This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/PeY6_L-X-zspT56i1C5OrFfnugg.roa
File:                     PeY6_L-X-zspT56i1C5OrFfnugg.roa (raw, json)
Hash identifier:          6ufhim7uAO49+RCgSfwQkljsubk6/U5duEsADbT1o7c=
Subject key identifier:   3D:E6:3A:FC:BF:97:FB:3B:29:4F:9E:A2:D4:2E:4E:AC:57:E7:BA:08
Certificate issuer:       /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial:       019B7F80F2FD15E1F81411365FE106E357AA
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/PeY6_L-X-zspT56i1C5OrFfnugg.roa
Signing time:             Fri 02 Jan 2026 16:18:35 +0000
ROA not before:           Fri 02 Jan 2026 16:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     196622
IP address blocks:        195.182.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:80:f2:fd:15:e1:f8:14:11:36:5f:e1:06:e3:57:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
        Validity
            Not Before: Jan  2 16:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3de63afcbf97fb3b294f9ea2d42e4eac57e7ba08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:b0:ad:99:3d:88:26:d3:20:3d:5a:1b:f2:
                    9d:e4:50:f7:d8:7a:96:60:44:7c:ae:3a:e4:6c:31:
                    9d:90:18:59:7b:6f:7a:69:a5:af:36:b3:67:c1:43:
                    50:7b:29:3b:e7:a5:b5:3a:6c:2f:83:ad:ef:7e:a6:
                    78:bf:5a:5c:7c:44:29:bc:e5:07:b7:9a:67:35:8d:
                    58:e4:9e:38:35:43:58:66:04:50:74:ee:43:64:e9:
                    b3:a5:34:4c:9a:6d:42:09:a8:46:2a:4f:8d:8b:93:
                    48:31:5b:0d:e4:1f:11:dd:a0:ec:bb:31:47:a3:19:
                    d7:7b:4d:35:78:c2:10:26:9f:3e:fe:e7:a0:64:93:
                    2c:e2:36:63:ff:f2:f4:c4:da:14:22:db:c2:83:82:
                    ba:2b:e3:74:43:7c:cc:b0:67:01:0b:14:e6:30:85:
                    26:c0:e2:9c:b7:30:c2:bc:e3:f6:67:35:03:d9:2b:
                    70:c3:00:28:27:9e:71:e0:35:be:f3:f2:8d:aa:8d:
                    b8:93:42:52:3b:92:b2:53:72:6f:e5:b6:8f:50:e9:
                    d6:fb:06:26:3a:06:c1:fc:50:d7:08:de:2c:11:9d:
                    dd:9a:2d:d3:d6:74:dc:76:04:15:f3:d4:a5:4d:c1:
                    8b:72:8e:18:fc:98:36:bc:0b:0d:34:42:aa:4b:ea:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E6:3A:FC:BF:97:FB:3B:29:4F:9E:A2:D4:2E:4E:AC:57:E7:BA:08
            X509v3 Authority Key Identifier:
                keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/PeY6_L-X-zspT56i1C5OrFfnugg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.182.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f7:df:22:56:28:83:49:97:9e:2d:19:99:65:9f:f2:34:da:
         c9:e3:aa:7c:c4:12:85:f4:28:e1:12:74:b3:4f:ad:55:cb:f0:
         01:3a:53:33:03:24:38:aa:cd:85:b4:35:8d:a6:f3:87:86:df:
         8e:af:86:57:d1:54:81:8e:e0:16:6d:b2:df:d7:ad:3b:ff:80:
         ca:7d:80:7b:d0:b7:06:10:d5:c9:fd:2f:76:3e:64:a1:56:0b:
         24:7d:2a:3c:61:d6:97:47:4c:bf:34:13:04:12:22:81:b0:ea:
         57:4a:e6:34:ab:ed:ff:b9:8c:e0:c8:37:7f:c9:96:93:db:54:
         a3:eb:33:24:11:8b:de:ee:15:e7:a4:25:4d:3d:64:84:2e:b1:
         cc:28:03:c9:f3:49:ac:b7:d1:ab:ee:c2:c9:29:01:c4:a1:77:
         a0:f7:db:e5:5e:23:11:fb:58:d2:a9:c7:09:a3:12:9f:b9:ad:
         fe:99:9a:65:4c:fe:55:f0:23:fe:ea:1a:42:50:4d:02:4a:6c:
         72:f8:2f:03:90:21:84:b5:fc:22:1f:d0:0b:20:be:8f:99:0e:
         30:04:c2:e1:72:1f:4b:94:d1:63:11:c4:9c:fa:be:a9:39:fa:
         21:71:8b:9c:bd:2e:23:f3:fe:df:9a:c8:27:74:f7:9f:e1:59:
         51:90:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:25 2026 by rpki-client