This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/b3vOSe_mCh8vX6WXedzDGAgnGbo.roa
File:                     b3vOSe_mCh8vX6WXedzDGAgnGbo.roa (raw, json)
Hash identifier:          CPPk4Dgo5ucS2VKPYwD2IIYHos2u7Bwwefa5OhjzMKQ=
Subject key identifier:   6F:7B:CE:49:EF:E6:0A:1F:2F:5F:A5:97:79:DC:C3:18:08:27:19:BA
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       019B7FF1DE6789F9FE32684B60714F25D628
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/b3vOSe_mCh8vX6WXedzDGAgnGbo.roa
Signing time:             Fri 02 Jan 2026 18:21:56 +0000
ROA not before:           Fri 02 Jan 2026 18:21:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        82.206.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:de:67:89:f9:fe:32:68:4b:60:71:4f:25:d6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Jan  2 18:21:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f7bce49efe60a1f2f5fa59779dcc318082719ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:fb:ad:5c:75:a6:08:89:da:83:9b:70:da:
                    ad:63:82:5e:3c:74:bb:ef:3f:97:99:f1:d0:d1:fc:
                    aa:a2:fe:42:de:af:2d:b9:85:aa:30:ff:88:0b:7b:
                    48:97:3a:4d:3e:fd:be:2a:92:76:9e:0c:45:21:4d:
                    b0:80:cd:40:5b:2e:d6:3c:c1:06:fe:66:44:ac:d3:
                    85:77:f4:b0:af:45:b7:58:52:d6:9a:0d:a6:88:d5:
                    31:d5:51:3c:7c:e0:93:eb:b0:c3:f9:d8:74:bb:e6:
                    9a:20:05:1a:55:fb:a2:e3:af:96:fa:ce:0e:88:12:
                    2d:29:14:11:e2:a6:de:e8:60:98:ac:1f:5e:f3:2d:
                    c6:56:0b:d9:3b:52:0a:f3:b9:3b:1c:30:ff:59:85:
                    75:8e:c2:d1:62:69:66:cb:ba:bb:56:d3:db:a2:b4:
                    e8:10:3f:b4:f3:bd:6b:c7:e9:3a:ab:6b:cc:07:2f:
                    96:e0:97:81:c9:9e:95:a2:9d:ac:66:eb:d3:e7:c3:
                    9b:0e:55:3e:e0:54:11:ec:23:5f:8a:13:84:f2:41:
                    8a:7f:7a:a0:47:23:89:3a:ab:cf:f5:ce:f5:3a:d8:
                    6a:87:a6:43:f1:6a:ba:0e:ab:99:ed:bf:21:e6:c0:
                    11:ff:31:f0:52:a0:39:99:97:b0:bf:6d:d9:4d:ec:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:CE:49:EF:E6:0A:1F:2F:5F:A5:97:79:DC:C3:18:08:27:19:BA
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/b3vOSe_mCh8vX6WXedzDGAgnGbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.206.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:f1:6d:c2:22:c3:ff:bc:5a:c3:c5:0a:93:9d:d2:43:98:23:
         96:53:16:03:8b:a4:6f:a1:0b:40:28:01:ff:a7:59:51:03:63:
         83:58:a7:1c:e4:3f:d9:fc:de:59:e4:ae:f3:cc:4f:72:b1:c9:
         0a:3f:dc:ab:73:d1:fd:5b:45:3a:1d:16:97:14:51:8a:f1:6e:
         cc:25:e3:68:60:87:0e:64:57:1f:ef:3f:6a:f7:12:79:24:c8:
         bf:e6:55:01:f6:04:71:fa:5e:cf:d3:70:73:fb:54:08:de:07:
         d9:e9:d8:3e:a4:75:be:a2:4e:b5:ed:e9:c6:e4:34:1f:ce:a2:
         f4:35:75:b6:cb:d5:2a:29:31:0f:9b:2d:bf:c2:e5:c5:d7:7c:
         e4:56:10:e2:cb:e5:50:26:2d:51:1a:50:3e:95:42:73:27:63:
         d4:c4:a1:fd:6a:1e:c3:b4:88:f9:ee:f1:be:5d:13:e9:63:88:
         98:90:10:a3:24:e7:fd:ff:40:d9:d4:57:4f:52:37:23:8d:fd:
         52:d9:c2:47:db:35:98:fb:4c:82:e5:2a:1e:b1:1a:c6:82:da:
         50:0b:92:83:18:38:26:f6:2b:00:de:e4:b0:b4:e2:4e:0a:2b:
         fc:09:92:5e:a7:9c:9a:ce:eb:e6:86:82:92:01:08:c6:96:41:
         88:9e:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:21 2026 by rpki-client