This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/N6GA_twxHmjdwFT89D6kPmB6M84.roa
File:                     N6GA_twxHmjdwFT89D6kPmB6M84.roa (raw, json)
Hash identifier:          HpTEXbQEP7qsUUI+IlQF0S5sDdY41Y3dm7Oo/z0Q0Jo=
Subject key identifier:   37:A1:80:FE:DC:31:1E:68:DD:C0:54:FC:F4:3E:A4:3E:60:7A:33:CE
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       019B78A21C74CA8ADCE9CF31FBBCF9961E25
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/N6GA_twxHmjdwFT89D6kPmB6M84.roa
Signing time:             Thu 01 Jan 2026 08:17:28 +0000
ROA not before:           Thu 01 Jan 2026 08:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215434
IP address blocks:        2001:3186::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:1c:74:ca:8a:dc:e9:cf:31:fb:bc:f9:96:1e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Jan  1 08:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37a180fedc311e68ddc054fcf43ea43e607a33ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:19:5e:ac:dd:4f:b9:65:29:88:87:01:38:
                    14:fb:5a:59:a9:60:71:54:d5:2a:91:39:3f:10:23:
                    70:bb:db:7f:50:b7:27:b7:f2:bd:9b:f2:c9:e9:5d:
                    2d:26:fc:07:f8:61:a2:e8:b9:64:0f:ac:45:f5:04:
                    92:f5:8e:c1:57:42:02:8c:43:29:48:bb:58:c1:f6:
                    f7:2f:84:bc:5e:1e:33:ed:d3:3e:33:24:9d:7b:a8:
                    b7:a7:22:e0:ca:65:57:fb:54:97:61:e6:fe:49:38:
                    50:ad:9b:bf:55:b7:70:21:ac:5a:c6:20:29:ce:18:
                    69:1e:83:b7:65:56:7b:ab:32:76:9f:ad:86:29:f2:
                    2d:5b:8b:02:a7:19:0c:4f:0f:3d:17:90:b2:c0:57:
                    1b:22:5e:df:a8:74:03:e0:4f:1a:bf:5a:86:2f:6a:
                    1a:6c:49:d5:8f:9e:60:cb:c6:40:b1:19:34:07:a9:
                    1d:85:d2:56:f6:dd:8b:60:a5:38:c5:3d:ed:66:dd:
                    94:77:2b:c0:8e:f0:7e:22:5b:cd:a1:c3:73:a6:94:
                    d1:19:c4:9f:92:bd:b0:c2:25:b9:68:b1:36:a2:a0:
                    fc:86:51:18:5b:e3:d0:64:4a:71:00:58:64:0d:2e:
                    e7:64:1a:0b:c2:12:bb:26:b8:a0:eb:27:81:fc:dd:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A1:80:FE:DC:31:1E:68:DD:C0:54:FC:F4:3E:A4:3E:60:7A:33:CE
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/N6GA_twxHmjdwFT89D6kPmB6M84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3186::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:c6:96:ef:c9:65:93:a8:33:39:09:d0:34:e5:ab:69:fb:0d:
         da:15:68:62:d9:d7:ee:ef:7c:48:a7:53:17:fa:fc:35:d3:e3:
         d9:a1:eb:2b:48:b4:00:af:7f:51:8e:49:06:f4:7e:90:d0:4d:
         44:02:f2:c2:69:3d:fa:dd:c5:91:24:2a:a2:5a:0a:39:23:84:
         8e:a3:6b:c6:57:e9:28:73:86:12:a3:71:cc:5c:83:15:24:f9:
         75:2e:c8:37:09:b6:cd:7b:36:bc:2f:fe:94:3a:75:91:92:7d:
         f9:f4:57:04:d3:ce:54:52:24:f5:20:b8:67:3d:c2:7f:a7:9f:
         93:fe:e0:7b:2a:1e:4d:c1:0d:8d:15:f9:33:c2:48:b8:63:c0:
         d3:29:c2:ec:9c:ec:bf:0f:25:0b:81:24:3f:9e:47:10:e8:ed:
         24:34:86:8f:e2:3a:5d:3a:b8:3b:a6:1f:dd:23:b6:d2:db:e3:
         76:16:32:63:47:90:4e:bd:e5:7f:00:24:1b:0e:a7:28:84:b8:
         97:eb:d7:77:53:48:0b:3e:6f:e2:9f:0b:18:a7:f3:f2:84:9d:
         34:d5:5b:0e:2f:6e:1e:2d:cb:31:e6:c9:a8:33:c8:65:3d:b3:
         ca:80:ed:b3:73:14:3b:9b:41:8e:d8:54:94:78:92:0d:d1:06:
         dd:12:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:21:45 2026 by rpki-client