This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6TlBE3Vor-0txnW7KOEHA-h2gk.roa
File:                     n6TlBE3Vor-0txnW7KOEHA-h2gk.roa (raw, json)
Hash identifier:          4BEPymBojmvi3OndswIxpgqszPnRiaPgR1A0j5TMSlc=
Subject key identifier:   9F:A4:E5:04:4D:D5:A2:BF:B4:B7:19:D6:EC:A3:84:1C:0F:A1:DA:09
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F84BEFE78B1F953611C8C2D349348FC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6TlBE3Vor-0txnW7KOEHA-h2gk.roa
Signing time:             Fri 02 Jan 2026 16:22:44 +0000
ROA not before:           Fri 02 Jan 2026 16:22:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214184
IP address blocks:        94.183.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:be:fe:78:b1:f9:53:61:1c:8c:2d:34:93:48:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9fa4e5044dd5a2bfb4b719d6eca3841c0fa1da09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:7b:4d:27:05:52:15:e5:04:43:44:89:21:
                    0b:17:66:f6:64:73:66:87:b2:ea:be:33:fa:21:51:
                    78:25:89:26:48:38:dc:47:68:c1:79:e4:ac:f0:cc:
                    d9:08:da:4a:ab:79:90:db:d9:ed:92:2a:55:d5:ad:
                    c1:8e:b0:71:84:10:66:e8:a6:9f:7c:bc:28:2b:2e:
                    9f:bf:52:e6:4b:cf:0a:21:b1:18:e1:09:58:02:20:
                    59:02:51:f7:24:db:08:54:d9:16:ce:d2:03:0b:82:
                    fd:8e:43:86:f0:3f:49:f0:ea:91:e0:ff:c3:5b:9f:
                    2a:f2:19:91:2f:09:48:15:40:87:d6:13:9d:b4:48:
                    fa:35:f6:0a:56:ce:65:c5:ff:ca:6a:4e:95:c5:d3:
                    be:17:0e:47:d8:76:86:63:8b:28:ba:b9:70:6a:29:
                    77:d1:3e:11:2a:01:fd:d7:c1:04:13:61:ae:2d:d4:
                    f1:c3:ba:25:23:04:7a:a0:e6:7c:a1:23:37:c8:76:
                    a4:de:56:1b:e4:18:bf:a6:b8:5a:10:cf:91:15:25:
                    ce:83:79:32:2e:9c:d6:76:28:73:3c:c6:1d:4d:ab:
                    77:39:f2:1c:bb:e2:ad:cf:26:80:c6:14:11:02:20:
                    4f:1f:42:53:bb:9b:3f:90:de:69:bc:5b:80:80:ef:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A4:E5:04:4D:D5:A2:BF:B4:B7:19:D6:EC:A3:84:1C:0F:A1:DA:09
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n6TlBE3Vor-0txnW7KOEHA-h2gk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.183.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:40:17:39:f2:47:46:cd:e6:6f:c5:00:ca:29:19:ea:17:
         93:6b:21:ac:ee:1f:b4:e2:f2:72:74:88:5d:ac:67:8b:5d:1c:
         1e:a1:2e:05:98:df:b8:f5:51:61:16:da:56:2f:ef:f8:b3:e8:
         88:ca:53:34:a6:08:14:74:ba:61:3a:f0:e9:9e:1a:33:50:16:
         9c:1f:57:4e:c7:e1:47:0d:5d:1c:5d:3d:8e:b0:ac:8c:3f:10:
         ca:d3:72:f8:b1:ac:7f:4d:e7:92:30:1f:2a:60:55:7c:38:c8:
         f0:7c:ef:07:b6:4a:25:38:26:4e:1c:f4:85:4b:3b:9a:2e:e4:
         6e:4b:11:95:c4:8e:91:38:3d:ab:72:ca:57:53:d8:d8:ff:ba:
         80:f2:23:ed:89:fa:67:01:fa:f7:a5:7d:1e:76:1a:a5:bf:78:
         bc:f9:0c:90:bd:5e:91:6f:79:1b:bf:d1:8b:8a:92:5a:ad:0b:
         ce:bc:0e:2f:6c:e4:46:d1:61:12:ce:2c:53:f1:95:39:a4:57:
         ed:5c:a4:07:b3:db:91:1b:a8:54:37:b5:69:fa:12:81:42:cd:
         c2:69:07:32:21:80:0f:16:30:20:4b:bd:50:00:c0:54:88:b6:
         4d:41:c5:03:46:69:8b:24:b4:26:56:93:13:d3:f9:59:6a:b8:
         4d:14:66:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hL7+eLH5U2EcjC00k0j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmE0ZTUwNDRkZDVhMmJmYjRiNzE5ZDZlY2EzODQxYzBmYTFkYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTd7TScFUhXlBENEiSELF2b2ZHNm
h7LqvjP6IVF4JYkmSDjcR2jBeeSs8MzZCNpKq3mQ29ntkipV1a3BjrBxhBBm6Kaf
fLwoKy6fv1LmS88KIbEY4QlYAiBZAlH3JNsIVNkWztIDC4L9jkOG8D9J8OqR4P/D
W58q8hmRLwlIFUCH1hOdtEj6NfYKVs5lxf/Kak6VxdO+Fw5H2HaGY4sourlwail3
0T4RKgH918EEE2GuLdTxw7olIwR6oOZ8oSM3yHak3lYb5Bi/prhaEM+RFSXOg3ky
LpzWdihzPMYdTat3OfIcu+KtzyaAxhQRAiBPH0JTu5s/kN5pvFuAgO9HRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+k5QRN1aK/tLcZ1uyjhBwPodoJMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbjZUbEJFM1Zvci0wdHhuVzdLT0VIQS1oMmdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrerMA0G
CSqGSIb3DQEBCwUAA4IBAQAs70AXOfJHRs3mb8UAyikZ6heTayGs7h+04vJydIhd
rGeLXRweoS4FmN+49VFhFtpWL+/4s+iIylM0pggUdLphOvDpnhozUBacH1dOx+FH
DV0cXT2OsKyMPxDK03L4sax/TeeSMB8qYFV8OMjwfO8HtkolOCZOHPSFSzuaLuRu
SxGVxI6ROD2rcspXU9jY/7qA8iPtifpnAfr3pX0edhqlv3i8+QyQvV6Rb3kbv9GL
ipJarQvOvA4vbORG0WESzixT8ZU5pFftXKQHs9uRG6hUN7Vp+hKBQs3CaQcyIYAP
FjAgS71QAMBUiLZNQcUDRmmLJLQmVpMT0/lZarhNFGZn
-----END CERTIFICATE-----
Generated at Mon Jan 5 14:36:42 2026 by rpki-client