This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/6nMsA_xUpuCFDGYtYz3r3atYr7c.roa
File:                     6nMsA_xUpuCFDGYtYz3r3atYr7c.roa (raw, json)
Hash identifier:          5xhxZY3l8vh+OQoRwP7CZrXB/6FnoTUWWdQKmwbVPWE=
Subject key identifier:   EA:73:2C:03:FC:54:A6:E0:85:0C:66:2D:63:3D:EB:DD:AB:58:AF:B7
Certificate issuer:       /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial:       019B7C809B5493456016CD618D57824823F4
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/6nMsA_xUpuCFDGYtYz3r3atYr7c.roa
Signing time:             Fri 02 Jan 2026 02:19:21 +0000
ROA not before:           Fri 02 Jan 2026 02:19:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214872
IP address blocks:        193.104.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:9b:54:93:45:60:16:cd:61:8d:57:82:48:23:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
        Validity
            Not Before: Jan  2 02:19:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea732c03fc54a6e0850c662d633debddab58afb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:b3:75:0a:fa:3f:21:35:c1:f0:6f:c9:0c:
                    b3:a2:c7:43:e7:b7:cf:64:52:7a:0b:8f:18:54:e4:
                    5e:a2:dd:19:da:80:2c:ab:81:43:c0:63:b6:f5:f8:
                    f9:bd:e4:ec:50:e3:a9:44:0a:f0:15:83:e9:b9:4b:
                    a2:14:1d:89:e0:4c:3c:95:61:4d:3a:71:dd:4a:4c:
                    13:16:30:7b:37:dd:44:3f:b8:90:7e:71:57:56:cd:
                    cc:44:ef:fc:91:99:bb:52:dd:1d:c6:8e:2a:49:9f:
                    f6:d7:68:e2:b1:f9:2d:11:06:4c:b6:13:27:48:d6:
                    55:dc:ae:2e:dc:69:07:2e:d8:c3:3e:fa:4c:62:bf:
                    7a:c1:6f:17:ed:09:44:ac:64:65:af:26:b0:03:a2:
                    b4:9c:41:be:5f:35:d6:a8:e0:c9:57:99:1f:1a:64:
                    df:38:a0:ec:30:bc:58:16:aa:44:e8:df:d3:c3:3b:
                    29:e5:d3:5c:ec:d0:29:c6:46:a5:4e:89:ce:29:ab:
                    60:2f:4d:70:f0:ba:f4:35:89:ba:df:03:9a:d1:99:
                    84:84:02:0e:e5:2b:ff:af:6b:f8:25:63:85:85:2b:
                    d2:db:89:06:5b:35:93:81:45:84:72:f9:b8:62:31:
                    1e:34:69:de:77:63:42:9a:1b:d0:c0:14:bd:05:49:
                    e0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:73:2C:03:FC:54:A6:E0:85:0C:66:2D:63:3D:EB:DD:AB:58:AF:B7
            X509v3 Authority Key Identifier:
                keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/6nMsA_xUpuCFDGYtYz3r3atYr7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:f3:ea:94:16:3f:62:4b:5d:35:ae:16:25:e5:4c:8c:4e:af:
         f5:be:4a:ce:f6:cb:04:36:b7:53:12:c1:97:93:cc:98:9d:ca:
         9b:d6:a3:f3:59:47:42:b8:1b:53:27:e6:df:67:d5:43:ea:50:
         67:99:cb:f1:c4:ca:71:e7:60:1e:a0:7f:a8:72:fc:8b:31:e1:
         f4:7c:8f:bf:09:2b:85:24:03:9d:f8:91:9d:36:51:c0:16:36:
         9d:fa:67:18:80:b9:0d:9c:ac:2e:c4:5e:59:a4:47:7b:ee:e9:
         e7:49:7b:a1:71:b4:06:0e:01:b7:1f:35:5d:a5:02:93:ff:3e:
         d7:3a:f2:a7:0b:10:06:7b:88:a1:e4:22:ae:5e:54:ff:53:a9:
         c3:15:d7:4f:b7:98:88:5a:88:2c:71:2c:98:4e:ce:8a:b6:22:
         86:a8:6a:53:02:65:11:ee:bf:02:c5:a2:7b:56:d7:6b:a9:28:
         5e:03:f3:bf:e0:d9:53:e3:a0:8e:76:cd:4c:e3:e3:3f:48:93:
         51:ff:d6:0b:78:4f:71:fd:7f:83:ce:98:99:a7:40:e4:6a:da:
         a0:ba:3d:6f:a8:cf:fa:f6:db:69:17:16:8a:94:3f:2c:d8:fa:
         5a:62:a2:d4:a0:6a:3b:c3:07:f0:3d:46:10:5e:d8:2f:38:48:
         1f:56:36:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gJtUk0VgFs1hjVeCSCP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjJhZDYwOTcyOWY4ZWYxMTEyYWRiYzE1OGY1MTEyMTVi
MGYzOWUwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTczMmMwM2ZjNTRhNmUwODUwYzY2MmQ2MzNkZWJkZGFiNThhZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9mzdQr6PyE1wfBvyQyzosdD57fP
ZFJ6C48YVOReot0Z2oAsq4FDwGO29fj5veTsUOOpRArwFYPpuUuiFB2J4Ew8lWFN
OnHdSkwTFjB7N91EP7iQfnFXVs3MRO/8kZm7Ut0dxo4qSZ/212jisfktEQZMthMn
SNZV3K4u3GkHLtjDPvpMYr96wW8X7QlErGRlryawA6K0nEG+XzXWqODJV5kfGmTf
OKDsMLxYFqpE6N/Twzsp5dNc7NApxkalTonOKatgL01w8Lr0NYm63wOa0ZmEhAIO
5Sv/r2v4JWOFhSvS24kGWzWTgUWEcvm4YjEeNGned2NCmhvQwBS9BUng4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpzLAP8VKbghQxmLWM9692rWK+3MB8GA1UdIwQY
MBaAFAoirWCXKfjvERKtvBWPURIVsPOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEt
ZTVkOWE2ZTQ4NzQ2LzEvNm5Nc0FfeFVwdUNGREdZdFl6M3IzYXRZcjdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82Y2E5ODAtMmNlMS00YjdjLTgzMjEtZTVkOWE2ZTQ4NzQ2
LzEvQ2lLdFlKY3AtTzhSRXEyOEZZOVJFaFd3ODU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgLMA0G
CSqGSIb3DQEBCwUAA4IBAQC08+qUFj9iS101rhYl5UyMTq/1vkrO9ssENrdTEsGX
k8yYncqb1qPzWUdCuBtTJ+bfZ9VD6lBnmcvxxMpx52AeoH+ocvyLMeH0fI+/CSuF
JAOd+JGdNlHAFjad+mcYgLkNnKwuxF5ZpEd77unnSXuhcbQGDgG3HzVdpQKT/z7X
OvKnCxAGe4ih5CKuXlT/U6nDFddPt5iIWogscSyYTs6KtiKGqGpTAmUR7r8CxaJ7
VtdrqSheA/O/4NlT46COds1M4+M/SJNR/9YLeE9x/X+DzpiZp0Dkatqguj1vqM/6
9ttpFxaKlD8s2PpaYqLUoGo7wwfwPUYQXtgvOEgfVjbK
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:24:10 2026 by rpki-client