This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/b_miJDSe2X7LNQkUXBeBnfQ9NzY.roa
File:                     b_miJDSe2X7LNQkUXBeBnfQ9NzY.roa (raw, json)
Hash identifier:          4d/0HZTRX3AwdeZwWVGFlksAKBE1o2Mvc3JLliWqra8=
Subject key identifier:   6F:F9:A2:24:34:9E:D9:7E:CB:35:09:14:5C:17:81:9D:F4:3D:37:36
Certificate issuer:       /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial:       019B7C7F9CE4BF650CF5B85157C26F84294D
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/b_miJDSe2X7LNQkUXBeBnfQ9NzY.roa
Signing time:             Fri 02 Jan 2026 02:18:16 +0000
ROA not before:           Fri 02 Jan 2026 02:18:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62139
IP address blocks:        185.46.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:9c:e4:bf:65:0c:f5:b8:51:57:c2:6f:84:29:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
        Validity
            Not Before: Jan  2 02:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ff9a224349ed97ecb3509145c17819df43d3736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:be:aa:83:56:4d:0e:7c:40:af:5e:d5:8c:
                    13:be:a3:c8:db:73:95:96:9c:8f:8b:f5:54:59:30:
                    cc:a3:6e:78:cf:f0:f7:5a:75:2c:20:95:fe:35:98:
                    4e:5b:77:f6:de:21:70:39:01:d7:c7:7b:74:a1:62:
                    1d:41:ad:79:64:bd:18:b2:ce:8f:de:64:2d:d4:6d:
                    20:de:39:0a:be:39:9e:69:7b:8a:22:9f:98:8e:fc:
                    24:b3:99:ba:4d:06:8a:4a:03:96:f8:f1:51:33:94:
                    c0:58:16:0e:04:9b:d5:59:f4:88:d9:70:75:f3:e1:
                    57:02:57:4b:d9:6f:5d:50:ad:d1:1a:95:4a:cd:ec:
                    bc:f4:4f:57:d8:10:17:25:75:ff:fe:15:ed:c3:98:
                    df:f9:2c:67:6a:a2:f7:28:38:89:c7:c7:36:39:5a:
                    87:a1:4c:5f:49:33:ff:ae:ec:86:68:c1:49:74:e7:
                    15:57:c4:8a:dd:e7:b3:06:06:8d:0d:da:84:ad:9e:
                    12:2c:40:59:2d:e1:83:90:82:71:47:17:52:29:d9:
                    50:47:ba:13:9d:5e:6e:a1:50:28:99:4a:4b:a4:d5:
                    60:f4:1a:6b:6e:70:0c:d3:d4:ad:34:28:ae:ab:07:
                    77:f3:c9:9e:78:0f:ad:d3:69:3f:c0:dd:28:48:4a:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F9:A2:24:34:9E:D9:7E:CB:35:09:14:5C:17:81:9D:F4:3D:37:36
            X509v3 Authority Key Identifier:
                keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/b_miJDSe2X7LNQkUXBeBnfQ9NzY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:f5:d7:a5:2e:83:b4:6c:26:f3:5d:b9:4d:03:51:8c:dd:
         a5:78:63:54:d4:dc:b5:97:43:00:64:9d:f1:21:be:6c:c1:01:
         1f:a7:3a:3f:29:60:68:f7:59:43:e2:a9:50:b6:ad:3c:e3:51:
         73:b9:5a:b6:a1:ee:80:63:26:db:53:55:f7:04:c7:b6:fa:c3:
         a4:3d:ca:4e:65:90:e0:f4:1b:18:44:46:a3:20:c0:f1:b1:53:
         e2:b9:55:ce:39:27:71:bb:bb:e9:bd:f1:cf:50:df:a3:fa:49:
         3c:aa:38:25:9f:2e:6f:b3:2b:06:bf:b4:2e:9c:1d:f7:b9:e1:
         2f:bb:72:e1:7e:a9:c0:af:40:8c:56:99:36:9e:99:23:52:f4:
         83:20:02:d6:4b:4d:d1:5a:8e:b4:d7:18:dd:7c:9f:6c:e9:60:
         5b:04:c5:4d:4e:9f:c1:eb:47:f3:4b:75:34:4d:a9:ba:4e:a7:
         be:8f:a8:82:87:93:91:45:6a:42:b3:bd:74:79:ac:8b:aa:22:
         f0:2a:f4:36:bb:e2:05:41:ef:31:f3:d5:86:7e:f9:da:9f:d6:
         17:bf:3d:d7:ae:81:9d:66:ea:3b:e5:e9:26:68:02:c1:25:7d:
         49:89:af:b8:9e:c8:1d:55:26:c8:6a:a1:70:cd:93:c2:03:13:
         32:3a:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:47:18 2026 by rpki-client