This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/A6iHBsnqcj2Riil3U1_TXl2ABqw.roa
File:                     A6iHBsnqcj2Riil3U1_TXl2ABqw.roa (raw, json)
Hash identifier:          wWCu1PETCholC6rFvWG+KWu2TvENNpa++dqGd7mDsM4=
Subject key identifier:   03:A8:87:06:C9:EA:72:3D:91:8A:29:77:53:5F:D3:5E:5D:80:06:AC
Certificate issuer:       /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial:       019B76EB9509CEEDB676CB6FEC447C4EC3B8
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/A6iHBsnqcj2Riil3U1_TXl2ABqw.roa
Signing time:             Thu 01 Jan 2026 00:18:29 +0000
ROA not before:           Thu 01 Jan 2026 00:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206063
IP address blocks:        185.188.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:95:09:ce:ed:b6:76:cb:6f:ec:44:7c:4e:c3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
        Validity
            Not Before: Jan  1 00:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=03a88706c9ea723d918a2977535fd35e5d8006ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:2d:d0:67:6d:d1:30:3e:1e:3c:32:01:9f:
                    d7:af:59:c9:59:4c:fa:5a:6c:54:42:bc:9b:3c:e8:
                    4c:bb:3c:c4:89:f3:ec:cf:79:cf:71:d8:28:d2:e6:
                    16:e4:f9:20:26:8f:29:f1:59:48:d0:44:9d:9b:6b:
                    13:cb:29:c7:ee:f2:a6:7d:21:4e:33:8a:3c:d3:a4:
                    97:17:93:e5:b8:01:b1:51:8e:88:77:51:09:6d:bc:
                    59:75:c7:07:71:6b:6f:2c:a5:64:60:7c:92:24:cc:
                    66:be:3b:92:a3:d6:02:44:a2:06:aa:2c:56:30:14:
                    42:3c:60:11:07:f0:de:97:9e:f4:54:eb:b2:b8:e6:
                    12:67:ea:53:28:23:56:f8:51:69:9d:39:d5:a7:d9:
                    d6:60:2f:cf:3f:a5:fc:25:32:9f:54:a0:13:32:e7:
                    4f:11:14:03:43:6c:68:53:00:fb:ff:26:fe:fc:66:
                    a4:25:07:c2:f5:26:95:0d:5c:f8:1f:66:a7:0f:90:
                    cc:2c:8a:3c:0c:76:3b:91:8e:b8:4c:b2:70:86:0a:
                    26:47:7f:fa:da:6f:4c:e3:ac:c3:7c:d1:3b:26:4f:
                    d7:d2:0b:ee:f7:4c:44:48:03:bc:20:ab:9f:48:89:
                    f4:21:dd:c2:45:3c:67:85:64:96:70:79:b3:04:3e:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:87:06:C9:EA:72:3D:91:8A:29:77:53:5F:D3:5E:5D:80:06:AC
            X509v3 Authority Key Identifier:
                keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/A6iHBsnqcj2Riil3U1_TXl2ABqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:70:3b:d9:c1:1e:1e:e1:d1:13:0e:c5:2d:28:be:72:8d:
         bf:6a:f7:49:f2:a5:bb:78:b4:a6:75:44:d9:70:04:10:22:97:
         87:4d:e5:6a:42:0b:23:aa:14:04:f1:3c:67:5a:ce:c7:e8:2e:
         9b:d8:1b:21:11:ee:b4:16:0b:1a:d1:ab:47:94:42:64:e8:02:
         68:27:3f:da:e5:20:1f:d0:02:a6:de:42:f6:fc:e8:99:5c:48:
         d1:fc:4f:44:20:c7:f5:15:cf:6f:97:08:21:aa:9f:71:cc:14:
         70:83:60:f0:e7:67:e7:be:05:45:30:d7:49:0d:d6:87:24:d5:
         58:4b:d0:e2:bd:5b:d5:95:90:01:6f:26:04:18:96:bb:20:70:
         f0:d2:74:e4:ec:07:f2:fe:17:ed:64:d5:89:d5:40:0b:61:24:
         bc:4b:66:27:bd:64:6c:57:eb:5a:8b:b6:d0:4f:27:b7:b7:57:
         59:3f:25:10:7a:da:c9:9d:7d:f8:12:ae:13:ae:e8:9a:c5:25:
         1c:c2:ab:a4:96:44:45:44:cc:28:da:9e:10:b0:5f:37:5c:17:
         14:a9:7f:56:0a:06:04:bf:96:06:95:1c:f8:ed:cc:10:8d:ab:
         6f:7a:7e:6c:64:74:e8:d2:0a:1a:0f:a5:0f:63:e2:d6:6e:86:
         a0:83:1d:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt265UJzu22dstv7ER8TsO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZGM0NWZmZTEzZjg0MWYxODhhZjc0M2JkN2RjMzRlZDU0
ODA1ZDQwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2E4ODcwNmM5ZWE3MjNkOTE4YTI5Nzc1MzVmZDM1ZTVkODAwNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3wt0Gdt0TA+HjwyAZ/Xr1nJWUz6
WmxUQrybPOhMuzzEifPsz3nPcdgo0uYW5PkgJo8p8VlI0ESdm2sTyynH7vKmfSFO
M4o806SXF5PluAGxUY6Id1EJbbxZdccHcWtvLKVkYHySJMxmvjuSo9YCRKIGqixW
MBRCPGARB/Del570VOuyuOYSZ+pTKCNW+FFpnTnVp9nWYC/PP6X8JTKfVKATMudP
ERQDQ2xoUwD7/yb+/GakJQfC9SaVDVz4H2anD5DMLIo8DHY7kY64TLJwhgomR3/6
2m9M46zDfNE7Jk/X0gvu90xESAO8IKufSIn0Id3CRTxnhWSWcHmzBD5IpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAOohwbJ6nI9kYopd1Nf015dgAasMB8GA1UdIwQY
MBaAFJPcRf/hP4QfGIr3Q719w07VSAXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQt
MjE4OTU3MjhiYTRlLzEvQTZpSEJzbnFjajJSaWlsM1UxX1RYbDJBQnF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQtMjE4OTU3MjhiYTRl
LzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubwAMA0G
CSqGSIb3DQEBCwUAA4IBAQCu8HA72cEeHuHREw7FLSi+co2/avdJ8qW7eLSmdUTZ
cAQQIpeHTeVqQgsjqhQE8TxnWs7H6C6b2BshEe60Fgsa0atHlEJk6AJoJz/a5SAf
0AKm3kL2/OiZXEjR/E9EIMf1Fc9vlwghqp9xzBRwg2Dw52fnvgVFMNdJDdaHJNVY
S9DivVvVlZABbyYEGJa7IHDw0nTk7Afy/hftZNWJ1UALYSS8S2YnvWRsV+tai7bQ
Tye3t1dZPyUQetrJnX34Eq4TruiaxSUcwquklkRFRMwo2p4QsF83XBcUqX9WCgYE
v5YGlRz47cwQjatven5sZHTo0goaD6UPY+LWboaggx0o
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:31 2026 by rpki-client