This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/b6CRhvSRccrFASwHzAqv1fJ2-PM.roa
File:                     b6CRhvSRccrFASwHzAqv1fJ2-PM.roa (raw, json)
Hash identifier:          /4u/ccQkL47poEfRTb46UuOnLyPJ5g8IGlvoOu1fxd4=
Subject key identifier:   6F:A0:91:86:F4:91:71:CA:C5:01:2C:07:CC:0A:AF:D5:F2:76:F8:F3
Certificate issuer:       /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial:       019B7834936714D39AB4F3A093DABB75C9A8
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/b6CRhvSRccrFASwHzAqv1fJ2-PM.roa
Signing time:             Thu 01 Jan 2026 06:17:50 +0000
ROA not before:           Thu 01 Jan 2026 06:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7155
IP address blocks:        37.1.184.0/21 maxlen: 24
                          185.21.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 18:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:93:67:14:d3:9a:b4:f3:a0:93:da:bb:75:c9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
        Validity
            Not Before: Jan  1 06:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6fa09186f49171cac5012c07cc0aafd5f276f8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:30:fa:77:ce:2f:9b:23:7c:a9:11:77:2e:
                    5f:55:1a:9a:f5:02:a4:19:36:1e:14:c5:dc:e2:02:
                    7a:1b:95:8c:76:39:b6:ac:41:a4:e5:25:6c:f0:c0:
                    ac:06:a9:92:71:f9:ab:11:44:63:a7:8c:f0:1f:ba:
                    87:ef:85:26:38:de:95:e6:a8:12:a0:a0:4b:16:3b:
                    34:2a:18:5e:54:88:61:54:45:1e:c3:4b:20:95:62:
                    88:f3:ce:ed:51:78:30:eb:ec:a1:10:07:40:09:60:
                    66:a9:a2:b7:47:5c:49:7d:3b:5c:8f:72:1a:6f:11:
                    54:c1:59:38:a5:7c:bd:56:72:59:25:ff:b6:d6:c3:
                    10:15:84:ab:4d:bb:7c:ee:59:00:72:72:43:d7:04:
                    c5:4f:c2:88:2d:7f:6b:29:fc:f7:35:e6:e1:0a:9c:
                    19:79:1c:78:f1:70:e2:39:5f:48:38:62:c5:24:9e:
                    e7:89:95:5a:1d:6c:5e:c9:99:d4:dc:0f:6b:7b:9b:
                    7c:2c:7f:16:ad:c0:ba:52:be:19:0a:88:d3:d4:dc:
                    31:76:b4:67:ae:93:cb:2f:f9:30:64:0d:2e:16:f4:
                    9b:31:b2:81:de:9f:12:c4:2d:bd:bb:da:08:dd:bb:
                    0f:cf:5d:20:8a:f7:4c:23:a6:f7:a2:b8:6b:85:b8:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:91:86:F4:91:71:CA:C5:01:2C:07:CC:0A:AF:D5:F2:76:F8:F3
            X509v3 Authority Key Identifier:
                keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/b6CRhvSRccrFASwHzAqv1fJ2-PM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.184.0/21
                  185.21.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:10:83:ef:98:23:0e:9b:93:88:ea:d4:93:ef:22:02:6e:b1:
         75:71:1c:58:8d:38:69:09:e3:87:45:4c:c1:99:f7:f5:22:c7:
         6a:9a:fa:b8:ca:ae:ad:dc:e0:cc:a3:24:9b:86:fe:ef:78:49:
         8f:22:49:85:3b:20:a8:a5:25:b4:ee:49:09:b9:fe:8f:19:24:
         81:00:a1:0b:38:69:31:f4:90:3e:94:c1:e0:ad:7e:df:27:8b:
         11:af:3d:fe:5b:b3:28:0b:ad:26:95:02:e7:b4:f0:21:45:ca:
         f2:5a:fa:4f:85:b8:67:63:de:cd:24:cf:41:fc:07:7d:e5:dc:
         c0:fd:95:ec:f2:d3:81:e3:02:fa:a8:af:22:27:f5:c0:f0:9e:
         ea:28:3b:96:4d:74:a3:50:34:f5:e2:a7:d7:a6:27:d6:9d:40:
         3f:5f:a3:ce:71:7c:26:b1:20:47:59:2a:63:d1:14:e1:59:0f:
         d4:c0:f4:9c:75:e3:70:32:68:18:2f:76:bd:73:6b:42:09:e0:
         8c:dc:e1:cd:3f:ca:c5:f5:53:a3:c8:19:63:83:c5:b6:9e:85:
         c8:55:5b:ee:48:21:19:08:de:4c:1e:91:b2:6a:41:0c:93:b8:
         b0:18:bb:a3:1e:68:fa:b5:7b:8b:aa:cd:46:53:1c:51:c5:f7:
         84:7e:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:50:36 2026 by rpki-client