This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/bN1bEc4HqYXvavKXD6ssUfBHAew.roa
File:                     bN1bEc4HqYXvavKXD6ssUfBHAew.roa (raw, json)
Hash identifier:          YH+C7Jl70iieB5lOKkDQudIPzyOFnd5wp6oB5jVYQHo=
Subject key identifier:   6C:DD:5B:11:CE:07:A9:85:EF:6A:F2:97:0F:AB:2C:51:F0:47:01:EC
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       019B7FF2462097D64DD3E325C7C1AA05E120
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/bN1bEc4HqYXvavKXD6ssUfBHAew.roa
Signing time:             Fri 02 Jan 2026 18:22:22 +0000
ROA not before:           Fri 02 Jan 2026 18:22:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49078
IP address blocks:        195.88.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:46:20:97:d6:4d:d3:e3:25:c7:c1:aa:05:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Jan  2 18:22:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6cdd5b11ce07a985ef6af2970fab2c51f04701ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:54:40:23:f7:64:26:80:cf:32:97:a0:41:
                    23:08:4f:bb:ec:82:73:3d:4f:df:00:10:8d:3a:fb:
                    e7:1f:37:41:f4:42:aa:87:20:f2:af:25:f5:53:1c:
                    f6:0b:03:86:9d:7c:d9:90:34:8c:22:6c:44:f3:16:
                    cd:90:6e:be:c5:12:f2:62:1e:0e:f5:81:af:81:73:
                    90:d5:6d:30:32:2c:44:e9:1e:fd:59:46:68:0a:93:
                    c1:ce:36:81:a0:75:e9:f4:81:3d:08:e2:89:92:51:
                    53:33:35:49:cf:16:f9:b3:b7:0a:59:27:20:ca:7d:
                    8a:50:a0:0e:9f:bc:a6:3b:f0:d7:fd:df:c8:ae:cd:
                    51:6c:ea:ee:ec:f8:c6:b6:32:81:56:be:ab:61:ee:
                    1d:75:ef:0f:10:55:03:cc:ad:1b:2e:d6:dd:b3:56:
                    51:9f:bc:f5:58:f8:b8:e9:4d:07:86:f7:c9:b7:de:
                    ba:e1:ed:80:be:bb:ad:2b:84:a4:7c:63:64:f4:35:
                    e5:7a:51:1a:b1:85:31:dc:ac:4c:f4:bd:f1:cf:77:
                    8e:1d:53:02:6c:25:b6:c1:95:95:2d:65:5d:fe:4a:
                    a5:fb:ce:4a:3e:19:11:b6:4f:5e:48:03:40:9d:2f:
                    98:1e:67:fe:11:8c:c2:62:67:a0:10:31:9b:43:01:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DD:5B:11:CE:07:A9:85:EF:6A:F2:97:0F:AB:2C:51:F0:47:01:EC
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/bN1bEc4HqYXvavKXD6ssUfBHAew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ad:79:73:ee:ff:2d:41:cc:cd:ae:8d:02:8a:e7:4b:b1:eb:
         54:c0:96:90:d3:93:0b:87:4e:e1:af:51:bc:5f:57:77:ac:da:
         b0:4e:35:74:a3:3a:02:aa:37:89:24:ef:c4:0f:2e:ea:bb:09:
         a6:9b:54:f4:30:84:68:21:7b:03:e3:42:53:87:ea:d5:6d:27:
         71:5b:73:7e:26:fc:0d:31:b0:ad:77:05:28:a8:6f:5e:a8:30:
         e3:b4:aa:71:47:8c:89:13:33:60:6e:3f:bf:7a:0e:46:7f:4d:
         c1:cc:23:68:13:7d:a0:50:a0:6d:3b:7b:45:86:14:63:d2:2a:
         39:1d:29:83:c6:82:48:cd:55:58:cd:42:9d:d9:87:21:42:d3:
         6f:d2:c1:72:65:6f:54:27:f7:76:98:ff:5e:b3:45:77:a4:eb:
         41:52:73:ee:8a:6b:72:52:21:e5:75:61:a6:61:ed:7e:0e:4f:
         39:34:e8:91:60:4f:24:f1:12:5c:93:53:fd:7e:cf:42:ac:62:
         65:a2:80:fb:e1:e3:76:00:7e:e6:6e:a5:18:1f:c0:f9:a3:38:
         46:ac:4a:ea:e5:56:d3:09:f4:aa:ad:aa:32:d0:b4:da:42:74:
         73:0a:15:7c:c6:4e:2d:f5:c8:a2:36:1a:ca:46:55:b9:b1:42:
         4e:2e:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:42 2026 by rpki-client