This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa
File:                     c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa (raw, json)
Hash identifier:          xfIMp+34y6MSA9eYmpp36aGhUYMtBbTbqNw42uiP6Hc=
Subject key identifier:   73:A8:3F:E8:95:83:23:44:E9:2B:D1:64:4B:35:3D:24:B7:13:60:57
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019B7CEE38F4F47BDA25812E323F39C62F95
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa
Signing time:             Fri 02 Jan 2026 04:19:05 +0000
ROA not before:           Fri 02 Jan 2026 04:19:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        46.20.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:38:f4:f4:7b:da:25:81:2e:32:3f:39:c6:2f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Jan  2 04:19:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=73a83fe895832344e92bd1644b353d24b7136057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:2c:db:a9:cf:c9:fa:4c:53:cc:31:29:dc:
                    4b:c2:35:3b:39:14:97:11:96:ad:35:d2:06:a8:38:
                    ef:d2:b0:e4:42:be:90:a7:69:4e:0a:68:17:9c:8e:
                    13:70:6b:ca:67:2a:56:b5:13:72:be:83:3b:7a:e9:
                    fe:e0:fe:90:92:fd:f2:8f:4b:d0:aa:39:0b:61:33:
                    e6:28:ce:35:da:3d:bc:33:8e:24:15:b0:b2:63:84:
                    70:b7:af:73:8a:de:a5:b5:9d:2d:17:0a:9f:8c:b8:
                    0b:43:3b:3f:65:52:20:bc:fa:fc:89:6d:77:b4:94:
                    14:c7:54:c1:d3:4e:d0:17:db:82:b9:0a:e8:4c:c3:
                    dd:ac:49:3b:f8:07:03:73:85:3d:d0:b7:ab:5c:ec:
                    43:c0:d0:3a:36:57:b8:29:2b:4b:0e:84:a5:0f:83:
                    7b:8d:e1:2a:ab:2c:39:72:86:f5:ee:47:23:30:ca:
                    e1:ee:b2:2c:04:f5:b3:35:d0:53:f8:06:1b:bb:34:
                    5a:55:a7:90:fa:1c:28:25:38:28:85:94:73:84:76:
                    6d:7c:9f:54:d4:bc:6d:b4:12:4d:6c:04:26:e0:46:
                    8a:7c:b7:93:4e:52:8c:0e:eb:81:f4:b2:8f:bb:33:
                    31:84:cc:3c:1b:86:1a:af:e3:9c:2c:39:18:07:d1:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:3F:E8:95:83:23:44:E9:2B:D1:64:4B:35:3D:24:B7:13:60:57
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.20.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:08:aa:5c:3c:eb:e1:0d:64:bc:f6:aa:77:f5:3b:22:a0:d6:
         fa:b9:b2:b1:68:d9:7a:4f:99:16:e8:e7:12:df:aa:0f:21:f7:
         5a:2e:b2:98:70:ce:2e:63:fe:61:0a:f3:c3:54:67:61:22:3e:
         c1:40:0e:64:2c:ec:4c:de:f4:8c:e4:c6:7c:d6:a0:23:42:60:
         1f:56:8c:a4:1d:c9:6c:af:60:8a:90:e9:c1:dd:2c:ba:71:94:
         66:37:04:49:d6:c6:2e:82:ea:85:e3:66:d2:70:ce:9b:21:be:
         98:fe:51:d0:c3:bf:bb:58:77:37:f1:44:fc:38:63:0e:c7:eb:
         7e:2f:49:16:11:fc:d6:ff:e0:53:90:73:01:f5:58:5d:06:3b:
         32:47:07:72:0f:72:f7:ca:19:df:e3:ee:f1:b1:2a:f7:90:57:
         4b:51:7d:06:c3:14:71:14:0b:8a:80:b4:8a:c3:8f:e7:d3:2c:
         10:4b:d9:31:67:60:99:e0:04:39:fd:16:51:5c:43:32:e0:df:
         28:cb:a5:d6:d8:3a:77:c8:c0:a6:0d:62:66:34:2b:7c:fa:55:
         24:a3:fe:51:dd:8b:fb:f2:59:e1:1a:29:eb:8e:a1:c4:4b:72:
         03:00:f6:9f:86:71:39:ee:17:41:cd:5d:b4:9e:c5:6a:3c:f9:
         a2:6b:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:03:57 2026 by rpki-client