This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/aqcC1Xw1GlkHwNfJpV5G96B6Y14.roa
File:                     aqcC1Xw1GlkHwNfJpV5G96B6Y14.roa (raw, json)
Hash identifier:          gyAassRslHqQmsAqTMeUZ/It9+daVRU3z5BUBwSorZM=
Subject key identifier:   6A:A7:02:D5:7C:35:1A:59:07:C0:D7:C9:A5:5E:46:F7:A0:7A:63:5E
Certificate issuer:       /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial:       019B76EBA29094563098E7EF5EBEA5490CC4
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/aqcC1Xw1GlkHwNfJpV5G96B6Y14.roa
Signing time:             Thu 01 Jan 2026 00:18:32 +0000
ROA not before:           Thu 01 Jan 2026 00:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209141
IP address blocks:        5.180.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:a2:90:94:56:30:98:e7:ef:5e:be:a5:49:0c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
        Validity
            Not Before: Jan  1 00:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa702d57c351a5907c0d7c9a55e46f7a07a635e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:2e:31:bd:54:61:b3:4f:32:37:4e:8a:da:
                    b3:ad:ef:49:46:7b:17:f4:80:0e:e9:b8:ff:7f:9b:
                    51:53:a3:07:7d:c6:db:bc:20:db:ac:9b:ca:ee:c2:
                    be:93:7c:dc:5d:5c:80:2e:56:d7:5b:ef:89:e6:b6:
                    50:b8:a5:d1:54:f8:f7:61:b8:6b:f5:d0:2e:ab:51:
                    22:13:cf:6b:44:c4:17:12:52:fd:10:14:62:05:ea:
                    e6:2e:55:47:04:eb:cc:ab:5c:2a:a1:04:d6:b4:8a:
                    ee:2a:8f:8c:ad:50:f1:5e:8b:18:1d:90:e4:40:ff:
                    ed:1e:a0:f7:3e:53:fc:75:7a:21:4f:62:6c:89:91:
                    85:49:07:22:f0:f3:ba:74:6a:98:9c:70:23:e4:bd:
                    9e:d0:5c:83:0b:7b:90:f7:1c:fc:1f:1d:74:39:b5:
                    d6:cb:29:19:9a:b5:84:a5:01:d0:a4:f6:27:08:1c:
                    d0:ec:c9:aa:c5:5d:ff:1e:55:ba:73:ba:f6:1d:99:
                    84:b3:66:37:e3:0a:22:af:94:f3:85:21:fa:66:85:
                    17:d8:83:2a:4c:89:35:25:e8:8a:99:f6:ab:0a:ab:
                    50:10:07:79:d5:c2:18:f0:9a:44:32:20:d2:10:91:
                    77:f8:7b:f1:af:56:7f:4b:d3:30:30:ff:8d:92:92:
                    e8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A7:02:D5:7C:35:1A:59:07:C0:D7:C9:A5:5E:46:F7:A0:7A:63:5E
            X509v3 Authority Key Identifier:
                keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/aqcC1Xw1GlkHwNfJpV5G96B6Y14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:88:32:c5:ae:86:20:46:b6:a6:35:b7:30:b1:53:0f:a7:f4:
         a7:65:83:ff:fe:a3:92:bf:c7:0c:6f:2c:8f:25:0d:19:ca:37:
         06:c2:2f:9a:77:73:e5:ec:ee:9c:17:69:9c:85:88:a2:93:64:
         c5:6c:32:e7:72:cf:0e:2f:6a:a7:65:8f:41:b5:0a:86:d4:f6:
         ca:e9:29:ec:d1:e8:52:1e:c6:e5:70:16:96:73:6a:12:f3:ff:
         e5:cc:7e:fd:50:3a:e5:c5:83:d7:0d:8f:b0:8c:c7:b3:21:8e:
         35:ce:03:1f:6d:e3:f4:8c:c8:99:a4:55:22:a8:1c:8b:b7:85:
         6d:b3:45:33:97:d6:e3:4c:0f:60:14:d4:9b:99:d0:d7:df:40:
         a2:ca:5a:79:ad:b9:70:5f:2d:27:e7:5b:dc:ed:8d:23:58:17:
         67:03:44:c4:a1:ec:d7:01:26:17:4d:bc:71:cb:c6:73:19:52:
         32:83:c3:85:55:7a:23:dc:62:9d:87:89:81:b9:4e:9b:fd:7d:
         10:8e:e0:9b:d0:06:ed:ec:ab:68:b2:8b:77:4f:ae:f9:e3:e1:
         5c:81:ee:1f:da:42:a4:c2:70:29:9f:19:4d:c1:8e:f9:ae:02:
         a0:24:27:7c:1f:61:ab:40:c3:8c:1e:b5:31:e8:76:78:a6:04:
         c2:59:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:31:19 2026 by rpki-client