This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q6ode8RT6NLonVmTVfRHst2iUVc.roa
File:                     q6ode8RT6NLonVmTVfRHst2iUVc.roa (raw, json)
Hash identifier:          1Jan35mV7jO0PC8DHngrpe3hyYdWRrO7tMsi/tCYpRk=
Subject key identifier:   AB:AA:1D:7B:C4:53:E8:D2:E8:9D:59:93:55:F4:47:B2:DD:A2:51:57
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5D48D4ACAAAA70E0A7F2AE913D8436
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q6ode8RT6NLonVmTVfRHst2iUVc.roa
Signing time:             Fri 02 Jan 2026 06:20:24 +0000
ROA not before:           Fri 02 Jan 2026 06:20:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212085
IP address blocks:        2a0e:b107:ea4::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:48:d4:ac:aa:aa:70:e0:a7:f2:ae:91:3d:84:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:20:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=abaa1d7bc453e8d2e89d599355f447b2dda25157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:df:7a:fe:a4:68:f8:0c:3e:4a:71:53:dd:
                    68:6b:7d:50:47:a0:50:e3:66:6d:fc:af:03:27:e1:
                    56:1e:1e:17:3b:ce:3e:92:8f:cf:38:41:87:2a:db:
                    4d:64:23:33:83:f2:af:10:ac:be:52:01:16:f7:3c:
                    29:6f:7d:24:db:08:0e:1d:d9:0c:65:0b:81:c0:26:
                    b1:82:18:15:65:fe:6a:ed:42:89:b5:47:a0:b2:95:
                    50:d8:37:53:8f:09:ec:eb:31:6b:2c:c8:21:f1:13:
                    1a:62:c2:7a:47:db:d6:b1:1b:db:58:85:c0:13:79:
                    87:92:c7:09:d2:d1:1f:51:f0:94:57:c5:f3:e3:ed:
                    52:ca:31:35:df:cb:1d:8c:83:3e:5d:1d:63:89:59:
                    b3:27:6a:97:ae:48:ee:2b:2e:66:f1:1b:45:ff:fc:
                    b4:3e:50:2c:91:30:d0:f7:cb:b8:80:90:dc:29:e8:
                    8b:5d:af:49:d6:8f:38:72:30:38:bd:8a:00:88:25:
                    4c:b5:9c:fd:5b:cb:55:35:f9:75:d3:fd:fd:2f:17:
                    c4:28:f7:a7:50:aa:67:18:04:4e:ec:cd:cd:54:63:
                    15:16:9a:a0:51:ec:ee:f2:6d:d1:2e:49:17:88:0e:
                    93:8d:e7:f3:0a:49:68:1b:be:da:c6:cf:d1:48:36:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AA:1D:7B:C4:53:E8:D2:E8:9D:59:93:55:F4:47:B2:DD:A2:51:57
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q6ode8RT6NLonVmTVfRHst2iUVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:ea4::/46

    Signature Algorithm: sha256WithRSAEncryption
         bc:57:17:d0:e6:8c:4c:74:ba:b1:b3:02:57:6c:8a:19:af:85:
         53:24:4a:23:31:7b:33:f9:ad:ea:46:b7:90:c2:4d:74:47:4a:
         e3:af:45:35:cf:93:c6:99:1c:3a:d6:10:bb:0f:54:a3:36:1b:
         50:1f:3a:cb:f8:06:4a:15:2f:b6:d1:3a:8f:03:90:e5:35:34:
         e6:50:9c:e1:a2:28:51:e2:ac:94:ef:e2:9c:f1:ba:77:be:06:
         53:eb:22:7a:d3:3b:b7:30:87:42:7a:73:e0:7b:4f:26:b2:a9:
         66:dc:34:02:5b:97:b9:e0:43:32:3e:9a:5a:f9:bd:ef:dc:6a:
         3b:8b:fe:d0:0c:2f:18:5c:d9:76:fc:23:4c:bb:da:03:f5:a1:
         15:39:8d:e3:34:76:9b:2c:27:4c:4d:12:4b:78:d6:b0:eb:74:
         8c:81:69:30:94:c0:28:5a:47:b1:43:f6:3b:d7:f8:34:4e:cf:
         a3:47:7c:44:58:86:76:44:0d:25:5d:d7:73:89:11:23:0d:7a:
         49:83:d9:8f:ce:96:a3:d5:49:50:13:5e:d5:25:39:f3:fb:e8:
         61:cd:50:6b:46:e9:8e:16:86:9a:ff:7a:ef:df:8c:e1:0a:88:
         10:07:f3:e3:03:1a:e1:a7:e8:62:53:1c:e3:3f:cc:6c:d9:3d:
         69:84:cc:83
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt9XUjUrKqqcOCn8q6RPYQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmFhMWQ3YmM0NTNlOGQyZTg5ZDU5OTM1NWY0NDdiMmRkYTI1MTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ffev6kaPgMPkpxU91oa31QR6BQ
42Zt/K8DJ+FWHh4XO84+ko/POEGHKttNZCMzg/KvEKy+UgEW9zwpb30k2wgOHdkM
ZQuBwCaxghgVZf5q7UKJtUegspVQ2DdTjwns6zFrLMgh8RMaYsJ6R9vWsRvbWIXA
E3mHkscJ0tEfUfCUV8Xz4+1SyjE138sdjIM+XR1jiVmzJ2qXrkjuKy5m8RtF//y0
PlAskTDQ98u4gJDcKeiLXa9J1o84cjA4vYoAiCVMtZz9W8tVNfl10/39LxfEKPen
UKpnGARO7M3NVGMVFpqgUezu8m3RLkkXiA6TjefzCkloG77axs/RSDY1BwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKuqHXvEU+jS6J1Zk1X0R7LdolFXMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvcTZvZGU4UlQ2TkxvblZtVFZmUkhzdDJpVVZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKg6xBw6k
MA0GCSqGSIb3DQEBCwUAA4IBAQC8VxfQ5oxMdLqxswJXbIoZr4VTJEojMXsz+a3q
RreQwk10R0rjr0U1z5PGmRw61hC7D1SjNhtQHzrL+AZKFS+20TqPA5DlNTTmUJzh
oihR4qyU7+Kc8bp3vgZT6yJ60zu3MIdCenPge08msqlm3DQCW5e54EMyPppa+b3v
3Go7i/7QDC8YXNl2/CNMu9oD9aEVOY3jNHabLCdMTRJLeNaw63SMgWkwlMAoWkex
Q/Y71/g0Ts+jR3xEWIZ2RA0lXddziREjDXpJg9mPzpaj1UlQE17VJTnz++hhzVBr
RumOFoaa/3rv34zhCogQB/PjAxrhp+hiUxzjP8xs2T1phMyD
-----END CERTIFICATE-----
Generated at Fri Jan 9 13:13:28 2026 by rpki-client