This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa
File:                     C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa (raw, json)
Hash identifier:          cI18XK4120S5J9FafE4nfPOUgjzzLDAqRssaJqmX93Y=
Subject key identifier:   0B:EE:BE:5D:3F:AD:5E:3A:60:BF:34:41:99:04:55:5D:A2:6F:55:D2
Certificate issuer:       /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial:       019B783524C1CBEFE5D649E108F98B4FCFB8
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa
Signing time:             Thu 01 Jan 2026 06:18:27 +0000
ROA not before:           Thu 01 Jan 2026 06:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     401443
IP address blocks:        45.145.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:24:c1:cb:ef:e5:d6:49:e1:08:f9:8b:4f:cf:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
        Validity
            Not Before: Jan  1 06:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0beebe5d3fad5e3a60bf34419904555da26f55d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:ff:3b:80:1b:df:cf:7e:3e:bd:57:94:09:
                    96:38:6a:80:bf:25:72:f7:b5:c9:46:32:72:96:4d:
                    d8:75:bc:6b:33:80:86:b7:3e:87:ee:cd:d8:28:3f:
                    f6:c4:f3:d3:6f:69:1a:2a:24:31:a1:91:c2:3c:77:
                    ed:87:5c:ce:05:78:cd:78:c4:c6:df:d1:5e:cd:e6:
                    20:46:05:5d:8e:2e:66:65:9b:b4:76:7e:b0:ab:ac:
                    b4:db:cf:af:15:e2:b2:89:7c:26:ff:70:58:da:3f:
                    f2:14:33:db:f3:68:a8:a2:ba:31:c7:46:e6:45:38:
                    a6:02:88:99:00:99:34:eb:55:01:0d:68:e3:1e:bc:
                    18:e6:9f:32:e3:2b:76:ee:b4:98:53:8a:c8:4b:9d:
                    f5:20:e6:f8:4b:0e:5e:69:b7:e9:9a:ca:72:b3:57:
                    81:08:bd:59:ae:a8:ac:65:7e:e0:dd:8d:52:3d:af:
                    24:30:96:31:2a:52:61:e8:f7:0f:1c:f5:10:69:a8:
                    ff:ec:77:d1:74:b1:a8:84:65:53:05:28:c0:b1:8b:
                    59:33:a3:f0:77:a9:54:c4:a2:49:ae:47:58:2d:3f:
                    40:65:f3:92:69:5f:00:d9:c4:9b:1f:7f:97:00:b8:
                    d7:79:5b:16:ce:5e:86:51:3c:3f:5e:a7:3b:25:e4:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EE:BE:5D:3F:AD:5E:3A:60:BF:34:41:99:04:55:5D:A2:6F:55:D2
            X509v3 Authority Key Identifier:
                keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/C-6-XT-tXjpgvzRBmQRVXaJvVdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:be:19:95:c8:ac:11:75:ac:a2:a9:46:d1:e0:36:10:de:6f:
         83:63:7c:07:34:17:e6:17:cb:39:bd:cf:15:1f:2c:a3:85:8a:
         49:67:54:aa:70:d3:00:d8:4a:0e:e5:66:2b:5a:dd:3d:1a:88:
         03:29:26:7f:c4:3d:ee:1b:5a:15:de:f4:dd:af:7d:d1:14:63:
         08:63:a2:a8:c4:e0:64:4b:9e:d0:21:63:7f:3d:ec:45:76:54:
         d1:27:dd:82:40:15:6d:35:4a:29:cf:dd:d8:7e:dd:c7:b6:d8:
         87:fa:81:ac:3d:56:51:8f:87:d1:2a:df:38:82:1c:b1:a5:c4:
         3c:81:0f:18:ac:8b:3d:2d:4d:26:62:54:17:77:3a:8b:98:6d:
         94:c8:03:62:0c:58:03:05:81:94:71:4b:e8:53:a8:af:dd:40:
         88:1f:f8:76:74:cd:b7:61:5c:8d:24:ce:11:67:83:be:a7:ae:
         6b:ba:79:1d:a7:3b:76:44:19:cc:3e:19:71:41:83:03:c4:51:
         9e:1e:8e:81:c7:c3:7c:96:1e:88:20:9e:0b:05:37:24:71:b5:
         9c:fd:68:12:95:dc:2a:eb:52:45:af:22:0f:d9:f4:e1:d4:eb:
         b1:e3:3f:0d:6e:a9:bc:94:b7:b8:83:aa:66:8c:56:30:a6:fb:
         09:ec:8f:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NSTBy+/l1knhCPmLT8+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmVlYmU1ZDNmYWQ1ZTNhNjBiZjM0NDE5OTA0NTU1ZGEyNmY1NWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpf/O4Ab389+Pr1XlAmWOGqAvyVy
97XJRjJylk3YdbxrM4CGtz6H7s3YKD/2xPPTb2kaKiQxoZHCPHfth1zOBXjNeMTG
39FezeYgRgVdji5mZZu0dn6wq6y028+vFeKyiXwm/3BY2j/yFDPb82iooroxx0bm
RTimAoiZAJk061UBDWjjHrwY5p8y4yt27rSYU4rIS531IOb4Sw5eabfpmspys1eB
CL1ZrqisZX7g3Y1SPa8kMJYxKlJh6PcPHPUQaaj/7HfRdLGohGVTBSjAsYtZM6Pw
d6lUxKJJrkdYLT9AZfOSaV8A2cSbH3+XALjXeVsWzl6GUTw/Xqc7JeRrHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvuvl0/rV46YL80QZkEVV2ib1XSMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvQy02LVhULXRYanBndnpSQm1RUlZYYUp2VmRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGaMA0G
CSqGSIb3DQEBCwUAA4IBAQARvhmVyKwRdayiqUbR4DYQ3m+DY3wHNBfmF8s5vc8V
HyyjhYpJZ1SqcNMA2EoO5WYrWt09GogDKSZ/xD3uG1oV3vTdr33RFGMIY6KoxOBk
S57QIWN/PexFdlTRJ92CQBVtNUopz93Yft3HttiH+oGsPVZRj4fRKt84ghyxpcQ8
gQ8YrIs9LU0mYlQXdzqLmG2UyANiDFgDBYGUcUvoU6iv3UCIH/h2dM23YVyNJM4R
Z4O+p65runkdpzt2RBnMPhlxQYMDxFGeHo6Bx8N8lh6IIJ4LBTckcbWc/WgSldwq
61JFryIP2fTh1Oux4z8Nbqm8lLe4g6pmjFYwpvsJ7I8R
-----END CERTIFICATE-----
Generated at Sun Jan 18 09:13:09 2026 by rpki-client