This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/kc6el9fk6QWZ4fob3sPP05-Xha0.roa
File:                     kc6el9fk6QWZ4fob3sPP05-Xha0.roa (raw, json)
Hash identifier:          pJT5V/F0qqIeFzqECg5wB9CFNHQLoVPQ+w7tDdDgN2o=
Subject key identifier:   91:CE:9E:97:D7:E4:E9:05:99:E1:FA:1B:DE:C3:CF:D3:9F:97:85:AD
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       019C000D7F3EE0ED1EFF69BB00C1AE017FF7
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/kc6el9fk6QWZ4fob3sPP05-Xha0.roa
Signing time:             Tue 27 Jan 2026 15:23:30 +0000
ROA not before:           Tue 27 Jan 2026 15:23:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        82.206.2.0/23 maxlen: 23
                          82.206.4.0/22 maxlen: 24
                          82.206.8.0/23 maxlen: 24
                          82.206.16.0/22 maxlen: 22
                          82.206.16.0/23 maxlen: 23
                          82.206.16.0/24 maxlen: 24
                          82.206.18.0/24 maxlen: 24
                          82.206.72.0/21 maxlen: 21
                          82.206.74.0/23 maxlen: 23
                          82.206.76.0/22 maxlen: 22
                          82.206.80.0/21 maxlen: 21
                          82.206.88.0/21 maxlen: 24
                          82.206.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:00:0d:7f:3e:e0:ed:1e:ff:69:bb:00:c1:ae:01:7f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Jan 27 15:23:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=91ce9e97d7e4e90599e1fa1bdec3cfd39f9785ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:a1:c9:0c:86:d3:f3:4f:2b:4d:e0:2f:c7:
                    d1:84:df:16:bd:52:c8:d9:9d:e0:17:0a:d6:8f:71:
                    62:62:5e:d5:0f:7a:fd:03:00:7d:3b:5a:70:c3:4d:
                    e7:90:86:01:4e:b1:a5:54:2f:87:13:17:15:94:0a:
                    1a:35:60:90:e7:7d:f9:fe:52:db:da:a4:8b:77:39:
                    a0:f8:84:3e:1c:40:98:92:e6:b2:51:92:54:ce:17:
                    75:40:b3:4d:60:d0:ed:f8:8e:fc:52:32:96:c5:56:
                    3e:5c:51:4c:b4:d8:1a:91:5d:83:41:90:d9:80:ad:
                    85:00:75:1f:e4:45:77:c5:ea:e1:4d:43:f0:4a:a2:
                    57:8f:f3:06:09:6c:80:74:61:9f:a7:14:00:4a:8e:
                    5e:cc:b8:c1:a5:c8:1d:39:72:ae:86:a8:f2:41:b6:
                    f0:07:6e:7a:b7:0f:27:4c:3b:fa:46:33:39:03:3b:
                    64:5c:5f:3d:44:91:48:78:71:63:07:db:0c:ab:d9:
                    47:42:7b:cf:f9:18:42:c4:91:a4:80:3c:e4:a9:3e:
                    26:1b:d9:e6:8d:de:7d:11:0c:28:4f:ba:bf:17:79:
                    6c:e7:e5:df:af:7d:ee:c4:f7:29:9b:7b:97:b9:78:
                    fb:3b:28:94:93:2f:06:c8:2c:4f:cb:ad:9b:4a:f4:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CE:9E:97:D7:E4:E9:05:99:E1:FA:1B:DE:C3:CF:D3:9F:97:85:AD
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/kc6el9fk6QWZ4fob3sPP05-Xha0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.206.2.0-82.206.9.255
                  82.206.16.0/22
                  82.206.72.0-82.206.127.255

    Signature Algorithm: sha256WithRSAEncryption
         7e:84:75:fd:e5:92:d5:37:ba:34:a5:8f:b9:32:4b:f6:bf:80:
         2b:09:ab:3c:da:69:00:39:91:37:9b:7e:ab:e2:30:20:1d:17:
         44:7f:a1:a8:73:89:0c:82:54:6c:a2:ad:6b:19:b2:7f:53:92:
         4d:a6:e4:79:e7:0f:f9:ff:74:83:38:54:2d:47:88:b9:9f:b6:
         3c:56:4d:98:84:45:9f:82:97:9a:f1:a3:89:06:4e:a2:ce:6f:
         9f:59:be:2d:fc:5c:9b:9d:f8:b5:75:17:e5:dd:b8:b5:cd:e4:
         83:c8:6e:83:54:3b:3f:b9:d9:66:c0:47:e5:e2:79:cd:15:6c:
         3c:4c:ca:f3:99:64:f3:d4:94:c8:4c:3d:73:6f:33:0f:6f:30:
         37:cc:92:01:5b:39:54:4e:3a:cb:94:8d:8d:ad:fb:34:05:bd:
         a9:c8:0c:b8:ea:57:af:88:ec:78:ce:7d:a9:2a:a7:cb:a7:b3:
         90:5e:46:65:2f:55:be:6f:e8:75:e2:e2:75:7d:ac:23:0f:00:
         84:d7:1b:7e:56:06:60:7c:8d:dd:ba:e7:45:8b:a4:3f:b4:02:
         78:4f:df:16:ba:12:91:46:cd:8d:3a:72:d3:cc:23:38:f9:b2:
         38:fa:e4:0c:c5:87:ab:85:98:fc:90:06:7f:45:f2:bd:cb:11:
         e7:b7:9b:94
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZwADX8+4O0e/2m7AMGuAX/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjYwMTI3MTUyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWNlOWU5N2Q3ZTRlOTA1OTllMWZhMWJkZWMzY2ZkMzlmOTc4NWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiqhyQyG0/NPK03gL8fRhN8WvVLI
2Z3gFwrWj3FiYl7VD3r9AwB9O1pww03nkIYBTrGlVC+HExcVlAoaNWCQ5335/lLb
2qSLdzmg+IQ+HECYkuayUZJUzhd1QLNNYNDt+I78UjKWxVY+XFFMtNgakV2DQZDZ
gK2FAHUf5EV3xerhTUPwSqJXj/MGCWyAdGGfpxQASo5ezLjBpcgdOXKuhqjyQbbw
B256tw8nTDv6RjM5AztkXF89RJFIeHFjB9sMq9lHQnvP+RhCxJGkgDzkqT4mG9nm
jd59EQwoT7q/F3ls5+Xfr33uxPcpm3uXuXj7OyiUky8GyCxPy62bSvTc9wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJHOnpfX5OkFmeH6G97Dz9Ofl4WtMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEva2M2ZWw5Zms2UVdaNGZvYjNzUFAwNS1YaGEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAFSzgID
BAFSzggDBAJSzhAwDAMEA1LOSAMEB1LOADANBgkqhkiG9w0BAQsFAAOCAQEAfoR1
/eWS1Te6NKWPuTJL9r+AKwmrPNppADmRN5t+q+IwIB0XRH+hqHOJDIJUbKKtaxmy
f1OSTabkeecP+f90gzhULUeIuZ+2PFZNmIRFn4KXmvGjiQZOos5vn1m+Lfxcm534
tXUX5d24tc3kg8hug1Q7P7nZZsBH5eJ5zRVsPEzK85lk89SUyEw9c28zD28wN8yS
AVs5VE46y5SNja37NAW9qcgMuOpXr4jseM59qSqny6ezkF5GZS9Vvm/odeLidX2s
Iw8AhNcbflYGYHyN3brnRYukP7QCeE/fFroSkUbNjTpy08wjOPmyOPrkDMWHq4WY
/JAGf0XyvcsR57eblA==
-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:11 2026 by rpki-client