This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6__FzytDeJGBiOsqkC5Q6lvVz5c.roa
File:                     6__FzytDeJGBiOsqkC5Q6lvVz5c.roa (raw, json)
Hash identifier:          k4b9r2kfzauGDNPF91+6aM/sLBFPud/qX7UDElApLio=
Subject key identifier:   EB:FF:C5:CF:2B:43:78:91:81:88:EB:2A:90:2E:50:EA:5B:D5:CF:97
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019B37D11CB52617144D423233C0F00C5387
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6__FzytDeJGBiOsqkC5Q6lvVz5c.roa
Signing time:             Fri 19 Dec 2025 18:13:29 +0000
ROA not before:           Fri 19 Dec 2025 18:13:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        5.102.100.0/22 maxlen: 22
                          5.102.116.0/22 maxlen: 24
                          5.102.120.0/22 maxlen: 24
                          31.186.180.0/22 maxlen: 23
                          82.163.64.0/22 maxlen: 24
                          82.163.168.0/22 maxlen: 24
                          82.163.224.0/22 maxlen: 24
                          185.86.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 23:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:d1:1c:b5:26:17:14:4d:42:32:33:c0:f0:0c:53:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Dec 19 18:13:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ebffc5cf2b4378918188eb2a902e50ea5bd5cf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:e2:4c:a0:24:40:41:4f:cf:3a:87:bb:47:
                    a6:36:2c:e5:de:d1:e8:3f:a6:9c:92:2f:a6:a8:1c:
                    56:80:f3:c1:59:da:db:be:8f:16:c9:e8:82:a5:ed:
                    09:26:e8:56:63:ea:45:7a:9a:39:f1:b3:01:a7:84:
                    0f:d8:29:a5:9d:e3:4b:27:9a:bb:2f:e3:55:96:3c:
                    45:8f:f2:9f:de:17:d3:e1:92:4d:a3:83:ef:33:fb:
                    92:6b:9d:dc:c3:b1:6e:18:b6:10:67:53:6e:30:27:
                    32:ec:50:9c:1e:6c:e6:7b:5a:f0:77:82:18:d9:28:
                    4e:23:10:38:54:af:80:e1:a2:d9:21:3b:e7:27:ed:
                    97:69:4a:c4:84:6e:a4:0f:3d:54:16:7b:f5:cc:5c:
                    93:da:66:f7:c2:3c:06:91:69:e6:e1:f7:36:6a:73:
                    4a:57:39:ff:10:9c:df:9e:45:71:1d:81:3f:2e:57:
                    76:e1:2c:29:3f:c5:b6:48:13:8f:14:b3:8c:5f:8a:
                    2a:6d:c9:eb:f6:99:8c:8e:d5:97:bf:e9:b0:3f:7c:
                    fb:ba:75:d0:91:67:97:dd:37:f4:e1:74:92:d2:22:
                    98:d7:93:db:85:e5:fe:36:85:b0:1d:91:b1:12:81:
                    67:2d:66:2d:6c:75:9f:8d:ed:ab:52:93:f2:d4:45:
                    1c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FF:C5:CF:2B:43:78:91:81:88:EB:2A:90:2E:50:EA:5B:D5:CF:97
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6__FzytDeJGBiOsqkC5Q6lvVz5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.102.100.0/22
                  5.102.116.0-5.102.123.255
                  31.186.180.0/22
                  82.163.64.0/22
                  82.163.168.0/22
                  82.163.224.0/22
                  185.86.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:42:d1:c7:c9:7a:45:89:60:6c:7f:3e:7d:e0:78:4f:cd:4a:
         b5:71:f3:a4:a8:cb:c0:bd:29:6c:d1:55:13:ed:60:21:97:79:
         4e:61:54:85:d1:61:d8:37:ac:ef:2b:34:76:1a:e2:49:b4:fe:
         d3:13:d3:87:40:b7:3a:69:61:7b:91:ae:96:88:fe:5b:ea:6c:
         80:21:80:11:f8:ab:1b:45:97:29:27:83:60:dc:01:0f:c1:ac:
         7f:0f:f6:bb:73:fb:3a:8f:75:f6:e7:34:6f:69:2e:60:da:91:
         13:77:56:2b:4a:43:43:e6:36:61:86:d9:17:4d:d7:37:c4:2c:
         4c:ef:5b:80:aa:1c:42:f1:da:86:38:80:64:99:4a:9b:2f:86:
         82:61:a3:ed:05:56:1f:45:f2:4d:11:fa:bf:da:db:8d:87:a1:
         f8:8f:02:4e:0c:0d:5f:1c:ea:3d:0a:58:13:b9:d1:d4:68:08:
         78:6b:fa:65:ae:08:ce:cb:94:05:be:e9:dc:e0:b2:51:90:d6:
         19:ef:8c:10:73:56:86:6b:16:b4:24:96:f3:8b:33:17:2e:da:
         7c:3d:9a:cc:9d:d0:30:0a:13:73:8a:84:90:10:54:1c:bb:35:
         6f:0b:f3:90:28:a4:77:e2:fa:1d:8e:b8:4e:d8:45:7a:94:61:
         2c:cb:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:18:57 2025 by rpki-client