This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6t9nR0zE3i1Pe4jiVdhd_HaigJA.roa
File:                     6t9nR0zE3i1Pe4jiVdhd_HaigJA.roa (raw, json)
Hash identifier:          EimKrpeNfRkHTL4aLcOuvKvEGtDsjjrAGUkvdSGXLXc=
Subject key identifier:   EA:DF:67:47:4C:C4:DE:2D:4F:7B:88:E2:55:D8:5D:FC:76:A2:80:90
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DF0399A2E9488E12B13504720C978
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6t9nR0zE3i1Pe4jiVdhd_HaigJA.roa
Signing time:             Thu 01 Jan 2026 12:17:35 +0000
ROA not before:           Thu 01 Jan 2026 12:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56971
IP address blocks:        188.215.31.0/24 maxlen: 24
                          217.19.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:f0:39:9a:2e:94:88:e1:2b:13:50:47:20:c9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eadf67474cc4de2d4f7b88e255d85dfc76a28090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:62:57:09:2e:9e:57:53:d0:81:35:d5:9f:
                    f1:2a:74:c7:cb:f2:a4:58:ea:67:b9:dc:bf:80:27:
                    9d:ff:ac:6c:57:eb:48:2c:dd:41:48:1d:b4:a7:b4:
                    a5:6d:84:d9:6f:a4:82:c4:b6:05:32:20:c9:54:98:
                    33:60:91:ec:73:cf:10:24:62:fc:8d:c5:52:92:5f:
                    92:07:18:16:55:1e:23:72:81:db:76:19:60:cc:cc:
                    3b:ad:a3:89:5c:45:e8:52:03:fe:a1:35:a1:39:2a:
                    87:e8:86:33:3b:6d:b7:2d:26:5d:06:7d:6e:c0:de:
                    3b:8a:6f:de:9a:00:01:7f:ce:8d:e6:3b:56:c0:5b:
                    f5:21:69:4c:90:bb:62:7c:9c:97:87:e2:4c:ea:85:
                    94:6b:f7:46:40:4c:2a:a1:5b:b8:02:ce:ec:f8:ed:
                    a5:7b:63:cd:89:24:40:fa:8f:fc:e6:c9:68:1f:e2:
                    52:4a:0a:da:89:52:61:0a:a9:2a:86:7c:8f:44:c7:
                    70:66:59:b9:17:26:5f:84:84:c0:82:b3:76:f0:5e:
                    68:d6:8e:c6:44:0b:da:e7:33:96:85:8b:69:c9:ff:
                    10:95:6f:81:49:00:d0:2e:49:61:b7:d7:24:87:b7:
                    3c:c2:e9:3d:1c:22:67:cf:d1:28:ed:6d:46:dd:03:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DF:67:47:4C:C4:DE:2D:4F:7B:88:E2:55:D8:5D:FC:76:A2:80:90
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6t9nR0zE3i1Pe4jiVdhd_HaigJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.31.0/24
                  217.19.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:3a:da:a3:37:6b:5d:37:bd:e0:dd:ee:0b:c9:a1:58:99:
         8c:e9:b1:63:8f:12:50:22:41:6a:13:51:1f:f6:21:e0:51:c2:
         2e:d1:b6:a4:f0:fc:d3:83:9d:f7:50:31:8b:52:df:80:55:66:
         b0:f4:c5:fc:ed:9e:0b:30:6a:c5:61:d7:9c:fb:05:72:8f:b4:
         f4:19:d8:38:ba:07:45:23:33:e4:76:cc:ca:51:32:aa:5b:dd:
         b7:86:4c:d3:34:fa:18:50:32:c5:99:68:b3:93:b0:70:3c:e5:
         51:68:74:4c:8f:4a:51:e0:36:4b:6b:18:36:51:a5:25:43:25:
         aa:ad:b5:5f:5b:b0:19:eb:35:e6:a9:4a:6f:a2:7f:55:3d:4d:
         7f:75:4a:5c:42:63:28:70:0b:da:c5:24:32:65:ce:95:1b:38:
         4d:8f:f9:aa:34:b7:ab:cf:37:b5:dc:59:6b:30:a7:50:33:08:
         88:24:e5:51:40:a5:78:f3:5e:1d:2f:58:51:f9:4c:40:e5:d0:
         ab:a6:02:f7:f4:09:e1:09:7c:cd:a1:fa:15:3a:85:a1:5a:55:
         7e:52:cc:46:75:36:e5:84:25:9b:ed:69:c2:b0:3a:87:01:92:
         85:17:36:30:36:0b:2e:bd:67:e8:87:f9:01:18:21:07:3f:15:
         a5:d0:ab:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:40:07 2026 by rpki-client