This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/xJ6-vf7Cu_EYmxSRDxKEyTZA2C4.roa
File:                     xJ6-vf7Cu_EYmxSRDxKEyTZA2C4.roa (raw, json)
Hash identifier:          1YoX58ZefTtFX3+XWJhCdTPpLJ5zr3exgVffIofs4kE=
Subject key identifier:   C4:9E:BE:BD:FE:C2:BB:F1:18:9B:14:91:0F:12:84:C9:36:40:D8:2E
Certificate issuer:       /CN=acfbbca852b957385909f6bd288cdf363f218b06
Certificate serial:       019B76EAF19382D93FB9147291EA8D92587F
Authority key identifier: AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/xJ6-vf7Cu_EYmxSRDxKEyTZA2C4.roa
Signing time:             Thu 01 Jan 2026 00:17:47 +0000
ROA not before:           Thu 01 Jan 2026 00:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203901
IP address blocks:        185.101.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:f1:93:82:d9:3f:b9:14:72:91:ea:8d:92:58:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfbbca852b957385909f6bd288cdf363f218b06
        Validity
            Not Before: Jan  1 00:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c49ebebdfec2bbf1189b14910f1284c93640d82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:ed:80:3a:ce:72:c3:7f:ee:09:31:ce:d8:
                    26:ad:50:aa:4b:2f:0f:b6:96:06:d7:ae:df:23:2c:
                    76:97:6c:49:84:52:ae:a2:6d:d8:6e:5c:c3:30:a8:
                    32:76:ea:b5:5f:2d:57:d6:58:4f:58:3c:b8:fc:6f:
                    c2:83:4a:d1:b1:8c:8c:a4:b1:6a:5e:a6:cc:a3:18:
                    d2:d4:2b:1d:d7:9f:72:87:40:f8:1f:98:8d:99:eb:
                    55:b6:98:65:49:23:08:d5:35:40:40:ab:57:ae:fc:
                    83:67:88:92:86:90:e3:ed:71:d0:8c:82:f2:b5:6b:
                    49:9d:c6:b3:88:63:47:eb:10:bf:7e:1e:51:c9:b5:
                    91:8a:f1:6a:e7:a3:aa:f7:5d:3d:44:57:8b:d3:f8:
                    c0:37:3d:70:95:84:3a:24:3b:e6:a3:e8:f9:e9:a1:
                    5f:3d:20:52:db:b7:e2:20:69:28:ca:44:a6:af:ec:
                    c8:0d:56:50:e0:3f:12:ca:c1:b8:71:34:f4:30:ae:
                    b2:01:28:3b:19:d1:3e:5f:b4:e9:ed:73:27:42:b8:
                    4d:c3:d9:9b:0f:27:4d:6a:c7:8c:04:9f:ab:b4:9a:
                    d7:39:78:a9:c7:57:0f:e9:6b:8e:df:a8:0b:0b:32:
                    49:d1:f2:e8:14:e7:e2:a1:16:02:c8:fb:77:87:8a:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9E:BE:BD:FE:C2:BB:F1:18:9B:14:91:0F:12:84:C9:36:40:D8:2E
            X509v3 Authority Key Identifier:
                keyid:AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/xJ6-vf7Cu_EYmxSRDxKEyTZA2C4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.101.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:15:3b:8c:73:c9:fc:78:26:2e:40:65:19:a5:0f:fd:4a:d5:
         90:5e:fc:a2:95:ef:90:f3:79:5f:bb:08:24:af:7b:fc:ed:11:
         83:95:08:5f:12:e9:e2:c7:f9:7d:53:37:85:f9:73:b9:d8:42:
         4f:cb:b7:2f:44:1f:db:3a:71:c9:57:4b:e1:df:45:cd:6a:b8:
         fb:3c:fa:b8:fa:72:9c:b0:c8:58:b9:59:69:dd:a9:87:bf:41:
         4a:e1:96:14:e8:e0:29:23:4e:25:1b:87:e9:bb:6f:69:e5:20:
         24:28:e4:fb:32:dd:44:74:c5:12:ea:c9:64:92:1f:36:a9:ef:
         f4:64:77:d6:b3:67:8b:3f:f9:b9:10:58:14:ff:89:4a:8c:f9:
         28:0d:ae:01:0e:ee:b6:21:df:6b:cf:14:34:7f:cb:29:01:e5:
         d4:e3:80:bb:89:13:0b:e4:57:21:a0:6b:84:04:f8:ce:94:ab:
         40:c8:ba:4b:db:67:f8:8c:3a:b5:d3:3c:8a:d2:8c:e4:3a:ad:
         1a:3b:46:91:b2:04:ab:0e:4a:49:3a:08:6c:ff:82:62:b2:0f:
         72:5c:cb:da:51:51:06:e0:5a:fc:db:7d:15:0a:7b:32:a7:19:
         b8:68:a7:35:45:f8:65:a2:e2:10:89:d8:3a:f6:b6:10:b4:12:
         a8:d4:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:57:53 2026 by rpki-client