This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/T6tjope32KekAaANH2cDVM3Bd9k.roa
File:                     T6tjope32KekAaANH2cDVM3Bd9k.roa (raw, json)
Hash identifier:          9xa2u1KnWt12GiywGNOlfGRCJPP0+ZYG6OMmHhnqVtY=
Subject key identifier:   4F:AB:63:A2:97:B7:D8:A7:A4:01:A0:0D:1F:67:03:54:CD:C1:77:D9
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       019B76EB089D58C4128231749120F3494238
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/T6tjope32KekAaANH2cDVM3Bd9k.roa
Signing time:             Thu 01 Jan 2026 00:17:53 +0000
ROA not before:           Thu 01 Jan 2026 00:17:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     26548
IP address blocks:        178.20.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:08:9d:58:c4:12:82:31:74:91:20:f3:49:42:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: Jan  1 00:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4fab63a297b7d8a7a401a00d1f670354cdc177d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:ac:4a:ac:bc:45:0a:d4:ab:f5:93:95:8a:
                    3d:2b:d3:22:3c:b9:a9:e2:54:cf:97:d8:44:36:a8:
                    98:b0:ad:52:b0:39:84:2a:cc:61:a5:57:2d:74:22:
                    41:46:fb:ee:f6:7d:5d:b7:56:54:33:0a:29:53:f9:
                    c2:ce:f1:45:9f:0a:0f:d7:c8:27:ec:4b:71:ac:1e:
                    58:16:04:53:41:e1:3d:3a:ed:52:93:1d:e7:bd:ce:
                    7f:92:2b:e7:25:e5:0c:36:52:0d:5f:65:56:94:a0:
                    fc:ee:95:39:3b:a5:c5:19:59:57:1f:88:3a:47:51:
                    1e:c5:78:d0:31:79:e9:d7:f3:74:12:d8:d5:91:f4:
                    ba:8f:73:54:1a:4e:a9:38:09:5c:59:db:52:42:5f:
                    89:8e:a4:ea:37:60:dd:a8:bc:b9:46:38:dc:2f:ed:
                    90:96:15:3f:b0:17:2c:52:a0:c4:4f:ac:b2:8c:d5:
                    df:7d:cb:03:39:cf:3b:af:9b:49:59:13:c3:f3:3c:
                    25:e7:d3:12:b9:d6:b7:60:76:a0:9b:23:cc:24:2d:
                    26:52:d3:8b:eb:72:76:4c:f5:27:27:14:39:97:60:
                    6e:d2:21:ce:05:c0:6c:2f:67:0b:ed:82:18:a1:52:
                    e3:2b:0a:98:21:aa:07:fb:e9:59:c2:b8:a5:c9:4c:
                    4d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:63:A2:97:B7:D8:A7:A4:01:A0:0D:1F:67:03:54:CD:C1:77:D9
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/T6tjope32KekAaANH2cDVM3Bd9k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.20.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:35:b8:96:a9:d4:ce:8e:72:da:c1:9f:5c:52:11:56:e0:
         14:78:a1:6c:e3:13:f4:3e:01:bc:82:f5:4d:8b:84:0a:9c:36:
         1e:35:71:4e:39:3e:89:81:b2:b4:a7:67:ea:07:8e:69:07:72:
         92:d4:9c:bc:fc:a0:9d:92:3e:68:bc:39:f4:5e:f7:81:cb:86:
         fc:4a:5f:2d:71:86:8d:78:c8:17:79:7a:e5:f8:e1:7a:e2:c6:
         9f:3e:c1:2b:4b:52:4c:35:43:94:84:d8:66:3e:c7:07:98:9b:
         a1:43:44:92:b3:e2:f0:f0:6c:b3:d8:8f:b4:60:65:c4:70:1f:
         10:0f:a7:f9:eb:77:4b:97:a9:ea:75:35:8b:ba:cd:14:fc:b5:
         a7:d9:ab:dd:78:ae:ac:12:d7:bd:8a:f7:35:89:0d:4e:10:b4:
         4f:22:84:df:15:c9:32:b8:7b:b1:3d:a4:d4:2d:76:1e:3d:4d:
         d9:0d:ca:da:e6:db:1b:f2:14:fc:0c:71:1c:00:ce:2d:4e:a4:
         ac:25:f5:59:21:69:83:ad:53:e4:9a:ce:93:87:dd:08:ad:ff:
         05:5b:1d:5f:24:2d:1e:60:d4:9d:d5:f1:8e:7d:98:57:4f:0b:
         0a:18:15:39:cc:8d:5f:be:f5:46:11:06:ba:99:b7:95:89:3f:
         06:e1:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:06:17 2026 by rpki-client