This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6cMY_wwfDBFZqJjsHcZukKirL_o.roa
File:                     6cMY_wwfDBFZqJjsHcZukKirL_o.roa (raw, json)
Hash identifier:          2gKcXa2cxU04e9mLa1hFcBV7zIEQPtIHwZLA+taApIM=
Subject key identifier:   E9:C3:18:FF:0C:1F:0C:11:59:A8:98:EC:1D:C6:6E:90:A8:AB:2F:FA
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       019B7C13389822C05DB5E8A8E8C3E254BCA4
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6cMY_wwfDBFZqJjsHcZukKirL_o.roa
Signing time:             Fri 02 Jan 2026 00:19:52 +0000
ROA not before:           Fri 02 Jan 2026 00:19:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49505
IP address blocks:        185.96.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 13:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:38:98:22:c0:5d:b5:e8:a8:e8:c3:e2:54:bc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Jan  2 00:19:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e9c318ff0c1f0c1159a898ec1dc66e90a8ab2ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:d8:a7:8d:f8:ff:a1:5f:12:38:72:60:a9:
                    f6:eb:9f:9b:b0:83:6e:53:be:8b:ac:0c:f4:6c:1f:
                    92:df:83:82:29:e4:6b:64:d7:36:73:4c:ec:fa:c4:
                    89:5c:a0:fb:54:12:8e:cd:7b:1e:f1:64:0a:40:7b:
                    b7:56:48:97:6c:a7:f4:86:f6:7d:6e:b6:66:17:8c:
                    1e:9d:2c:00:8a:95:78:cd:55:2e:98:2c:b3:87:3c:
                    c6:a5:4d:51:3d:6a:cd:70:5b:b9:73:a6:9d:41:55:
                    7e:eb:b3:1f:5c:ab:d2:0c:b0:69:15:cf:51:22:9a:
                    91:0a:5f:48:b2:bc:03:e7:19:fb:e0:75:73:84:c9:
                    ac:64:4f:c1:6d:9a:c7:8e:9e:96:e5:27:34:d7:4b:
                    c0:c5:10:9f:76:13:70:d7:ef:7b:d7:fd:85:70:62:
                    1c:a0:9b:15:74:06:e1:35:90:db:da:6a:8a:5a:00:
                    46:2f:72:ef:4b:77:d4:df:32:a1:ee:8e:8a:9f:4c:
                    12:f4:9b:02:b8:8e:b7:56:d0:a9:12:2f:0b:4d:9f:
                    d9:78:ec:6e:80:6b:9f:bc:d0:e6:0f:fe:52:d3:e3:
                    de:4a:93:6b:f3:c1:17:7c:23:62:46:bd:36:4a:ec:
                    38:75:2a:6a:7f:83:fe:27:99:f0:1a:fe:82:b2:ec:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C3:18:FF:0C:1F:0C:11:59:A8:98:EC:1D:C6:6E:90:A8:AB:2F:FA
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6cMY_wwfDBFZqJjsHcZukKirL_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.96.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:a1:6f:eb:73:07:88:bf:7c:10:8a:8b:91:3e:d8:74:74:
         fb:17:21:c8:37:53:8d:74:4a:9b:53:3c:67:3a:a5:61:12:88:
         d1:16:a0:11:02:d5:36:c0:5e:2d:de:5c:e3:b2:f2:73:d5:33:
         d5:9a:f7:56:9a:9c:7f:e6:43:68:81:52:d3:b6:8b:0f:df:95:
         6e:4b:3b:26:1c:15:46:a9:90:db:ee:5f:fe:cb:5a:26:1f:11:
         b2:c2:01:9e:b6:be:6f:7d:54:92:7b:5c:a3:a2:e6:90:12:f6:
         45:40:c7:2f:6a:cb:5b:c1:9e:eb:e5:23:55:39:d8:d9:b6:0d:
         3f:20:8c:30:7a:15:b5:b8:41:3b:08:6a:9f:86:b6:6c:ee:12:
         ba:82:f5:2d:5b:16:87:59:e8:7a:b7:02:93:bd:d8:e6:d1:5e:
         42:2e:1f:8b:a0:a4:60:4f:f4:68:ee:90:30:68:fa:bf:e2:fa:
         38:a8:b0:3b:a4:53:f2:13:3c:92:f4:e8:64:fa:b0:e7:32:58:
         55:5d:ff:f3:e5:ef:41:39:b8:17:ea:53:18:3f:f9:84:a1:5b:
         4e:37:44:82:59:7f:4a:27:76:14:6b:ad:be:99:a7:35:8f:47:
         e9:f4:8f:8c:b1:7d:24:04:86:37:81:c5:8b:59:33:47:75:cb:
         41:da:eb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 19:51:23 2026 by rpki-client