This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/V060t6JNUi1vfEsa62qo_X0iJE4.roa
File:                     V060t6JNUi1vfEsa62qo_X0iJE4.roa (raw, json)
Hash identifier:          AduE5hrvzuYfk+rxNc4doqIVoG5+EDDcPuZpuiYxofo=
Subject key identifier:   57:4E:B4:B7:A2:4D:52:2D:6F:7C:4B:1A:EB:6A:A8:FD:7D:22:24:4E
Certificate issuer:       /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial:       019B77C6EC64A0C4F9DA6DA611789CAFCC3C
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/V060t6JNUi1vfEsa62qo_X0iJE4.roa
Signing time:             Thu 01 Jan 2026 04:18:03 +0000
ROA not before:           Thu 01 Jan 2026 04:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212656
IP address blocks:        185.178.50.0/24 maxlen: 24
                          194.164.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:ec:64:a0:c4:f9:da:6d:a6:11:78:9c:af:cc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
        Validity
            Not Before: Jan  1 04:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=574eb4b7a24d522d6f7c4b1aeb6aa8fd7d22244e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:4d:d2:84:96:79:b2:cc:3c:49:6c:9d:b0:
                    88:0b:ad:1e:fa:a6:8d:f2:41:ed:44:5b:6e:37:89:
                    7e:72:2d:00:af:ea:7f:c3:4d:da:6e:f3:f8:e7:24:
                    4a:a3:19:9d:07:8b:8f:d3:96:6e:fe:7a:81:7c:01:
                    6c:2c:1c:e0:69:b6:84:34:da:8e:d6:b7:7a:39:af:
                    8d:33:28:32:ae:e0:83:60:65:d7:b2:d8:49:8e:df:
                    a1:32:da:64:21:e5:14:fa:ad:76:08:40:78:19:af:
                    49:fe:30:14:3f:a9:09:ef:51:4a:1a:d8:b4:d9:b8:
                    09:23:7e:ae:4b:47:cb:d7:d9:64:35:49:18:ad:93:
                    c0:92:e1:4c:94:90:97:0a:d1:2d:5b:e9:41:d8:99:
                    50:2b:d3:84:2e:35:fa:0e:59:4d:74:01:42:c2:ad:
                    b7:72:74:48:04:ce:3d:c1:5c:c1:e0:7d:17:e7:03:
                    f5:d9:82:c2:84:21:2b:0d:9b:a7:0d:e8:34:c0:e2:
                    36:a9:85:83:c2:3c:0d:dd:a7:bc:0b:84:86:ff:d7:
                    38:c3:da:10:ce:a4:1f:29:80:c9:07:81:47:51:b4:
                    ff:20:99:b7:c1:fd:f4:ee:7c:e7:e8:c4:3f:ed:f2:
                    03:4e:c8:44:df:05:a7:e3:c0:72:23:27:7a:28:12:
                    d6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4E:B4:B7:A2:4D:52:2D:6F:7C:4B:1A:EB:6A:A8:FD:7D:22:24:4E
            X509v3 Authority Key Identifier:
                keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/V060t6JNUi1vfEsa62qo_X0iJE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.178.50.0/24
                  194.164.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:db:d1:cc:14:a9:01:ec:2b:78:84:7a:7d:ad:89:40:cf:
         c1:cf:77:03:3b:02:e0:d7:09:49:25:af:0d:2a:36:4d:ae:b6:
         f8:ea:b6:6d:7e:62:05:51:8a:25:fd:e6:91:74:37:9e:ff:d7:
         f3:a7:3a:db:91:8d:5c:e1:28:5a:b6:3d:df:e8:4c:8d:88:9d:
         eb:22:e7:12:80:b5:18:10:13:2e:ce:3d:02:b0:93:06:68:ee:
         ac:ab:bb:c5:bd:9d:0a:b0:3b:24:79:fc:af:77:2c:86:d5:ad:
         93:6c:58:ca:75:cc:c2:d9:36:57:47:c9:a8:7f:44:73:f8:cb:
         92:1a:61:64:b4:bc:21:28:fb:b2:31:42:39:2a:db:ce:9a:f6:
         34:57:1a:ab:88:29:fc:86:3b:5d:03:ef:fe:c5:56:e5:9f:d3:
         3d:9c:5f:63:6c:3c:9d:e9:5e:bd:46:5b:81:fe:70:c9:6b:db:
         c0:f7:13:00:a6:30:b0:ca:91:38:6f:7d:01:8e:a3:39:58:24:
         65:16:e5:f1:55:d7:20:52:fd:70:1a:41:8f:4f:f1:35:fa:2d:
         d7:a1:67:d4:ab:3e:e5:7e:75:4e:93:c5:bd:75:be:44:40:52:
         9b:0e:07:b2:ff:a1:af:44:96:55:91:f5:90:68:5b:ed:86:d4:
         54:cf:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:11 2026 by rpki-client