This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/v6NCL36o2yiu74hS5oP_Y21UJFI.roa
File:                     v6NCL36o2yiu74hS5oP_Y21UJFI.roa (raw, json)
Hash identifier:          4AZCTUUFRYmRNZlDO/OXafeRu6VtUSZJwk5joyBm/Nc=
Subject key identifier:   BF:A3:42:2F:7E:A8:DB:28:AE:EF:88:52:E6:83:FF:63:6D:54:24:52
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A26025B18CA2B1DC77E26673C5B998
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/v6NCL36o2yiu74hS5oP_Y21UJFI.roa
Signing time:             Thu 01 Jan 2026 08:17:45 +0000
ROA not before:           Thu 01 Jan 2026 08:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214413
IP address blocks:        195.40.72.0/22 maxlen: 24
                          195.40.76.0/23 maxlen: 24
                          195.40.82.0/23 maxlen: 24
                          195.40.94.0/23 maxlen: 24
                          195.40.176.0/22 maxlen: 24
                          195.40.182.0/23 maxlen: 24
                          212.134.8.0/23 maxlen: 24
                          212.134.12.0/22 maxlen: 24
                          212.134.66.0/23 maxlen: 24
                          212.134.68.0/22 maxlen: 24
                          212.135.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:60:25:b1:8c:a2:b1:dc:77:e2:66:73:c5:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bfa3422f7ea8db28aeef8852e683ff636d542452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0c:51:77:84:e8:ac:e3:6f:40:42:5d:73:39:
                    a7:3a:3d:78:cf:b3:08:8f:d7:27:92:ae:34:c4:35:
                    db:cc:8f:09:fa:ba:4e:e7:cd:70:29:ae:44:75:83:
                    52:80:a3:4c:95:0b:54:cf:19:8a:b5:a7:c7:63:fb:
                    d0:ce:fb:12:ad:92:8c:02:77:2b:df:be:f2:38:98:
                    5e:bf:15:87:86:2f:29:3e:17:80:7e:d6:01:0d:fc:
                    81:dd:2d:d7:76:bd:1b:3d:40:3c:3a:29:5a:8f:67:
                    7c:0d:0f:8e:39:61:d0:70:84:b6:5b:fa:ef:ac:31:
                    83:e3:7f:e2:64:70:1b:ae:eb:5e:54:dc:e3:76:a7:
                    bb:94:de:55:d7:4a:06:f9:2e:d2:74:e5:92:50:c7:
                    c8:13:d2:0e:e1:5b:e0:23:c7:a9:ab:f5:0a:c7:b2:
                    03:47:44:36:a2:80:65:2c:90:e1:af:3c:43:eb:4d:
                    f6:f0:bc:a1:2f:de:9c:98:2d:d1:ea:c8:78:59:64:
                    36:ca:b5:57:8c:d8:90:69:39:3f:2c:89:a4:f5:dd:
                    b6:13:e1:57:d5:fe:74:79:f3:08:56:1a:27:b9:54:
                    1a:47:52:6c:6b:0a:ae:70:81:92:ca:e5:16:9f:29:
                    97:1d:92:44:1b:2b:41:98:9b:67:23:d4:c0:c7:fb:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A3:42:2F:7E:A8:DB:28:AE:EF:88:52:E6:83:FF:63:6D:54:24:52
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/v6NCL36o2yiu74hS5oP_Y21UJFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.40.72.0-195.40.77.255
                  195.40.82.0/23
                  195.40.94.0/23
                  195.40.176.0/22
                  195.40.182.0/23
                  212.134.8.0/23
                  212.134.12.0/22
                  212.134.66.0-212.134.71.255
                  212.135.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:4a:02:d9:fc:eb:80:c1:2a:12:6a:0f:50:9b:b3:8b:b1:39:
         81:a2:50:f3:d3:ec:fa:29:27:90:a4:39:67:58:1e:fa:c6:81:
         55:c9:9f:50:e3:5a:6a:a1:91:10:08:2d:a6:82:60:05:78:29:
         cd:6f:16:15:82:50:98:8c:2b:77:57:4f:28:04:b9:c9:2f:bb:
         20:4a:46:1c:68:af:7a:b2:cd:ec:6a:4f:e2:b9:bc:c6:e6:03:
         bb:bb:1d:e4:f1:13:5f:58:f6:29:c2:d8:f3:d6:aa:f6:42:47:
         3c:cf:4e:0c:4b:3f:f5:3c:35:bd:08:d1:12:76:74:55:1f:9c:
         0a:4e:85:9a:25:df:a7:ff:08:17:6f:dc:02:e1:62:cf:c5:a4:
         2f:d0:b0:fc:ad:db:e6:64:4b:cd:bb:47:14:b5:60:15:69:e3:
         fc:01:16:b9:33:7e:6f:fb:40:15:73:fd:99:c6:61:49:a2:14:
         3e:41:99:39:2c:11:96:ab:86:45:10:f2:f1:4f:17:00:79:a9:
         97:1d:03:c4:1b:32:a5:b2:30:9b:70:b6:f2:d3:c6:1c:fa:60:
         20:39:27:4e:75:73:0c:d9:94:16:03:02:2c:e5:24:25:10:0c:
         75:60:0f:4a:50:6e:5e:33:6a:ad:aa:06:e6:cc:88:72:4f:4f:
         ef:5f:8f:1a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZt4omAlsYyisdx34mZzxbmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmEzNDIyZjdlYThkYjI4YWVlZjg4NTJlNjgzZmY2MzZkNTQyNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gxRd4TorONvQEJdczmnOj14z7MI
j9cnkq40xDXbzI8J+rpO581wKa5EdYNSgKNMlQtUzxmKtafHY/vQzvsSrZKMAncr
377yOJhevxWHhi8pPheAftYBDfyB3S3Xdr0bPUA8Oilaj2d8DQ+OOWHQcIS2W/rv
rDGD43/iZHAbruteVNzjdqe7lN5V10oG+S7SdOWSUMfIE9IO4VvgI8epq/UKx7ID
R0Q2ooBlLJDhrzxD60328LyhL96cmC3R6sh4WWQ2yrVXjNiQaTk/LImk9d22E+FX
1f50efMIVhonuVQaR1JsawqucIGSyuUWnymXHZJEGytBmJtnI9TAx/shoQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFL+jQi9+qNsoru+IUuaD/2NtVCRSMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvdjZOQ0wzNm8yeWl1NzRoUzVvUF9ZMjFVSkZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGMAwDBAPDKEgD
BAHDKEwDBAHDKFIDBAHDKF4DBALDKLADBAHDKLYDBAHUhggDBALUhgwwDAMEAdSG
QgMEA9SGQAMEAtSH3DANBgkqhkiG9w0BAQsFAAOCAQEAHEoC2fzrgMEqEmoPUJuz
i7E5gaJQ89Ps+iknkKQ5Z1ge+saBVcmfUONaaqGREAgtpoJgBXgpzW8WFYJQmIwr
d1dPKAS5yS+7IEpGHGiverLN7GpP4rm8xuYDu7sd5PETX1j2KcLY89aq9kJHPM9O
DEs/9Tw1vQjREnZ0VR+cCk6FmiXfp/8IF2/cAuFiz8WkL9Cw/K3b5mRLzbtHFLVg
FWnj/AEWuTN+b/tAFXP9mcZhSaIUPkGZOSwRlquGRRDy8U8XAHmplx0DxBsypbIw
m3C28tPGHPpgIDknTnVzDNmUFgMCLOUkJRAMdWAPSlBuXjNqraoG5syIck9P71+P
Gg==
-----END CERTIFICATE-----
Generated at Mon Jan 19 08:16:32 2026 by rpki-client