This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/6HTx2YeWwDr3S2VVILbwB2Jafj8.roa
File:                     6HTx2YeWwDr3S2VVILbwB2Jafj8.roa (raw, json)
Hash identifier:          hsBw1ez3yUj6UmH6NZMF2hQl/djg3G8hjk0Okprj7r0=
Subject key identifier:   E8:74:F1:D9:87:96:C0:3A:F7:4B:65:55:20:B6:F0:07:62:5A:7E:3F
Certificate issuer:       /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial:       019B76EB8E0C80BD20DE7F79B8596F7AE99D
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/6HTx2YeWwDr3S2VVILbwB2Jafj8.roa
Signing time:             Thu 01 Jan 2026 00:18:27 +0000
ROA not before:           Thu 01 Jan 2026 00:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47745
IP address blocks:        151.237.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:8e:0c:80:bd:20:de:7f:79:b8:59:6f:7a:e9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
        Validity
            Not Before: Jan  1 00:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e874f1d98796c03af74b655520b6f007625a7e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:6a:60:0e:44:58:d4:98:6e:ca:a0:e9:ef:
                    38:cb:34:92:34:28:5c:02:4a:89:b7:f8:31:df:03:
                    df:97:98:7f:ed:70:7e:a7:a7:fb:22:65:b0:55:9d:
                    4b:6e:05:63:92:ba:49:eb:49:9f:a4:3f:eb:9a:bd:
                    fe:b2:68:eb:f3:fd:19:48:5c:5f:91:10:c9:1b:27:
                    97:56:23:16:db:8e:50:ed:7c:64:a9:ab:ec:bc:01:
                    8c:b0:24:bf:54:bf:72:1a:56:7f:27:4f:42:09:74:
                    29:c5:6c:a6:a2:8f:e8:b4:5e:61:51:63:ea:46:0a:
                    b8:ab:76:cc:96:74:51:fe:7d:b7:ee:15:7f:7b:da:
                    d8:8c:af:59:81:77:a0:8e:64:9c:53:6e:b6:bd:b2:
                    8b:05:d5:d7:16:dd:75:9c:04:61:9a:9e:df:d2:31:
                    9c:13:3f:ae:03:25:69:2f:4e:44:5d:79:30:8b:11:
                    2f:a9:e7:6b:a7:a4:4e:db:72:f6:99:26:d4:29:1e:
                    69:fa:dd:8b:58:de:d1:6c:41:29:b0:60:4f:6f:34:
                    c8:a4:ef:6f:08:e3:ea:38:8a:e8:5b:30:c1:b1:5b:
                    33:43:a6:1b:28:4a:95:21:17:36:b1:42:81:32:d2:
                    f2:e7:03:65:a6:f2:ae:4b:06:7f:88:e9:aa:b3:6d:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:F1:D9:87:96:C0:3A:F7:4B:65:55:20:B6:F0:07:62:5A:7E:3F
            X509v3 Authority Key Identifier:
                keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/6HTx2YeWwDr3S2VVILbwB2Jafj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.237.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:7d:9b:cf:ee:cd:8e:7d:d8:a3:ee:59:19:72:cd:08:86:
         e4:89:58:f3:4e:f3:83:5e:14:33:27:dd:47:8f:35:f3:ba:61:
         d0:40:26:a0:98:aa:e0:09:4b:14:8f:f4:07:c8:9c:6e:c0:53:
         56:69:9a:79:e4:06:c3:b9:6d:14:da:7f:1a:a5:81:6e:60:67:
         9a:66:7d:2a:bc:b9:41:34:fc:e9:f5:05:40:28:fc:ef:e1:d2:
         e9:9c:af:0e:e5:d3:c4:34:53:80:d9:0c:28:21:ab:04:15:9e:
         c2:dc:5b:ea:d7:0c:36:e2:6d:8a:bf:17:57:cf:c7:48:41:16:
         d6:ff:f2:48:14:4e:21:0d:a8:4e:66:31:79:ca:8c:35:c4:0f:
         98:0a:e5:03:e6:f4:5a:da:64:7d:d2:f6:c7:c3:89:f9:60:22:
         62:05:29:92:5f:b5:c7:9c:9d:cc:da:31:67:ca:7a:98:dd:dc:
         1d:dd:00:0f:e9:8f:c0:0f:7f:c4:a4:b6:58:a6:ff:91:d7:9e:
         0d:71:83:45:67:07:73:1d:f2:5f:b8:6c:16:74:1f:75:ed:e0:
         f9:36:cf:47:30:33:ae:49:f6:4d:4b:41:c9:6f:14:32:94:ff:
         d8:cd:9e:97:5a:0a:c0:66:d7:a1:66:63:40:3b:06:1d:57:76:
         69:e1:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:17 2026 by rpki-client