This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/q6CwaYt60BDQuc3_ZWsbWaNz8Dg.roa
File:                     q6CwaYt60BDQuc3_ZWsbWaNz8Dg.roa (raw, json)
Hash identifier:          JEtY03ZZCO1pOzbBLbHUtClYuSPCvPVo4T1050vxYC4=
Subject key identifier:   AB:A0:B0:69:8B:7A:D0:10:D0:B9:CD:FF:65:6B:1B:59:A3:73:F0:38
Certificate issuer:       /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial:       019B7DCAF1D40EBAC50F40542730316F537C
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/q6CwaYt60BDQuc3_ZWsbWaNz8Dg.roa
Signing time:             Fri 02 Jan 2026 08:20:10 +0000
ROA not before:           Fri 02 Jan 2026 08:20:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12533
IP address blocks:        82.145.98.0/23 maxlen: 23
                          82.145.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:f1:d4:0e:ba:c5:0f:40:54:27:30:31:6f:53:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
        Validity
            Not Before: Jan  2 08:20:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aba0b0698b7ad010d0b9cdff656b1b59a373f038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:ba:80:ff:12:9c:a3:23:92:05:03:54:6e:
                    73:bd:c5:a8:ca:15:65:cb:2b:a5:12:f4:e4:16:24:
                    d7:11:6e:b1:6b:30:a0:05:54:8b:95:93:41:e9:aa:
                    70:a4:23:36:48:e7:dd:5c:6e:d1:36:d9:43:c0:5d:
                    3d:97:79:1b:91:5a:b2:41:52:c8:8a:1b:c9:1d:64:
                    00:ca:c5:82:6f:3d:c6:98:58:0e:c5:74:15:a5:4a:
                    1c:6c:a4:61:f0:2b:fd:96:81:78:f5:8d:af:eb:5d:
                    ca:f9:90:f5:3b:0f:b1:0b:f1:48:44:78:7f:b5:43:
                    fc:40:a2:ab:7c:af:b6:24:48:93:37:03:34:c0:6b:
                    4a:c0:5f:30:91:ff:69:dc:c7:60:34:b0:6a:11:f9:
                    46:c7:c3:91:1e:bf:37:45:6a:a5:70:23:5d:54:51:
                    3f:0a:ee:65:d4:a3:e6:79:7a:cf:8b:2a:39:65:f2:
                    32:2b:c1:1e:c1:71:16:29:ad:e9:3b:ed:87:c2:cc:
                    eb:30:56:20:55:8a:fc:63:09:cd:d1:0e:32:cf:52:
                    8f:98:2a:62:4f:e0:79:ab:d9:79:50:9a:da:2b:c4:
                    20:f1:25:87:1b:8d:4a:42:13:f5:86:5a:45:52:ab:
                    23:db:6d:00:9e:b5:df:42:68:cc:40:9e:c9:28:cb:
                    59:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A0:B0:69:8B:7A:D0:10:D0:B9:CD:FF:65:6B:1B:59:A3:73:F0:38
            X509v3 Authority Key Identifier:
                keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/q6CwaYt60BDQuc3_ZWsbWaNz8Dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.145.98.0-82.145.101.255

    Signature Algorithm: sha256WithRSAEncryption
         ac:1d:e4:08:a5:31:aa:a2:1e:1b:1c:2c:6b:22:bb:6b:e6:c3:
         fb:46:6d:2c:30:bb:13:fa:49:46:d2:b8:22:1b:bf:c1:20:c3:
         ed:7d:ab:d7:a7:f6:28:96:36:9a:26:4a:ee:ff:db:e7:a8:db:
         94:9c:1d:29:bd:d0:ae:d0:9f:21:05:d9:17:2d:e1:00:8b:07:
         04:de:c6:35:9d:59:d3:01:fa:9b:fe:6f:14:96:a0:c1:66:00:
         86:40:f5:f4:47:fd:0a:5b:58:6b:29:af:74:bf:ae:0f:99:a8:
         10:4e:74:11:a7:30:0a:64:48:50:cd:96:60:aa:06:f6:4e:b5:
         0f:cc:f6:64:a8:c9:ac:9a:04:01:71:c5:1a:9a:06:3c:32:bd:
         55:f0:0f:e1:d7:44:1f:4c:a2:1d:5a:6d:c0:c3:3b:63:e3:1d:
         6c:53:8e:7e:f9:34:5a:b1:56:88:11:28:6b:1b:27:9e:50:54:
         57:41:07:bb:db:f3:db:31:21:d7:0b:33:a4:7e:0a:72:11:94:
         0a:3b:54:b8:85:b2:91:18:ba:00:ce:34:b7:cd:36:f5:49:63:
         6e:68:ac:1e:4c:8f:34:a8:0f:ab:32:e5:4c:ef:86:4c:3e:f9:
         6d:4e:ad:77:97:4a:e5:04:de:41:4b:85:ae:3b:b8:99:20:54:
         c2:a1:28:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:24:23 2026 by rpki-client