This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa
File:                     6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa (raw, json)
Hash identifier:          UtIfPnWUVyz8gRBCn75+ObAHW0bhWki1PUUgeHyQ8CM=
Subject key identifier:   E8:9C:94:EE:71:54:2B:4B:64:E1:54:02:3E:56:08:FD:92:A1:5E:6A
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       019B7C128884C956F9B65734FF077D43F781
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa
Signing time:             Fri 02 Jan 2026 00:19:07 +0000
ROA not before:           Fri 02 Jan 2026 00:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206980
IP address blocks:        80.66.71.0/24 maxlen: 24
                          80.66.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:88:84:c9:56:f9:b6:57:34:ff:07:7d:43:f7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jan  2 00:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e89c94ee71542b4b64e154023e5608fd92a15e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:ca:ea:39:9b:00:46:1c:f9:05:cc:a9:a7:
                    e3:4e:75:69:5c:80:82:33:f5:6c:ba:ca:bd:67:86:
                    7b:78:6d:c6:b8:75:12:06:26:57:64:ab:ac:d3:0f:
                    28:52:dd:0c:c0:bb:c6:92:70:5d:e0:66:46:b7:f7:
                    1a:a2:b0:39:8f:1f:fd:2c:40:8c:39:6c:a6:be:f3:
                    24:68:03:dd:27:9f:6a:3c:53:54:3c:e1:5a:40:f8:
                    c9:c9:87:2f:77:24:43:20:00:71:d2:15:a9:cf:d6:
                    b9:b1:24:05:da:21:48:5b:7c:ec:ce:d2:38:48:07:
                    39:4f:be:86:ad:3e:de:77:c3:f2:7f:e8:11:0d:64:
                    17:b1:03:18:1a:dd:77:04:9f:5a:02:16:ae:39:2e:
                    63:79:b3:8a:6e:78:eb:66:85:63:5e:12:ba:39:ca:
                    91:e0:e9:75:f7:13:f0:4c:6b:76:4b:51:99:8c:eb:
                    5d:69:81:e3:3c:e5:b6:31:44:41:22:b5:8c:aa:5b:
                    75:af:8b:b3:b3:de:f7:27:1d:38:0f:42:02:2e:0f:
                    77:f9:1d:4c:1b:b0:08:b7:69:89:bf:5e:d1:82:13:
                    52:f8:3c:ff:ce:5b:6c:f2:bd:0b:b1:c2:77:2a:75:
                    79:75:e9:02:a1:31:b5:a7:16:14:02:8d:5f:6d:50:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9C:94:EE:71:54:2B:4B:64:E1:54:02:3E:56:08:FD:92:A1:5E:6A
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/6JyU7nFUK0tk4VQCPlYI_ZKhXmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.71.0/24
                  80.66.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:bd:06:4e:03:0d:75:01:8c:aa:83:10:0b:02:d7:ec:ed:
         df:c7:e5:b5:80:3d:c6:8e:75:16:ad:7e:19:8d:07:df:e8:bb:
         69:8d:76:7b:b0:74:e3:9d:84:99:7d:2c:37:b9:3d:e4:30:3d:
         0d:38:7b:ed:54:8d:c6:1d:68:60:2b:76:17:27:83:a0:df:98:
         88:b2:89:f8:f9:90:82:f5:25:1f:c0:d7:91:f2:47:0a:a3:44:
         c3:0f:33:04:e2:4f:4b:de:72:c9:6e:8c:45:0f:93:c4:fb:74:
         71:01:6e:68:91:c5:b1:b2:97:67:0c:ee:5a:33:98:9e:8e:a1:
         a4:9e:44:03:fc:2f:ed:62:7b:aa:26:fc:c1:b4:e4:47:5a:87:
         d9:24:50:b1:14:99:26:62:bc:63:78:9d:81:64:46:ce:ed:10:
         85:76:6b:71:ee:e2:0d:bd:a0:a9:e8:e4:95:12:df:ae:32:2f:
         3e:34:44:f7:a9:60:18:32:76:ab:99:62:aa:c1:47:a5:c3:59:
         c1:e0:8a:c0:e7:5d:b0:bb:3f:73:a5:df:b6:c2:d7:61:2f:e1:
         56:1e:5d:d7:68:73:54:8a:08:b4:07:dd:5f:05:5f:1f:67:03:
         b3:e2:56:ef:2b:f6:63:3a:78:25:37:d0:f2:1f:09:03:29:16:
         bb:91:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:31 2026 by rpki-client