This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0p6RxjBfxoQLWr8knBK5cbdgRVw.roa
File:                     0p6RxjBfxoQLWr8knBK5cbdgRVw.roa (raw, json)
Hash identifier:          dI5i12OOBcX/mzaIQAKoixo8L72IU5/9stUyc/fx/gY=
Subject key identifier:   D2:9E:91:C6:30:5F:C6:84:0B:5A:BF:24:9C:12:B9:71:B7:60:45:5C
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       019B7F159B098C6025422A31B063F8C2AB1A
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0p6RxjBfxoQLWr8knBK5cbdgRVw.roa
Signing time:             Fri 02 Jan 2026 14:21:20 +0000
ROA not before:           Fri 02 Jan 2026 14:21:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12222
IP address blocks:        2.16.36.0/24 maxlen: 24
                          2.16.37.0/24 maxlen: 24
                          2.22.60.0/24 maxlen: 24
                          2.22.226.0/24 maxlen: 24
                          2.22.227.0/24 maxlen: 24
                          80.67.64.0/24 maxlen: 24
                          80.67.65.0/24 maxlen: 24
                          80.67.70.0/24 maxlen: 24
                          80.67.73.0/24 maxlen: 24
                          88.221.208.0/24 maxlen: 24
                          88.221.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:9b:09:8c:60:25:42:2a:31:b0:63:f8:c2:ab:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  2 14:21:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d29e91c6305fc6840b5abf249c12b971b760455c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:81:1c:3c:82:51:b9:61:ae:4b:24:6c:c3:
                    7a:c9:a5:53:7b:d1:0d:a1:ab:e9:de:31:55:43:6b:
                    8d:1f:80:39:6c:89:56:b1:7b:b9:b2:b9:ff:0e:36:
                    26:66:68:5f:cf:30:09:e7:c7:c4:b8:63:f7:e7:13:
                    55:fb:8e:26:f2:ea:aa:47:4a:7a:95:c0:78:63:c3:
                    bc:8a:e1:15:24:66:80:d4:56:ae:f5:f7:d9:97:d1:
                    3f:23:bf:9c:fe:2a:69:f0:6f:70:a9:b4:14:91:7e:
                    d8:5c:66:81:f1:24:70:8d:29:73:ee:07:ff:54:3d:
                    9b:11:18:f2:aa:bb:79:9e:b9:c0:50:92:8b:89:9a:
                    b1:08:de:48:5a:c4:03:cf:a8:e1:e7:8d:41:17:8f:
                    22:c6:71:5e:4b:ed:42:51:40:05:8f:2a:dc:d1:f5:
                    fb:ea:44:1b:48:68:02:c7:66:32:a8:38:ce:1e:4e:
                    47:1f:c2:92:a7:6a:99:0b:3d:5d:00:6c:93:21:f2:
                    67:91:6f:83:38:a4:43:af:80:60:3e:68:7d:a2:a9:
                    ef:dd:18:05:6f:b8:60:14:7f:0c:3e:d3:5e:a4:f2:
                    6e:e3:f2:c0:b0:2a:2e:b3:ee:d4:b0:c0:e7:eb:2a:
                    10:8f:93:ab:a3:09:eb:de:34:8f:71:b0:ec:30:96:
                    96:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9E:91:C6:30:5F:C6:84:0B:5A:BF:24:9C:12:B9:71:B7:60:45:5C
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/0p6RxjBfxoQLWr8knBK5cbdgRVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.16.36.0/23
                  2.22.60.0/24
                  2.22.226.0/23
                  80.67.64.0/23
                  80.67.70.0/24
                  80.67.73.0/24
                  88.221.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:62:fb:de:9e:e6:7c:10:f1:2f:1f:15:00:c5:c8:80:c2:
         bb:34:93:c3:25:97:ad:57:5b:9c:44:cc:5b:c8:67:20:f6:04:
         82:b8:08:3d:23:fc:6b:72:e4:37:13:df:0c:43:ab:ad:8a:9d:
         de:82:7a:8f:db:73:99:55:e7:20:4a:3a:d7:17:bd:5d:d1:89:
         73:28:ea:3e:00:88:2f:0d:b7:6f:5d:49:f3:be:24:ab:3a:52:
         07:af:7a:9f:8f:af:06:24:10:e3:9a:13:6c:0d:21:ed:ea:79:
         de:64:6a:c4:66:f0:7b:10:b6:85:49:8d:dc:b4:19:fd:39:f3:
         02:26:fb:95:d6:e3:0e:9c:bc:5d:b6:61:6e:fc:be:6b:3c:7e:
         e8:e3:17:67:2f:ee:3a:2c:99:a7:f1:a1:3b:6e:62:a5:69:a5:
         04:34:a8:2f:d8:1c:f5:6d:a3:6e:a0:b6:a4:a7:e8:42:0b:6c:
         5c:22:38:4c:1d:7d:51:bd:ff:08:b8:f2:5b:e1:7c:b4:c6:e8:
         5c:f9:6a:c5:3d:ad:84:d6:85:1f:a5:e0:d6:b6:44:b3:4f:38:
         45:7d:9c:a5:60:6c:3a:77:4f:62:fd:83:da:8e:a8:0f:56:a1:
         9b:ec:97:ce:6b:59:34:75:17:00:df:4d:18:38:e2:84:6f:50:
         93:a4:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:46 2026 by rpki-client