This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/1p6N-kK_4V3GFKcMeMBC634qt2Q.roa
File:                     1p6N-kK_4V3GFKcMeMBC634qt2Q.roa (raw, json)
Hash identifier:          TSyzIZ76W8e8kErWqZwdXl64ZiwUdxKLNAqgp6ToAQQ=
Subject key identifier:   D6:9E:8D:FA:42:BF:E1:5D:C6:14:A7:0C:78:C0:42:EB:7E:2A:B7:64
Certificate issuer:       /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial:       019B7DCA31527E149963C65EC50ED49887B8
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/1p6N-kK_4V3GFKcMeMBC634qt2Q.roa
Signing time:             Fri 02 Jan 2026 08:19:21 +0000
ROA not before:           Fri 02 Jan 2026 08:19:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212748
IP address blocks:        2a0e:b2c4::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:31:52:7e:14:99:63:c6:5e:c5:0e:d4:98:87:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
        Validity
            Not Before: Jan  2 08:19:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d69e8dfa42bfe15dc614a70c78c042eb7e2ab764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:8e:8a:0f:b8:e5:bc:3f:93:8b:f9:59:3f:
                    e3:f7:85:f6:ff:63:06:d2:3f:de:4d:c3:98:6d:22:
                    61:90:49:d0:54:28:8f:97:dc:5a:fe:82:5b:f8:2d:
                    0f:ec:d0:a9:55:77:55:76:62:17:06:9f:76:2e:41:
                    73:30:24:5e:64:46:77:25:33:c4:50:53:6c:20:fe:
                    56:2f:c0:73:38:5a:58:c1:3c:9e:2f:13:63:37:16:
                    50:82:a1:4a:4e:c9:e9:c1:56:33:d8:dd:ef:1c:cf:
                    4b:05:d0:de:ae:73:e7:d7:4a:2d:ab:5c:a6:fc:ed:
                    e0:42:ee:0e:f7:a7:31:1e:a0:d3:80:33:e1:ed:91:
                    57:79:20:02:6e:1e:0d:3e:aa:ef:b7:61:6e:a8:65:
                    81:4b:04:2c:e3:99:54:f2:01:9b:08:24:13:5c:38:
                    3d:7e:32:8a:c6:d3:33:ad:c1:7e:96:a5:1a:d6:68:
                    82:36:f1:e4:b9:1e:fe:df:e5:a5:ae:37:a5:94:32:
                    d2:0f:69:56:02:10:22:75:e4:fe:26:67:93:61:7b:
                    84:33:fd:f4:35:8c:35:5a:4f:f6:2f:1d:82:ee:e8:
                    6e:84:bc:eb:fd:ed:65:de:1c:e9:45:10:24:55:d0:
                    29:c3:23:af:b1:45:79:93:c9:5d:4a:7c:ac:93:55:
                    30:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9E:8D:FA:42:BF:E1:5D:C6:14:A7:0C:78:C0:42:EB:7E:2A:B7:64
            X509v3 Authority Key Identifier:
                keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/1p6N-kK_4V3GFKcMeMBC634qt2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b2c4::/30

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:88:5e:96:4c:16:02:3b:fe:42:82:58:62:26:15:74:8f:
         2d:dd:4a:ea:2c:34:f9:90:e6:df:7b:ce:f0:89:79:f3:87:31:
         f0:47:a7:6e:95:a0:12:79:c2:c5:e4:72:44:d7:c7:ce:f3:b7:
         b4:cf:92:0f:74:06:d8:21:15:65:a2:6f:37:12:7e:fd:82:0b:
         40:e6:19:94:bd:2c:ff:0d:64:62:c0:f7:d2:fb:9f:b5:11:d0:
         5b:7d:cc:df:18:62:13:a5:59:20:dc:0a:7a:fd:13:aa:f0:37:
         59:96:57:9f:00:5b:b5:4e:10:99:b1:44:26:53:58:da:8a:04:
         c3:0d:bb:8a:ea:9d:a0:0a:3e:62:91:f3:d5:2b:89:87:a7:eb:
         cc:01:46:58:13:a2:db:b7:20:1c:a9:cd:1b:98:86:0d:3d:1d:
         07:41:1e:46:50:0b:ec:50:10:10:2e:2a:17:16:f0:e2:57:1c:
         ea:42:a8:d8:79:01:c5:60:e7:37:ac:03:48:c0:e1:96:fa:f3:
         d1:6c:0e:2e:56:5f:16:34:8d:53:e1:f6:db:a9:b0:c4:51:65:
         80:a3:4b:d0:2e:7b:0f:65:e1:e0:46:1e:26:b5:1f:fa:4b:9c:
         23:0c:db:63:5c:57:43:98:a8:b9:72:5c:b5:96:0a:6f:84:ce:
         8c:7c:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:43:58 2026 by rpki-client