This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa
File:                     6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (raw, json)
Hash identifier:          6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=
Subject key identifier:   E9:11:96:F4:51:C2:D7:1A:72:7F:AC:20:5D:FB:FF:12:EF:EC:EA:E5
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019B7E37DCE947181A8FC84FB3E2BBBA9B82
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa
Signing time:             Fri 02 Jan 2026 10:19:08 +0000
ROA not before:           Fri 02 Jan 2026 10:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     26383
IP address blocks:        185.121.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 02:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:dc:e9:47:18:1a:8f:c8:4f:b3:e2:bb:ba:9b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Jan  2 10:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e91196f451c2d71a727fac205dfbff12efeceae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d0:4b:9b:4a:62:35:e5:a7:7a:5a:76:86:b3:
                    ff:35:22:e8:9f:74:74:78:46:9a:73:30:5a:c2:94:
                    41:73:b2:99:e8:87:08:15:73:76:6c:ee:33:18:b3:
                    9c:21:c3:0f:ac:fb:0b:9a:b6:b1:4f:7e:26:9c:f0:
                    10:52:91:ea:79:9b:da:77:06:b4:97:6c:b8:c2:18:
                    73:85:7b:d0:ca:50:a3:96:a3:cc:8b:d7:94:0f:2e:
                    39:25:0d:f6:a7:4a:af:2c:4b:4f:3a:62:0c:18:0c:
                    94:53:26:46:52:89:61:03:f8:a9:8b:36:07:6f:78:
                    58:77:0a:a8:28:f2:e1:0c:73:89:18:55:5d:96:76:
                    c8:e2:40:d0:c1:69:25:69:cc:45:a3:39:1e:5b:8b:
                    c5:b7:e7:e8:67:8c:53:d8:2a:d4:a5:e2:e4:49:52:
                    70:47:3a:9f:ae:71:c0:66:38:2a:0f:0a:43:0d:ba:
                    ba:38:da:c2:65:ff:d3:f5:6c:b4:c2:c4:65:3d:b1:
                    ff:3c:a7:3c:30:5d:57:4a:ba:4b:6a:72:e4:67:2a:
                    1f:b2:5a:81:61:d2:d0:1a:7d:d3:ca:16:64:97:9c:
                    bb:40:15:61:27:0c:cf:5b:a1:1e:c4:30:7a:a7:0b:
                    ff:b6:cd:bd:8e:5f:c4:8a:01:4e:6a:fc:5e:ab:8a:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:11:96:F4:51:C2:D7:1A:72:7F:AC:20:5D:FB:FF:12:EF:EC:EA:E5
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:df:9d:f5:20:07:a3:6c:95:3f:42:a8:37:a8:ed:96:77:
         31:ea:24:1d:0b:9d:1c:a6:8a:a4:d5:9e:34:ab:5c:7c:26:55:
         77:be:d6:b8:2c:9e:b0:2d:2b:67:d8:38:f2:67:30:a4:97:f5:
         c2:0c:e5:24:f5:da:ff:3d:6e:7e:e6:99:6c:ef:a3:f0:30:82:
         bf:ab:7e:e0:39:b3:fd:e3:66:89:c2:2d:06:76:8e:46:ff:7f:
         c8:49:c3:79:80:bb:75:53:6a:74:88:30:10:ec:49:08:78:51:
         ec:f0:ba:4d:86:1b:12:f7:92:31:07:5f:7f:53:38:7c:54:65:
         2e:ba:a0:1a:2c:f2:8f:18:7d:a7:17:72:f2:02:4c:1c:49:cc:
         72:6e:5d:aa:81:4e:b8:39:5d:32:d5:5e:80:0a:bf:12:3a:95:
         fa:5c:a4:f3:e4:11:7b:a0:06:d2:17:74:b2:70:3f:67:4c:a0:
         cf:7e:f5:7c:61:97:e3:7e:9a:82:fa:e6:7e:76:a0:4c:5d:42:
         68:58:76:25:0e:99:94:57:77:41:30:ac:8d:6e:51:b8:ee:53:
         f9:9e:e2:95:7a:bf:94:23:ad:d7:de:5b:ab:82:93:ac:d5:7e:
         dd:65:47:4e:37:dd:77:c3:86:89:4b:dc:59:a8:5c:d5:3e:72:
         75:b6:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 08:22:21 2026 by rpki-client