This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/6AhD1jXr3FFyQ_sGd2jAnMDZjoc.roa
File:                     6AhD1jXr3FFyQ_sGd2jAnMDZjoc.roa (raw, json)
Hash identifier:          9575poK9RzcT7O+M5Uoj/QWOLFnnBmZ9TMiLjd0sYJI=
Subject key identifier:   E8:08:43:D6:35:EB:DC:51:72:43:FB:06:77:68:C0:9C:C0:D9:8E:87
Certificate issuer:       /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial:       019B7910C936472D5785D707A08189A4AE0D
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/6AhD1jXr3FFyQ_sGd2jAnMDZjoc.roa
Signing time:             Thu 01 Jan 2026 10:18:21 +0000
ROA not before:           Thu 01 Jan 2026 10:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203586
IP address blocks:        185.219.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:c9:36:47:2d:57:85:d7:07:a0:81:89:a4:ae:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
        Validity
            Not Before: Jan  1 10:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e80843d635ebdc517243fb067768c09cc0d98e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:c3:15:10:0e:e5:ec:4f:da:90:7d:3e:5e:
                    8d:3f:c8:93:2e:84:19:a3:60:ec:cc:ff:03:9c:ba:
                    c4:9e:01:4a:3f:aa:db:3f:52:14:79:02:95:a5:f1:
                    96:a4:fe:6b:29:cb:d5:ed:2a:bf:86:b6:c1:2a:67:
                    84:f9:5a:b3:2b:67:a8:41:d1:fe:95:28:75:ad:92:
                    cc:e4:40:8f:e0:dc:b6:e6:e0:76:bd:5f:a6:fa:59:
                    7f:84:44:2a:18:4f:1e:2b:3c:e2:ca:3a:28:56:f8:
                    84:27:e6:10:d3:25:45:76:55:29:6f:ff:72:b9:24:
                    ae:f3:6d:1a:0d:6b:5e:19:37:98:2a:50:ca:69:6e:
                    0c:6e:f6:af:2f:30:7f:a4:5c:26:93:f5:3c:c5:97:
                    c0:ad:25:99:7a:9e:19:83:7c:68:c3:7f:66:88:7d:
                    bf:f3:cf:70:44:61:c9:3e:94:ba:18:b3:f2:e6:f7:
                    1a:04:c4:4b:e6:c7:44:da:9a:81:fb:d6:ed:20:8a:
                    93:e2:e1:ef:d9:87:84:06:75:8e:d7:fb:a2:2e:82:
                    76:6a:ff:52:c9:e2:31:4a:25:6d:73:ec:be:67:60:
                    97:7f:2c:b2:79:37:33:85:61:b8:94:f9:65:6c:82:
                    cc:91:69:87:5d:ac:67:5a:03:72:e1:c3:48:51:62:
                    05:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:08:43:D6:35:EB:DC:51:72:43:FB:06:77:68:C0:9C:C0:D9:8E:87
            X509v3 Authority Key Identifier:
                keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/6AhD1jXr3FFyQ_sGd2jAnMDZjoc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:7c:6c:09:73:73:6f:7d:09:3c:5d:93:f0:08:80:4e:84:
         85:49:10:f1:14:6e:51:4f:01:4c:85:c6:13:d0:db:49:c8:4e:
         8c:b9:f8:27:fb:cd:ce:c8:27:be:c9:1d:4e:ae:8b:f5:08:37:
         f9:a7:e1:da:2a:c2:a2:99:61:73:eb:ae:5d:bd:f2:31:4b:02:
         a2:f1:61:a9:da:a2:78:f9:fe:34:5a:53:7e:c2:c2:1b:b3:28:
         bf:5d:6a:f4:b8:83:1d:74:da:7f:85:8d:84:8b:62:69:08:8f:
         47:78:df:04:b9:96:59:5b:d7:42:b8:d5:90:03:e0:4a:f9:e5:
         9c:f5:a9:26:8d:be:1c:48:56:ad:39:68:91:9c:a2:df:2b:01:
         70:69:be:b2:5a:57:99:e4:e5:3b:3d:7a:95:1f:f8:0f:fa:86:
         e0:40:35:77:24:f7:dd:c5:79:8e:8a:1d:db:7c:2b:51:f0:d0:
         90:ad:75:88:8c:14:00:7c:b7:9c:0c:1c:51:8b:d6:9b:16:d4:
         8d:21:ba:7b:5a:c7:2c:fd:a4:91:e2:78:3b:79:90:0b:6a:76:
         6e:6d:bb:79:55:d7:76:7f:6f:a3:5d:ea:46:19:0a:31:cb:cc:
         90:15:1d:85:7f:46:83:84:de:b2:4b:8c:cc:19:fb:87:73:ac:
         2a:33:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:27 2026 by rpki-client