This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/a0VxDk-12ojN32mGmE9YgKyVXaE.roa
File:                     a0VxDk-12ojN32mGmE9YgKyVXaE.roa (raw, json)
Hash identifier:          mjaYNn5zk+eh9DjY8X5ljWMIGk5oy1MkazJ8lroyak0=
Subject key identifier:   6B:45:71:0E:4F:B5:DA:88:CD:DF:69:86:98:4F:58:80:AC:95:5D:A1
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A261D76E530A3F77A06D69D9DEF3CD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/a0VxDk-12ojN32mGmE9YgKyVXaE.roa
Signing time:             Thu 01 Jan 2026 08:17:46 +0000
ROA not before:           Thu 01 Jan 2026 08:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     274365
IP address blocks:        212.134.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:61:d7:6e:53:0a:3f:77:a0:6d:69:d9:de:f3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b45710e4fb5da88cddf6986984f5880ac955da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:31:f0:df:c8:70:de:ce:48:98:ca:91:51:
                    a5:21:84:7c:50:73:b2:ff:ed:94:4a:68:f3:ea:2c:
                    23:97:59:15:29:53:e6:01:1d:f2:21:c0:af:35:36:
                    a9:73:31:02:df:68:c2:0b:72:0d:64:c4:4e:e5:be:
                    17:e2:96:92:57:f3:37:99:86:e3:c1:f7:db:b8:4c:
                    95:01:f1:6e:62:19:f6:b1:46:68:9d:25:ee:0e:53:
                    bf:0f:89:9f:77:21:e2:04:34:80:9c:2e:d3:86:cd:
                    b6:38:38:76:23:ad:89:1a:28:ee:2c:ed:fb:8a:ff:
                    23:55:86:05:77:00:b5:77:ba:70:c5:2e:dc:2c:ca:
                    a5:f0:52:32:b1:77:5a:36:5d:3f:5a:39:83:8e:00:
                    07:3b:07:c5:8e:4c:7b:43:70:63:4f:fc:23:71:82:
                    00:e3:29:fd:76:65:31:ea:7c:eb:27:90:b9:f2:74:
                    da:45:74:a5:e0:41:50:cf:9a:18:08:7c:bf:57:f5:
                    a0:1b:9f:38:1d:8a:d1:ee:11:cb:74:3f:50:22:8e:
                    a6:6c:19:c3:34:a4:3c:58:1e:70:6a:12:6d:2b:0a:
                    b0:5a:c1:01:1b:e5:9e:58:30:43:98:f5:ea:23:68:
                    9d:bd:fa:03:d4:90:86:df:44:3a:f7:b6:c4:ab:60:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:45:71:0E:4F:B5:DA:88:CD:DF:69:86:98:4F:58:80:AC:95:5D:A1
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/a0VxDk-12ojN32mGmE9YgKyVXaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.134.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:13:68:7f:33:71:f1:6d:52:c5:fd:c0:6b:38:8c:dc:0c:00:
         00:43:a8:30:72:2b:3b:b6:ff:14:c4:6c:be:93:cb:11:ee:df:
         f2:f5:18:dc:3a:7c:08:f1:90:56:82:d1:58:a2:d3:d0:1a:8b:
         c4:42:97:d2:ad:be:a5:cf:af:2b:82:c8:e6:89:25:bc:62:71:
         b5:c4:39:1a:0b:f6:db:06:39:27:38:94:2a:12:53:20:a5:67:
         36:f0:0e:e4:be:8f:72:30:60:76:ee:71:cb:f7:55:2f:d0:26:
         75:4f:cd:4f:68:de:6f:db:ce:bf:d4:a0:57:5a:15:8e:5d:95:
         89:c9:b1:9f:5a:46:9a:a5:65:2d:70:8b:57:61:29:11:fe:fd:
         23:7e:02:f8:5e:53:54:59:fd:33:d6:33:47:ab:6a:2f:b6:a3:
         a1:35:79:d2:60:5e:53:08:f9:87:d0:c8:37:22:7f:ac:d1:64:
         60:29:73:cd:aa:c3:00:83:12:39:97:a7:cb:a4:db:9c:6c:e2:
         13:81:92:c0:e2:80:8a:70:7d:c2:78:2e:d3:e0:5b:b5:c5:30:
         65:90:ff:a7:c7:d0:17:7e:51:dd:a2:4a:65:5b:69:ab:a7:2c:
         02:6c:81:3c:a1:fa:f2:22:7a:e3:04:36:32:00:ce:6d:25:02:
         b6:0a:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:16:31 2026 by rpki-client