This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/V6lGWiZ2jVo3s83BAWD9qzymG-M.roa
File:                     V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (raw, json)
Hash identifier:          TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=
Subject key identifier:   57:A9:46:5A:26:76:8D:5A:37:B3:CD:C1:01:60:FD:AB:3C:A6:1B:E3
Certificate issuer:       /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial:       019B77C6F1629452A9437A4DF39088B7CD55
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/V6lGWiZ2jVo3s83BAWD9qzymG-M.roa
Signing time:             Thu 01 Jan 2026 04:18:05 +0000
ROA not before:           Thu 01 Jan 2026 04:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3214
IP address blocks:        89.106.207.0/24 maxlen: 24
                          192.109.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:f1:62:94:52:a9:43:7a:4d:f3:90:88:b7:cd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
        Validity
            Not Before: Jan  1 04:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57a9465a26768d5a37b3cdc10160fdab3ca61be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:a4:5b:f5:71:72:fe:9e:02:d2:c7:6c:6b:
                    23:cf:56:b2:b1:13:5a:6b:a4:09:34:42:f3:e6:d2:
                    8a:0e:8f:89:ef:90:0d:62:40:30:c7:68:f8:18:b9:
                    e9:de:86:8b:5e:91:ce:15:64:4d:40:96:14:73:cc:
                    d1:27:8d:cc:e6:58:09:6b:13:1c:cb:e2:b0:cd:41:
                    f5:d7:9b:55:73:13:67:32:d0:fc:b3:ee:ab:1e:d1:
                    8c:ad:a5:f0:73:63:7d:13:38:cc:61:60:72:f9:00:
                    78:4e:01:d6:e4:0b:14:c1:af:3e:7c:f1:6a:07:da:
                    55:d8:62:bd:88:61:78:c8:9b:18:f4:58:d5:2a:04:
                    b6:90:79:4a:63:de:69:9b:a9:c0:53:37:e0:34:15:
                    8f:89:a8:38:24:fd:0b:4b:5e:f1:c4:2d:9c:ac:91:
                    b8:73:d1:be:ef:71:7a:11:36:f1:ab:a1:cf:9d:d7:
                    46:7a:75:e7:5b:bf:f7:89:77:9d:1a:f8:20:97:07:
                    c9:72:21:b8:c2:b8:21:c7:89:98:60:55:11:29:74:
                    77:29:38:e3:3a:20:26:7a:76:7b:06:be:df:d8:56:
                    40:f6:49:dc:d7:30:ad:28:2d:1b:bc:6c:24:52:dc:
                    fc:45:54:76:6f:66:47:61:fb:b3:02:de:15:cf:83:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A9:46:5A:26:76:8D:5A:37:B3:CD:C1:01:60:FD:AB:3C:A6:1B:E3
            X509v3 Authority Key Identifier:
                keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/V6lGWiZ2jVo3s83BAWD9qzymG-M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.207.0/24
                  192.109.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:0b:af:26:3e:f8:01:01:59:14:14:c2:d5:0d:06:44:75:5f:
         10:27:3c:f8:16:f6:70:b5:92:80:6e:e4:e7:47:98:40:f4:fd:
         72:98:05:3d:56:19:db:d5:e1:b5:34:d6:a3:a4:7b:f1:04:c2:
         e1:fd:82:5e:b0:ab:7a:8e:aa:36:d2:c8:be:a9:9e:f2:99:b1:
         2d:fd:54:3d:93:82:0a:6f:6a:f7:ed:e9:2e:37:a8:dc:61:b1:
         7b:d9:14:24:e4:3c:b4:ce:d4:d7:71:8e:4c:db:55:7f:09:d0:
         32:95:6e:96:b7:73:d7:f1:88:b1:9e:fa:b9:ba:f6:81:6d:7b:
         2b:9e:e2:ce:85:3c:37:4c:22:8f:44:ca:bb:1c:b5:4e:bf:c0:
         9d:04:7e:1e:1f:ad:4f:d2:c4:0e:e0:18:90:99:68:60:86:eb:
         19:76:18:11:d8:e6:09:a1:db:d7:35:01:e7:f7:4b:19:45:39:
         c8:94:d9:cf:e2:ee:d3:33:a3:f7:e9:20:1c:5e:a2:40:60:65:
         6a:f9:4c:ee:79:4e:a1:89:6e:a0:3c:d9:41:df:fa:d7:c0:46:
         64:35:f0:ee:35:ed:37:f0:5e:c6:ff:6b:2e:f4:2c:79:09:3a:
         32:22:2d:6d:6c:5e:9a:af:c3:06:99:3d:7b:34:8c:39:a7:f1:
         77:21:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:32:55 2026 by rpki-client