This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/6MDHWzF5H-Od8DONT_Ifwk7iJ6Y.roa
File:                     6MDHWzF5H-Od8DONT_Ifwk7iJ6Y.roa (raw, json)
Hash identifier:          Ee0DlgRuUV1WD66xgP4nuWzTz+9zaw/a3ltY55J5D/I=
Subject key identifier:   E8:C0:C7:5B:31:79:1F:E3:9D:F0:33:8D:4F:F2:1F:C2:4E:E2:27:A6
Certificate issuer:       /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial:       019B797E7C81274475BA0476390936397F81
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/6MDHWzF5H-Od8DONT_Ifwk7iJ6Y.roa
Signing time:             Thu 01 Jan 2026 12:18:11 +0000
ROA not before:           Thu 01 Jan 2026 12:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34968
IP address blocks:        193.169.26.0/23 maxlen: 23
                          193.169.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:7c:81:27:44:75:ba:04:76:39:09:36:39:7f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
        Validity
            Not Before: Jan  1 12:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8c0c75b31791fe39df0338d4ff21fc24ee227a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:5b:3d:7b:9f:6f:f0:c4:aa:3e:0c:52:a8:
                    6d:25:f9:87:de:03:6a:a3:62:1f:06:5e:6d:fd:df:
                    d3:28:3d:23:a8:bf:5a:03:f6:8c:87:15:cf:d0:f3:
                    68:b0:70:c6:13:0c:96:5d:76:8e:84:d2:26:17:a4:
                    1d:f6:e8:60:08:62:f8:cc:51:dd:db:ca:c5:9c:3d:
                    1c:57:9a:b4:51:12:05:37:c2:89:6b:ba:05:b3:fb:
                    59:53:02:39:c6:9f:4a:b8:2b:13:02:ba:00:39:3c:
                    7b:26:e0:51:fe:c4:79:28:a4:57:79:1b:57:6a:ed:
                    d8:19:12:e7:be:f2:16:c9:b6:0b:9d:e6:0e:3d:30:
                    27:d5:6b:d7:68:1b:c2:73:96:93:b9:d6:9e:b4:5d:
                    c5:60:9a:e0:e0:28:84:94:fb:55:07:50:1b:93:9a:
                    fb:29:d9:67:37:f2:de:8e:21:48:41:d3:7f:0a:de:
                    62:d9:32:58:85:da:67:f6:d0:d1:cf:e9:59:80:3c:
                    3b:1d:67:ae:00:5f:bc:16:15:58:4d:c3:8f:14:a5:
                    16:4f:b5:59:64:93:90:75:e4:e1:78:e1:cd:b7:79:
                    3f:c0:cb:ea:35:e9:5f:1a:ac:ac:e9:de:a6:d1:a4:
                    13:3a:fb:26:09:dc:cc:63:21:89:3c:32:35:2e:fe:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C0:C7:5B:31:79:1F:E3:9D:F0:33:8D:4F:F2:1F:C2:4E:E2:27:A6
            X509v3 Authority Key Identifier:
                keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/6MDHWzF5H-Od8DONT_Ifwk7iJ6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.26.0/23
                  193.169.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:19:a3:ac:70:44:f5:ef:18:7d:f1:14:e6:ed:11:24:7f:ea:
         6f:71:b3:da:65:6e:d2:bd:17:5a:17:6a:82:11:e6:b4:c3:fc:
         0f:c4:1a:ff:ad:09:ac:27:37:36:b4:be:be:70:08:f1:ce:e5:
         45:da:99:7f:8a:52:b0:43:f8:99:0f:e1:05:14:8d:0d:d2:10:
         c0:46:16:05:42:b4:6b:9e:3b:e1:4e:68:40:e6:79:ca:c7:73:
         b5:b6:38:a8:f6:3c:5b:da:08:df:31:41:3c:eb:ef:a7:f2:17:
         fb:05:61:99:54:6d:3c:53:bd:2a:e6:7e:c6:4c:5b:f4:66:e9:
         56:1f:15:6b:e4:96:f5:18:0f:0b:30:8e:8e:aa:b0:ce:ee:7a:
         75:6b:da:ef:05:9e:ca:11:34:1e:e2:83:dc:5b:95:77:86:14:
         88:11:73:fe:92:8a:36:df:25:5b:29:43:96:8c:f0:1f:e5:a2:
         75:90:4b:92:dd:c9:4b:97:45:bb:bf:12:1b:a2:72:23:21:83:
         67:d2:5b:95:ef:a8:4a:2b:b3:c5:c4:08:62:15:ce:eb:3f:8c:
         99:f6:b9:1c:ca:5f:16:d2:73:ef:a6:95:7e:89:9f:67:79:b7:
         ab:b0:b1:00:ae:57:47:73:89:4d:5c:d8:c2:fd:2b:f6:89:4e:
         40:d1:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:11 2026 by rpki-client