This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/m6r9o3EuSXJct7DbkrfCUu4fQnA.roa
File:                     m6r9o3EuSXJct7DbkrfCUu4fQnA.roa (raw, json)
Hash identifier:          0qwKGFMutfPG5lJWTCMJbkMgVvm8/EpA/jxVo+nSsVU=
Subject key identifier:   9B:AA:FD:A3:71:2E:49:72:5C:B7:B0:DB:92:B7:C2:52:EE:1F:42:70
Certificate issuer:       /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial:       019B7835359640A5DA39C46BB376B3F36F61
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/m6r9o3EuSXJct7DbkrfCUu4fQnA.roa
Signing time:             Thu 01 Jan 2026 06:18:31 +0000
ROA not before:           Thu 01 Jan 2026 06:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209453
IP address blocks:        213.167.229.0/24 maxlen: 24
                          213.167.230.0/24 maxlen: 24
                          217.70.179.0/24 maxlen: 24
                          217.70.187.0/24 maxlen: 24
                          2001:4b98:aaaa::/48 maxlen: 48
                          2001:4b98:aaab::/48 maxlen: 48
                          2001:4b98:abcb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:35:96:40:a5:da:39:c4:6b:b3:76:b3:f3:6f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
        Validity
            Not Before: Jan  1 06:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9baafda3712e49725cb7b0db92b7c252ee1f4270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:53:7a:33:26:dd:99:ef:48:4f:8a:05:86:
                    71:fe:a4:23:56:09:f6:fc:76:fc:94:2b:0e:9a:29:
                    a4:9f:89:f8:08:3b:89:bb:8f:f9:12:f4:21:94:14:
                    c5:dc:7c:b8:35:38:aa:96:74:28:86:35:6a:1d:7e:
                    b8:28:0b:c1:e5:00:67:ad:20:c0:77:01:69:32:e8:
                    34:c4:a3:76:88:7e:c6:b8:01:68:1e:db:eb:77:ef:
                    d1:f5:a9:c6:84:49:d0:a1:07:1b:87:a4:9d:b9:65:
                    33:e6:01:1a:e2:2b:b9:52:1d:a0:9b:8e:f8:5d:fc:
                    6a:c7:f9:b6:fe:52:1d:44:90:db:58:56:a3:1e:f7:
                    4c:c7:51:8b:61:ea:6a:dc:35:6d:95:45:6c:6e:37:
                    e3:22:0d:94:d5:7a:c4:43:24:b4:20:07:4f:51:49:
                    39:af:f9:17:28:a0:97:d6:ad:26:4e:e7:4f:5b:df:
                    c2:ec:39:00:45:82:41:81:9a:91:bb:2b:d8:ed:76:
                    a8:aa:e1:1c:76:fd:ed:ed:e5:a0:bf:b6:b3:4c:82:
                    02:80:e9:0d:13:43:0d:f7:03:2f:d7:ae:f4:21:1f:
                    82:36:17:f4:28:46:09:8a:5b:dd:0a:0c:dd:ab:b6:
                    b7:dc:a7:d5:49:d9:65:31:35:61:ee:dc:f3:00:a3:
                    6b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AA:FD:A3:71:2E:49:72:5C:B7:B0:DB:92:B7:C2:52:EE:1F:42:70
            X509v3 Authority Key Identifier:
                keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/m6r9o3EuSXJct7DbkrfCUu4fQnA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.167.229.0-213.167.230.255
                  217.70.179.0/24
                  217.70.187.0/24
                IPv6:
                  2001:4b98:aaaa::/47
                  2001:4b98:abcb::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:5e:08:84:d9:ea:73:c2:09:a6:1a:0d:7b:a4:55:72:c1:ab:
         49:55:7c:c3:8c:12:e4:0c:e2:b3:d5:f6:cf:b4:57:59:2a:ed:
         f4:4a:f5:75:c3:09:a0:a0:13:ef:87:89:18:4e:8b:c7:70:29:
         6d:3e:b0:58:bf:86:67:82:de:a8:84:8d:ed:28:a3:37:f4:da:
         a2:71:e4:02:19:65:19:39:33:ad:e0:5d:bf:fa:44:75:76:7f:
         bd:33:82:20:ea:71:3a:60:bc:33:f0:18:0f:e9:39:4f:9c:47:
         bb:96:38:12:4a:0b:68:0e:af:d5:cc:a7:69:4a:de:1f:52:48:
         f4:fa:c3:8b:d9:27:8a:20:f1:a7:6f:9b:9d:eb:99:fc:02:fd:
         db:97:54:e6:63:23:a5:02:70:8d:80:34:08:e8:46:ed:43:61:
         59:0a:41:c6:d4:84:8f:10:03:e7:aa:14:80:a6:58:3b:12:bd:
         74:df:82:15:f9:41:88:b0:97:df:56:4d:c7:93:96:78:58:89:
         2c:be:c4:26:4f:5e:07:25:cd:f0:69:cf:ec:6c:a0:3b:a5:54:
         29:c9:2f:94:90:88:01:35:f8:be:66:61:ac:2d:9e:87:35:86:
         14:d2:aa:3d:76:6b:db:2c:4a:d4:0a:df:4e:8f:20:af:37:7d:
         2d:5d:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:29 2026 by rpki-client