This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/e06_jEIDuFW1OUI1Yr38xB0lxx8.roa
File:                     e06_jEIDuFW1OUI1Yr38xB0lxx8.roa (raw, json)
Hash identifier:          gSYcnsHJnz/xJ/EuZcj8lHoCpS2M+qgzC3QMJw+m3cU=
Subject key identifier:   7B:4E:BF:8C:42:03:B8:55:B5:39:42:35:62:BD:FC:C4:1D:25:C7:1F
Certificate issuer:       /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial:       019B7C12694EC20BAD818BFC64A9E45C2208
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/e06_jEIDuFW1OUI1Yr38xB0lxx8.roa
Signing time:             Fri 02 Jan 2026 00:18:59 +0000
ROA not before:           Fri 02 Jan 2026 00:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6707
IP address blocks:        193.28.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:69:4e:c2:0b:ad:81:8b:fc:64:a9:e4:5c:22:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
        Validity
            Not Before: Jan  2 00:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b4ebf8c4203b855b539423562bdfcc41d25c71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:65:d9:2e:9c:e6:d2:45:74:33:a6:85:dd:96:
                    ac:b2:8f:f2:3b:dc:af:65:2f:bb:56:e8:6b:50:ee:
                    52:24:b1:dd:43:50:34:14:9b:07:9e:a2:74:c4:d7:
                    50:c0:fd:1b:c3:4d:39:21:b3:f0:5c:5c:f9:08:51:
                    7a:88:65:03:ff:89:0b:e2:cb:f9:33:b3:3f:99:e4:
                    4a:32:25:33:b1:97:82:7a:a9:22:41:7d:0a:04:9e:
                    dc:e7:90:ab:48:77:68:1d:fc:ba:40:91:9a:a3:30:
                    94:47:fe:92:17:70:8f:f3:67:97:c7:80:27:3a:58:
                    29:68:2c:41:50:48:ad:1c:13:34:e6:9a:0a:74:73:
                    70:e4:43:4e:16:a5:13:69:7c:42:fa:00:62:36:cb:
                    58:ff:ae:f0:e4:d0:51:90:eb:a1:a9:34:27:96:01:
                    c9:e4:ec:fe:12:e8:0b:d9:d6:0c:7e:f3:0b:a7:65:
                    7b:1d:c4:49:ba:91:18:f7:b0:bc:42:ea:3b:c7:e5:
                    46:52:02:3a:dd:5b:9d:63:ef:f2:4f:99:15:33:36:
                    af:a7:18:97:d3:91:11:df:52:d7:91:6d:8e:42:41:
                    15:e8:58:17:70:d7:bd:5d:06:30:ee:2d:6e:4b:ae:
                    3f:d0:ff:c9:01:72:58:f7:7d:a9:bf:4a:97:50:42:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4E:BF:8C:42:03:B8:55:B5:39:42:35:62:BD:FC:C4:1D:25:C7:1F
            X509v3 Authority Key Identifier:
                keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/e06_jEIDuFW1OUI1Yr38xB0lxx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:36:3a:d0:00:e9:9c:b8:95:36:7e:97:63:f0:fe:d7:86:6e:
         f1:26:f1:5f:1e:90:bc:4e:0d:f7:c2:f5:44:04:a8:3c:13:58:
         13:a9:69:2d:fa:92:23:3d:69:d2:76:7c:88:bf:33:03:f2:56:
         86:94:a3:03:cd:6c:16:9c:f0:b1:81:7a:7e:28:cf:d2:2d:06:
         cf:46:b3:25:9e:61:f4:f7:59:fa:b9:1a:e8:2b:33:db:4c:9f:
         bd:3c:28:dd:e3:d3:f9:63:f2:e7:65:83:b7:80:06:b1:25:3c:
         3a:c8:f9:90:ec:b2:93:d1:85:2e:2c:63:97:a7:76:ac:f5:7c:
         f0:08:e4:28:b6:70:2f:63:c1:46:2a:cd:70:97:dd:e4:eb:20:
         41:06:69:c0:52:9f:cb:00:11:ba:aa:d0:b1:91:61:17:56:e0:
         18:c6:8e:4a:d9:0f:44:4d:e6:6c:57:29:d5:f2:3b:f6:37:d5:
         33:08:d1:dc:b6:9f:56:ad:d2:b2:be:76:02:b4:c8:db:f4:79:
         96:5f:02:2c:ff:45:50:53:d7:56:a6:2c:92:65:ea:95:9c:6c:
         f9:24:6c:46:20:c9:d4:c6:72:18:e5:f6:83:2b:1e:95:6d:d9:
         1a:88:c6:d7:c4:86:ac:a0:d8:ae:7c:6c:f6:c9:fa:b4:07:90:
         c7:93:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:59:05 2026 by rpki-client