d:14:79:8f:59:78:76:c4:37:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:AA:99:57:8A:11:41:9C:FB:47:33:E4:79:EC:C7:D8:66:50:F1
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.88.0/22
                  92.119.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:4f:3c:68:a6:b9:b9:2a:3f:c8:fe:d2:a0:70:d3:3d:4d:de:
         fb:79:9b:22:25:cf:a4:5f:8a:52:00:e2:4e:5d:30:c3:0e:85:
         63:01:71:df:26:59:51:7c:c7:c4:57:c7:1a:43:61:4e:cb:c0:
         63:8a:18:6d:1e:b1:3f:ca:00:f6:ba:98:72:f9:12:03:54:fd:
         96:0e:3c:90:93:f3:50:66:c9:1d:07:4d:81:62:ba:c9:12:c7:
         7d:d9:15:cd:db:cd:f0:16:61:b3:91:61:27:dd:1f:02:b6:da:
         07:cc:f9:4e:76:1f:16:0b:12:cd:cc:46:ae:81:fe:16:08:1a:
         e7:d7:b5:92:19:fc:b9:45:2c:46:62:8a:3a:c7:aa:ed:02:9f:
         11:92:cc:24:67:22:ef:4b:7e:72:1f:3b:d3:3a:a7:a0:30:0a:
         c4:82:7c:a1:ae:fd:fa:6e:c8:f3:da:03:ea:d3:f2:32:1d:55:
         c6:d1:b5:67:1f:56:6c:f0:00:46:37:56:a5:3c:b5:e3:3c:a3:
         b6:d8:51:d1:a7:e9:c3:62:6f:a0:e6:38:3d:dd:51:b9:b9:e5:
         e3:d5:ad:b3:49:92:a8:d4:4e:72:64:e9:ec:6b:03:bd:51:c2:
         f2:08:c7:08:ff:2f:7c:ac:f8:a5:b7:01:23:5e:38:78:07:37:
         85:b4:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:44:28 2026 by rpki-client