This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/6RU1iKMtibIRUO34lektxVh8-ZM.roa
File:                     6RU1iKMtibIRUO34lektxVh8-ZM.roa (raw, json)
Hash identifier:          wmcBcZs3z5AGL7hRNj48ONoKGNAtUvrgpR6xsPZxX9k=
Subject key identifier:   E9:15:35:88:A3:2D:89:B2:11:50:ED:F8:95:E9:2D:C5:58:7C:F9:93
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       019B7F159CEF0CB62C26677C761C00B587C2
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/6RU1iKMtibIRUO34lektxVh8-ZM.roa
Signing time:             Fri 02 Jan 2026 14:21:21 +0000
ROA not before:           Fri 02 Jan 2026 14:21:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        93.191.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:9c:ef:0c:b6:2c:26:67:7c:76:1c:00:b5:87:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  2 14:21:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e9153588a32d89b21150edf895e92dc5587cf993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:79:3d:0e:74:9d:54:88:25:b1:12:8d:4d:c8:
                    fe:b3:78:39:89:c7:03:14:fe:59:47:4d:26:90:53:
                    b7:11:b3:51:c4:82:c8:e2:7b:21:13:05:6d:4d:ba:
                    1f:db:d3:ab:85:c8:cb:4c:f0:97:b2:69:36:cc:17:
                    42:6c:e1:95:60:87:31:ea:f9:fd:7a:8e:08:d3:a4:
                    6e:8c:46:6e:f9:cd:5c:b6:d0:a5:2c:9e:a0:92:68:
                    53:0e:72:5f:7f:ce:5c:d7:a6:de:d6:9d:8b:73:81:
                    26:e4:88:1d:a8:c5:a5:2f:78:22:16:fc:1d:79:c1:
                    be:13:55:6c:ed:2c:5e:1a:96:d4:b4:37:03:f0:84:
                    c7:f3:5f:89:3c:04:10:9a:5e:16:56:5a:ef:62:6d:
                    a0:34:72:67:6f:f6:96:a2:fd:76:75:5a:7d:b4:1e:
                    b6:ee:1d:4c:1b:a4:2e:99:9c:04:8b:a6:17:6d:39:
                    08:dc:cd:6d:94:c4:0e:fe:15:4a:78:16:69:19:3c:
                    ea:78:8a:a2:84:58:db:c7:ef:c9:44:c4:0b:22:3c:
                    0b:5c:19:92:05:54:ac:e6:51:4a:05:89:d5:28:30:
                    a8:9c:29:e7:11:3c:f1:34:cd:a3:be:74:61:92:e6:
                    41:80:ea:92:d7:3c:1c:29:76:90:10:b6:48:65:99:
                    7b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:15:35:88:A3:2D:89:B2:11:50:ED:F8:95:E9:2D:C5:58:7C:F9:93
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/6RU1iKMtibIRUO34lektxVh8-ZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:74:ab:8d:0b:9e:52:53:d4:98:b6:20:57:84:c5:91:65:92:
         b3:5a:8c:6c:5a:f4:11:9c:13:89:e2:07:73:b8:62:56:fb:ea:
         2a:46:1e:38:69:c5:fb:03:35:3e:b3:09:30:c4:37:12:cb:f1:
         0d:a9:52:83:b2:94:06:0b:99:65:82:af:c2:ce:7b:88:d7:ee:
         7b:6a:ef:6f:44:b9:ea:74:88:6b:6f:41:99:0c:17:8c:74:df:
         00:98:07:56:77:f6:cd:e5:06:3c:23:0b:6b:28:cd:d5:50:e9:
         57:73:1d:54:da:14:9b:51:ad:a0:f5:5b:92:eb:47:a4:c8:db:
         94:0e:c4:fd:a4:9e:f2:37:2d:52:71:4f:48:1e:7f:72:7e:43:
         80:49:ee:0d:a5:57:0e:c4:ad:cb:de:98:c0:f3:6a:05:c7:07:
         63:a8:2c:af:94:27:10:73:d8:ae:2c:a0:fd:8a:33:0b:66:34:
         3d:06:37:80:a9:b1:cf:7d:7d:e6:ab:bc:54:35:3b:81:a9:2b:
         e6:e9:e4:b6:83:bf:6e:a5:11:8d:ce:65:41:a7:de:1d:b3:e3:
         25:14:15:d9:d9:5a:8d:22:03:a0:58:94:6a:ae:1b:4a:66:60:
         0e:7d:85:14:da:98:b4:48:19:69:45:12:55:98:c5:49:dd:f2:
         98:cc:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:08 2026 by rpki-client