This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/1-R75F-n6DbqOXIjoSMedeoHrP0o.roa
File:                     1-R75F-n6DbqOXIjoSMedeoHrP0o.roa (raw, json)
Hash identifier:          /TsfatXUwCna+KES11mxfaQ4XyB4jFqpfgKp2NEVYCE=
Subject key identifier:   F9:1E:F9:17:E9:FA:0D:BA:8E:5C:88:E8:48:C7:9D:7A:81:EB:3F:4A
Certificate issuer:       /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial:       019B7F8505E302BC0B5B6C04601BCBD53184
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/1-R75F-n6DbqOXIjoSMedeoHrP0o.roa
Signing time:             Fri 02 Jan 2026 16:23:02 +0000
ROA not before:           Fri 02 Jan 2026 16:23:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204126
IP address blocks:        178.213.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:05:e3:02:bc:0b:5b:6c:04:60:1b:cb:d5:31:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
        Validity
            Not Before: Jan  2 16:23:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f91ef917e9fa0dba8e5c88e848c79d7a81eb3f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:75:9a:3d:a9:54:ea:b7:36:a8:fc:a6:44:
                    73:d3:c7:33:d1:e0:c5:2d:61:28:db:53:0f:66:7a:
                    7a:b6:17:5d:8d:fa:7b:c0:01:05:9b:a9:0f:c0:ac:
                    4e:26:dc:0c:a8:69:75:a8:2c:5d:1c:a2:b5:15:c7:
                    90:d6:95:a0:bf:bc:1b:48:6b:46:24:58:ec:6b:62:
                    59:88:00:a9:cf:b5:84:74:ed:5e:a7:02:21:e7:2d:
                    0a:18:09:6f:50:1f:c8:87:34:a2:ce:2a:f1:c8:a0:
                    a0:f6:7e:ec:92:74:36:67:33:75:34:40:b7:47:ba:
                    56:79:ca:06:45:0a:5c:db:07:d1:d4:0c:37:c2:d4:
                    20:87:66:82:03:65:6d:5f:53:1b:1b:e3:8f:5e:2f:
                    93:29:52:39:b3:5a:5b:e9:75:c1:07:e0:d1:f7:92:
                    d7:59:0b:f8:d1:34:08:c9:b0:15:a8:db:19:90:76:
                    b4:b8:a3:d1:5a:16:73:59:cc:4d:ff:df:c6:dd:1c:
                    58:ee:76:30:e3:69:ee:87:94:27:8b:9b:b9:e2:3f:
                    88:f4:a3:46:f0:d8:48:d1:d8:79:a7:81:62:d4:47:
                    cd:57:f7:63:eb:ae:8e:76:9f:56:f5:c9:a0:1f:38:
                    28:61:53:8c:03:61:5d:12:6c:58:3d:34:2b:1f:41:
                    92:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1E:F9:17:E9:FA:0D:BA:8E:5C:88:E8:48:C7:9D:7A:81:EB:3F:4A
            X509v3 Authority Key Identifier:
                keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/1-R75F-n6DbqOXIjoSMedeoHrP0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.213.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:fe:f2:cd:d1:fc:6b:37:cc:79:1a:08:bb:86:a5:0d:03:
         4d:c7:56:6a:ce:d4:54:f7:92:8d:3a:25:7c:d9:06:40:a1:ff:
         b2:0a:cc:1a:17:c1:a5:fe:64:8b:53:47:44:f1:95:eb:2e:6a:
         21:b2:d2:d6:47:f8:e8:19:08:f2:ce:dd:11:a6:2b:f6:45:ad:
         2f:22:58:b1:38:b6:62:68:93:e1:8d:90:71:11:99:30:54:60:
         e2:9b:a6:11:5b:77:72:3e:8c:a0:cf:74:98:40:2d:d1:60:dd:
         d8:c7:c4:0e:8b:e9:12:e4:e6:25:69:02:c6:5a:29:5d:18:73:
         e0:03:f2:f7:3a:4c:b2:40:53:83:58:63:40:4b:a4:a2:4d:99:
         82:eb:e5:37:96:2e:5a:34:7b:f3:a5:48:fd:38:6f:e3:23:1a:
         a4:3e:5d:62:c9:5e:c8:91:a8:60:34:a5:ca:78:90:0a:1f:6e:
         a9:77:31:f7:59:4e:36:87:3a:bd:63:a8:88:7d:60:e4:7b:30:
         e4:ef:bf:0f:17:2a:d7:eb:67:48:5e:79:86:f7:90:f0:69:48:
         ab:2f:fc:b0:60:a0:c9:c6:d6:28:c7:f1:5f:ca:f5:66:39:60:
         08:c3:d7:71:e9:35:6a:70:1a:b2:18:e3:36:5e:e9:75:d3:bc:
         bf:59:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:57 2026 by rpki-client