This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/R_6gzz-6zc7PttvrMeEZdOkDCmI.roa
File:                     R_6gzz-6zc7PttvrMeEZdOkDCmI.roa (raw, json)
Hash identifier:          56MhruVdFlyjLxvhol1K1ntUZ6nWt0/hPkTiz31JppU=
Subject key identifier:   47:FE:A0:CF:3F:BA:CD:CE:CF:B6:DB:EB:31:E1:19:74:E9:03:0A:62
Certificate issuer:       /CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Certificate serial:       019B7EA68E86641C39E383FA324179E2FA26
Authority key identifier: 57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/R_6gzz-6zc7PttvrMeEZdOkDCmI.roa
Signing time:             Fri 02 Jan 2026 12:20:03 +0000
ROA not before:           Fri 02 Jan 2026 12:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43355
IP address blocks:        193.111.180.0/22 maxlen: 24
                          2a0b:7240::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:8e:86:64:1c:39:e3:83:fa:32:41:79:e2:fa:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
        Validity
            Not Before: Jan  2 12:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47fea0cf3fbacdcecfb6dbeb31e11974e9030a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:c6:4d:11:ec:fe:87:30:0b:c9:a6:b1:df:
                    a1:4f:af:8f:18:fc:10:e7:42:6f:d1:c1:a3:cb:f5:
                    93:e4:ce:f8:52:00:a0:6d:27:72:9a:be:e5:46:26:
                    72:95:41:c8:ee:b9:69:7c:6a:1a:98:64:3a:70:76:
                    cb:48:61:6e:d5:e6:a1:7d:ac:8a:c2:b3:9e:4e:24:
                    3e:33:8f:9f:7f:07:d6:12:e3:14:90:9e:4f:89:2d:
                    22:a6:4f:dd:95:be:c3:59:7e:9b:8a:32:83:15:a5:
                    8c:87:ac:51:6f:ab:43:d2:81:f5:85:24:86:f1:c4:
                    76:a1:56:5a:5f:28:bb:cc:cf:d6:e9:ea:c7:d5:ef:
                    a8:3c:bd:ad:85:20:3c:93:58:04:fe:4a:08:6e:de:
                    32:03:84:8d:9d:6d:76:26:88:c2:e9:ed:0c:85:37:
                    50:6a:e7:c5:b0:4f:29:5a:06:e9:b6:de:44:cc:96:
                    bf:c0:d5:19:a2:c0:11:23:15:a5:7a:d2:9b:96:65:
                    11:43:d1:24:f2:4f:33:3f:3b:01:3c:81:60:14:e1:
                    6b:11:24:d0:6d:c5:5c:81:7b:7d:38:b4:8d:ee:0b:
                    3c:62:63:16:8a:76:a3:f1:be:43:8b:f3:00:d1:6e:
                    6b:80:3a:08:48:c7:1a:76:90:86:b5:5a:9b:12:ec:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FE:A0:CF:3F:BA:CD:CE:CF:B6:DB:EB:31:E1:19:74:E9:03:0A:62
            X509v3 Authority Key Identifier:
                keyid:57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/R_6gzz-6zc7PttvrMeEZdOkDCmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.180.0/22
                IPv6:
                  2a0b:7240::/29

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:dd:fa:f5:61:27:a7:56:26:e6:ef:df:1f:4c:41:b8:09:
         1f:27:f0:be:61:9d:d5:a5:c5:d3:fb:56:8d:45:46:2c:c8:cb:
         d2:4e:35:d8:3f:68:a4:62:61:b7:42:f8:61:6a:96:a6:d8:7f:
         8e:e9:29:03:ea:80:72:bb:7e:d5:f2:c0:e5:bf:de:df:f3:95:
         11:2d:fb:2b:16:ba:9c:43:a3:8d:76:bc:a0:93:15:9a:a8:7e:
         b8:3b:70:8d:13:6a:a9:6b:d4:c0:4e:d6:ec:89:82:78:f6:42:
         1b:a2:06:b7:b9:64:e1:35:ec:bb:10:02:35:15:33:2d:84:7c:
         34:04:8d:f9:06:c3:9f:4f:6e:c9:27:b0:11:9b:80:0b:29:12:
         76:33:10:0b:d4:42:0b:ac:ee:f9:a3:4e:45:b3:1e:49:de:54:
         4b:4d:f5:e4:29:ef:a5:b1:e8:2e:c4:bb:4c:92:9b:9b:fb:3c:
         ee:37:2c:f3:b0:49:a2:33:11:96:ab:db:7a:3e:9d:a2:d2:af:
         79:e7:cf:e7:43:87:0d:ad:17:05:ec:db:a1:77:15:74:b1:82:
         9e:ae:d6:68:01:82:99:6b:f5:75:48:a3:b7:6e:1f:45:87:d7:
         06:cb:f1:d8:d8:dc:56:ca:8d:ab:1f:37:1d:13:87:05:3a:ed:
         7a:ed:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:18 2026 by rpki-client