This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tZ6sfbxwhRCrZBbOJwOtXI9dc4s.roa
File:                     tZ6sfbxwhRCrZBbOJwOtXI9dc4s.roa (raw, json)
Hash identifier:          a8njVHA3PgmiXYz6G4XmdwuLn9Y6NsOKeLUNSaCEPZA=
Subject key identifier:   B5:9E:AC:7D:BC:70:85:10:AB:64:16:CE:27:03:AD:5C:8F:5D:73:8B
Certificate issuer:       /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial:       019C359C2BFA64C5B3BF76371DF0536B7DA4
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tZ6sfbxwhRCrZBbOJwOtXI9dc4s.roa
Signing time:             Sat 07 Feb 2026 00:59:13 +0000
ROA not before:           Sat 07 Feb 2026 00:59:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201423
IP address blocks:        2a06:9801:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 19:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:35:9c:2b:fa:64:c5:b3:bf:76:37:1d:f0:53:6b:7d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
        Validity
            Not Before: Feb  7 00:59:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b59eac7dbc708510ab6416ce2703ad5c8f5d738b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:47:2e:90:77:90:0a:c6:32:43:1e:47:97:
                    b5:c3:59:e3:d0:77:23:39:67:1c:bd:72:45:ee:b6:
                    fe:29:83:0e:92:1d:cc:2f:86:91:c6:68:b6:d3:5b:
                    9d:a4:28:a0:06:5a:f4:78:29:2d:65:3b:08:89:e5:
                    41:0d:ef:6d:e1:3f:8d:df:d7:cc:ff:a0:a2:09:ea:
                    b7:e8:a4:81:80:a0:45:be:8b:78:87:00:80:09:4e:
                    ea:a8:7f:69:21:a3:36:76:e5:f6:61:d0:65:cc:bb:
                    c8:64:13:74:12:c0:be:6a:d9:c3:d8:f9:8c:f6:80:
                    ce:5f:bc:c5:5d:9f:b1:14:db:46:91:bc:86:d8:14:
                    a4:b9:3d:a8:d2:63:ee:33:1b:02:1c:05:e9:58:93:
                    2c:71:dd:ce:b5:07:3e:b2:fb:5c:e1:6b:ae:7d:59:
                    4b:bc:6b:6a:38:2d:9e:c6:35:db:4e:7c:0c:bc:78:
                    2e:94:f6:35:66:22:14:a1:b1:5f:04:3a:0d:80:38:
                    89:a3:f2:f4:0c:57:01:ec:9a:86:ed:12:f5:02:e4:
                    57:43:09:75:d4:64:46:ca:64:c5:4a:bd:10:82:d8:
                    ba:03:65:fb:f7:cb:f5:b6:1c:30:2e:cf:fb:cf:c2:
                    be:f8:ff:4a:60:94:50:ec:7c:3d:b5:ff:55:d4:3f:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9E:AC:7D:BC:70:85:10:AB:64:16:CE:27:03:AD:5C:8F:5D:73:8B
            X509v3 Authority Key Identifier:
                keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tZ6sfbxwhRCrZBbOJwOtXI9dc4s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9801:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:a9:14:86:6a:be:6c:a3:44:a0:cd:36:8e:74:ed:5e:28:35:
         b2:9d:1a:9d:27:2f:b9:f8:98:3f:60:87:04:00:1f:3d:fb:04:
         fb:07:53:fb:11:6d:9b:7b:fc:e4:ea:fc:9a:ea:6b:c2:2d:ea:
         4d:af:6f:ac:33:26:df:30:1b:24:83:90:8a:7f:0d:cd:31:ab:
         1c:04:1e:2e:1a:4e:4b:01:39:fb:7d:ca:16:37:f1:4c:38:a0:
         4e:19:2d:3e:fa:8c:06:e9:bd:8f:02:37:68:a9:9b:33:e6:df:
         20:7a:16:4b:b2:1b:b5:22:4a:07:64:ab:7b:f5:4b:6c:2f:d5:
         d5:1a:be:82:bf:a6:61:90:26:b4:9d:ca:4c:ef:fa:d2:37:50:
         af:68:e2:e5:41:88:aa:95:0b:b7:a6:19:94:5b:5f:88:a4:21:
         63:b7:bf:37:df:32:fc:cd:e8:ee:33:2a:e6:cd:68:d3:3a:01:
         c4:52:ce:40:b9:f9:3c:88:69:2f:c2:17:9c:ce:44:bd:5d:67:
         b6:a3:cc:c1:9a:e4:5b:6e:eb:46:f7:8b:77:7a:5e:e0:a1:88:
         2d:ef:cd:a6:0a:7b:6c:d3:17:64:e4:5d:5f:59:59:ab:d7:92:
         fb:1e:02:03:9c:37:94:bb:ed:9c:15:90:6f:55:c4:f5:03:4a:
         38:b3:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 04:50:40 2026 by rpki-client