This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6uZI7sGdvFAft0XgB5HpOZQxJis.roa
File:                     6uZI7sGdvFAft0XgB5HpOZQxJis.roa (raw, json)
Hash identifier:          89qLo1TDpylwT+aZmygqq402blWS69xiJLg54tG/5nU=
Subject key identifier:   EA:E6:48:EE:C1:9D:BC:50:1F:B7:45:E0:07:91:E9:39:94:31:26:2B
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       019B791084E2A3B14A02A2F152A07FFE19F9
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6uZI7sGdvFAft0XgB5HpOZQxJis.roa
Signing time:             Thu 01 Jan 2026 10:18:04 +0000
ROA not before:           Thu 01 Jan 2026 10:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     40676
IP address blocks:        2a12:bec0:161::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:84:e2:a3:b1:4a:02:a2:f1:52:a0:7f:fe:19:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Jan  1 10:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eae648eec19dbc501fb745e00791e9399431262b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:0b:5d:17:fc:e0:91:35:1f:c8:0b:22:74:
                    1c:8f:20:06:16:86:66:5a:2f:e0:64:2b:d8:98:18:
                    13:a1:b5:66:5c:8d:75:a7:07:27:ce:49:48:91:07:
                    03:47:35:ee:d8:c5:86:5a:90:16:02:3a:97:5c:0d:
                    59:db:39:45:dd:79:36:3f:96:4f:e7:83:45:a0:b7:
                    95:ac:c0:81:9d:fe:9e:07:fa:eb:5d:51:15:91:de:
                    52:af:8f:dd:ed:a3:59:23:4b:72:a8:09:47:8f:97:
                    9d:0e:97:43:c0:2c:02:dc:cc:03:e8:78:76:d7:c9:
                    7e:41:df:ee:7c:61:66:5d:b5:87:47:c2:a8:5f:f3:
                    3b:3f:35:1e:2f:2c:d7:1b:d9:dc:ef:71:54:a5:e5:
                    2f:31:ba:1f:07:3e:a8:c4:02:b4:57:6e:31:5c:49:
                    74:ca:8e:be:f6:72:c0:7a:d0:e0:08:28:9f:28:c6:
                    36:fd:e4:15:25:9c:fc:04:26:80:f9:b5:d2:da:c3:
                    31:4e:c5:25:43:02:bb:8e:ad:8f:92:cb:da:c2:90:
                    ff:02:b1:4a:c9:85:78:14:05:bb:44:35:88:5d:5d:
                    38:5a:e5:a8:e6:89:e1:4b:41:73:0c:80:12:e1:38:
                    51:b1:f0:ff:40:cc:71:c2:da:88:96:ab:ee:f5:91:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:48:EE:C1:9D:BC:50:1F:B7:45:E0:07:91:E9:39:94:31:26:2B
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6uZI7sGdvFAft0XgB5HpOZQxJis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec0:161::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:4e:fc:5a:50:e9:ff:ff:61:d5:1c:85:ba:a1:92:e4:2c:0d:
         2a:e5:00:62:49:e1:6d:0a:6f:61:c0:59:3e:4b:8a:1a:e3:4f:
         04:23:9f:8b:7f:9d:cf:f2:04:ea:12:d6:31:94:ae:f3:c7:84:
         d4:8d:a6:bb:a0:e1:fd:1c:11:d3:f8:eb:f9:0c:56:20:48:8a:
         06:49:b4:62:24:25:8b:74:73:f2:79:a6:35:24:96:5f:f4:86:
         df:1b:01:68:ae:c3:f4:f7:72:8f:24:ec:0e:93:d9:d2:78:a9:
         7f:59:26:1d:8f:45:ad:56:45:c1:8c:35:f2:9a:fb:01:9b:b4:
         d5:8f:59:61:31:26:55:3b:6b:c6:b5:f7:af:74:92:80:f7:a2:
         88:3a:f2:8b:0f:40:7f:44:ff:15:4b:e4:45:84:63:3c:0b:d0:
         bf:5b:4f:ee:09:89:79:06:07:99:d6:c9:65:ea:1c:a7:f6:77:
         3b:bb:df:6e:0d:40:8e:7e:50:6c:08:b6:c0:b8:42:19:84:0f:
         99:7b:fd:b9:13:fa:7c:89:69:79:72:73:0e:08:2e:42:53:0a:
         4f:dd:63:c2:fe:b3:34:c0:0f:f5:93:5a:d3:18:0e:e7:f3:fa:
         f5:8f:85:db:67:11:12:d7:a8:44:f2:5d:52:54:73:66:8f:c3:
         2f:23:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:03 2026 by rpki-client