This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6FJf_K3zret8g9jKR7dICF1RyQU.roa
File:                     6FJf_K3zret8g9jKR7dICF1RyQU.roa (raw, json)
Hash identifier:          Ppe4V4XuJtgdDUgGoLGUExo11yX/zYydhg2czWcTcIo=
Subject key identifier:   E8:52:5F:FC:AD:F3:AD:EB:7C:83:D8:CA:47:B7:48:08:5D:51:C9:05
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5CA04B9C70E5F2C8BABB322D493442
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6FJf_K3zret8g9jKR7dICF1RyQU.roa
Signing time:             Fri 02 Jan 2026 06:19:40 +0000
ROA not before:           Fri 02 Jan 2026 06:19:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        93.88.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:a0:4b:9c:70:e5:f2:c8:ba:bb:32:2d:49:34:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:19:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8525ffcadf3adeb7c83d8ca47b748085d51c905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:9a:70:1e:45:d9:44:a3:eb:2b:02:3b:0a:
                    48:7c:13:24:1a:8e:2d:d5:4e:0a:35:8a:4a:eb:7d:
                    2b:76:5e:60:f9:f9:93:6e:13:36:7f:2a:22:82:97:
                    d0:a9:29:4f:3a:44:fe:22:73:24:35:aa:78:7c:b5:
                    d1:13:f9:63:3d:31:ff:ce:97:04:7b:30:4d:07:ba:
                    ce:a1:05:8a:69:2f:f7:a2:c5:2d:ec:d2:a5:eb:39:
                    72:9f:b1:0b:da:56:cc:2e:08:00:00:40:98:d1:6b:
                    0b:a5:92:27:f7:85:25:c3:e6:3a:3e:49:4c:ba:72:
                    ba:a8:a1:6d:f4:75:64:81:30:dc:92:e2:96:f3:ba:
                    50:4d:96:60:de:35:17:98:35:bd:4f:dc:8e:80:04:
                    af:69:94:99:2b:d4:4c:ba:86:26:18:16:11:42:2f:
                    0e:57:f2:5e:35:3c:f6:91:53:e8:ad:d9:89:96:46:
                    0c:3a:a6:93:19:37:e1:4a:4f:5b:5c:38:ed:8b:de:
                    c8:8d:02:a1:07:e5:2d:c8:cf:fa:af:21:7e:cb:1e:
                    8f:8c:97:ad:3c:5d:e7:5b:c2:e8:a8:c1:c6:07:8e:
                    9a:f9:51:c3:51:4c:93:53:8e:36:17:f3:99:1a:ba:
                    46:56:45:1a:2b:f7:c0:bd:f2:64:13:41:ce:40:98:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:52:5F:FC:AD:F3:AD:EB:7C:83:D8:CA:47:B7:48:08:5D:51:C9:05
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6FJf_K3zret8g9jKR7dICF1RyQU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.88.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:2c:28:68:86:99:a6:ae:05:f0:f0:8f:55:25:92:ee:b0:
         af:9f:5f:27:4b:d7:da:89:32:8a:5c:1d:c4:7f:a3:02:f1:53:
         c8:9c:9a:77:83:c5:67:c1:48:67:d1:57:8c:3e:d1:b0:06:a6:
         fb:9b:ea:36:4b:4d:c5:0f:ee:99:19:84:25:7f:ee:65:c8:4e:
         2c:ba:ec:a1:bf:ec:7f:80:6b:42:00:2f:4d:dd:13:c3:38:4c:
         31:2e:6b:1a:59:3a:79:f3:fc:5b:fb:a2:a6:cf:98:a6:96:56:
         a4:e7:f7:ec:73:57:42:55:12:d5:3b:fb:0a:0a:ef:c5:5e:cd:
         c1:72:94:17:19:ab:2e:63:a8:00:fa:15:df:55:37:f2:36:48:
         9f:11:d4:ba:ec:80:96:72:f2:e6:31:08:9c:8d:99:2a:a1:4f:
         78:83:98:44:db:0e:76:0a:34:08:00:54:ee:18:24:13:34:b4:
         7d:e7:ab:b7:7d:23:76:57:50:23:5b:55:6c:fc:8a:86:65:28:
         14:54:45:a7:33:0d:5f:19:46:dd:63:40:0c:de:6d:4a:f9:22:
         c0:43:fb:0b:1d:57:74:26:dc:84:46:44:7c:bb:26:77:eb:29:
         d8:03:98:1c:1d:13:52:16:34:4d:41:4f:42:13:d8:63:67:91:
         00:dc:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:11:41 2026 by rpki-client