This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6-ZpFwHnQMUgWQdkaOpsQleXN6g.roa
File:                     6-ZpFwHnQMUgWQdkaOpsQleXN6g.roa (raw, json)
Hash identifier:          cbazy6ggPsdXHHS6ytHxeB3MShvQrgRlxwqpgrcxCms=
Subject key identifier:   EB:E6:69:17:01:E7:40:C5:20:59:07:64:68:EA:6C:42:57:97:37:A8
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F849536DB1D78E64D2A283472E5827B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6-ZpFwHnQMUgWQdkaOpsQleXN6g.roa
Signing time:             Fri 02 Jan 2026 16:22:33 +0000
ROA not before:           Fri 02 Jan 2026 16:22:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204044
IP address blocks:        31.59.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:95:36:db:1d:78:e6:4d:2a:28:34:72:e5:82:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ebe6691701e740c52059076468ea6c42579737a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:11:f5:dd:ac:d9:34:39:e7:96:d2:02:33:
                    5d:8a:61:0d:05:a0:88:c7:15:45:1a:97:ee:40:88:
                    40:40:32:a3:d4:19:9b:c4:b6:5e:46:5a:cc:17:2f:
                    8d:bb:f7:44:20:88:b5:64:4b:4c:a5:92:97:e8:b2:
                    6e:7d:6e:3c:4a:3c:cf:57:3d:67:7b:0d:df:3c:50:
                    91:b9:7b:31:fb:89:71:86:a4:4e:a8:be:6a:1c:dc:
                    05:aa:af:61:38:49:f7:90:97:7e:e4:a9:57:c1:33:
                    92:55:5d:72:da:8b:02:72:05:d0:86:71:a8:45:ba:
                    a6:7d:6b:d8:42:9f:bd:59:2b:bb:3f:a7:08:22:39:
                    23:b6:3a:4d:0d:68:ac:9e:21:5d:3e:66:d0:a1:60:
                    2e:58:86:53:09:bf:c9:26:fe:49:7d:a5:b0:9b:63:
                    a2:4b:d7:4d:dd:11:ac:0b:87:ac:b5:28:de:67:89:
                    f1:6a:49:8b:ea:7f:1a:24:92:8c:6f:df:96:1f:2c:
                    06:01:db:6b:99:70:48:87:d8:07:97:ab:36:02:1d:
                    c5:cb:a0:53:a8:3f:bd:25:45:ec:24:df:c6:77:40:
                    02:a5:49:51:76:cc:31:9d:f7:dc:42:ab:5e:c9:d4:
                    4e:40:a2:01:40:1a:0e:51:b1:d7:6f:90:88:22:f7:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E6:69:17:01:E7:40:C5:20:59:07:64:68:EA:6C:42:57:97:37:A8
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6-ZpFwHnQMUgWQdkaOpsQleXN6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.59.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:13:8c:17:0d:ac:43:ac:60:3b:c2:e7:5c:cf:2f:80:14:
         d9:4a:73:77:7f:4f:cb:ed:58:a6:48:3e:80:b2:a6:70:db:e4:
         40:3e:87:55:70:a8:f8:a4:59:81:43:03:b4:7c:16:df:1d:0d:
         43:d5:04:1f:a6:66:3c:02:e3:4f:d3:2d:0b:02:2a:22:ea:3d:
         85:f1:0a:25:94:57:6c:4f:75:7c:78:f3:4c:5e:6e:6e:ae:18:
         d6:9d:b3:1d:7f:96:f6:39:21:98:55:6c:29:10:2b:e1:99:94:
         e4:77:31:73:5a:9c:02:4d:37:c2:11:04:ab:e7:3d:a0:42:7b:
         d5:3e:84:bc:31:17:39:ac:2b:04:99:f6:77:df:fc:af:a6:ed:
         92:6c:6a:03:05:a2:b9:6e:fd:a0:cd:f3:8f:09:29:47:64:94:
         f6:c5:52:c8:fa:cb:dd:78:c4:3c:15:1b:21:ad:eb:8f:7a:c4:
         60:e3:c4:aa:47:e9:37:65:2b:3d:6c:45:7f:88:28:8b:c5:6b:
         7b:9d:b7:92:e5:e3:51:da:1e:4f:6f:db:90:58:2f:70:6d:86:
         f3:ae:91:19:fc:4c:6d:ff:92:81:21:bc:78:33:93:08:24:64:
         f2:3e:be:60:bf:75:d2:e6:db:6f:b6:fb:8a:06:41:de:a0:ed:
         5c:54:e8:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hJU22x145k0qKDRy5YJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmU2NjkxNzAxZTc0MGM1MjA1OTA3NjQ2OGVhNmM0MjU3OTczN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmQR9d2s2TQ555bSAjNdimENBaCI
xxVFGpfuQIhAQDKj1BmbxLZeRlrMFy+Nu/dEIIi1ZEtMpZKX6LJufW48SjzPVz1n
ew3fPFCRuXsx+4lxhqROqL5qHNwFqq9hOEn3kJd+5KlXwTOSVV1y2osCcgXQhnGo
RbqmfWvYQp+9WSu7P6cIIjkjtjpNDWisniFdPmbQoWAuWIZTCb/JJv5JfaWwm2Oi
S9dN3RGsC4estSjeZ4nxakmL6n8aJJKMb9+WHywGAdtrmXBIh9gHl6s2Ah3Fy6BT
qD+9JUXsJN/Gd0ACpUlRdswxnffcQqteydROQKIBQBoOUbHXb5CIIvdv3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvmaRcB50DFIFkHZGjqbEJXlzeoMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNi1acEZ3SG5RTVVnV1Fka2FPcHNRbGVYTjZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHztIMA0G
CSqGSIb3DQEBCwUAA4IBAQAfahOMFw2sQ6xgO8LnXM8vgBTZSnN3f0/L7VimSD6A
sqZw2+RAPodVcKj4pFmBQwO0fBbfHQ1D1QQfpmY8AuNP0y0LAioi6j2F8QollFds
T3V8ePNMXm5urhjWnbMdf5b2OSGYVWwpECvhmZTkdzFzWpwCTTfCEQSr5z2gQnvV
PoS8MRc5rCsEmfZ33/yvpu2SbGoDBaK5bv2gzfOPCSlHZJT2xVLI+svdeMQ8FRsh
reuPesRg48SqR+k3ZSs9bEV/iCiLxWt7nbeS5eNR2h5Pb9uQWC9wbYbzrpEZ/Ext
/5KBIbx4M5MIJGTyPr5gv3XS5ttvtvuKBkHeoO1cVOjA
-----END CERTIFICATE-----
Generated at Mon Jan 5 14:36:23 2026 by rpki-client