This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/as6r6Ztzl3B5GCKyaxwnI7TOofc.roa
File:                     as6r6Ztzl3B5GCKyaxwnI7TOofc.roa (raw, json)
Hash identifier:          S7tlPr+W8+3NDnkxulAni5wKPaNd4l94BgIzDodWjyw=
Subject key identifier:   6A:CE:AB:E9:9B:73:97:70:79:18:22:B2:6B:1C:27:23:B4:CE:A1:F7
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       019BCDED4B03151CB06D0D8BCDF21AAE4B6F
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/as6r6Ztzl3B5GCKyaxwnI7TOofc.roa
Signing time:             Sat 17 Jan 2026 21:47:19 +0000
ROA not before:           Sat 17 Jan 2026 21:47:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208434
IP address blocks:        2a06:e881:6900::/48 maxlen: 48
                          2a06:e881:6902::/48 maxlen: 48
                          2a06:e881:6903::/48 maxlen: 48
                          2a06:e881:690c::/48 maxlen: 48
                          2a06:e881:690f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cd:ed:4b:03:15:1c:b0:6d:0d:8b:cd:f2:1a:ae:4b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan 17 21:47:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aceabe99b739770791822b26b1c2723b4cea1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:93:27:54:aa:d0:0c:a5:23:8f:76:60:ab:
                    78:c9:85:67:25:9a:43:de:e2:d1:62:82:18:69:93:
                    44:5c:73:35:f4:33:43:12:23:f0:93:28:1f:f1:80:
                    56:81:df:2e:06:1e:e8:55:bb:16:48:4b:31:58:d4:
                    dd:04:8d:53:d0:03:52:5a:a4:8e:12:61:d0:19:4a:
                    22:81:07:42:12:67:93:dd:3a:3c:f6:84:34:c3:03:
                    91:d9:0e:b8:f6:f5:c1:43:f9:18:37:40:5a:24:b9:
                    a1:c8:c2:ed:62:6d:83:bd:8e:71:ac:77:28:e2:e3:
                    d7:37:15:09:e3:37:dc:b9:32:57:a3:15:af:f6:e7:
                    67:86:0d:fd:89:c3:57:23:09:cd:57:a5:24:53:72:
                    36:56:02:47:cc:4d:c6:ad:23:6e:92:37:8a:88:96:
                    45:bb:2f:16:cb:18:3a:f0:56:e3:3e:98:d0:40:51:
                    e9:1c:f6:98:e8:94:fc:3f:5b:ef:fa:93:e0:bd:94:
                    a6:47:f8:9a:bd:30:70:fe:ed:07:cb:1e:93:1f:c3:
                    e4:cc:28:b0:ac:f7:ec:f4:2b:2d:ee:06:24:69:7b:
                    ff:94:f0:e5:db:13:03:4d:a4:f4:6a:69:31:1b:bb:
                    38:28:da:79:3e:95:14:8a:5b:53:f5:0a:04:ff:52:
                    32:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CE:AB:E9:9B:73:97:70:79:18:22:B2:6B:1C:27:23:B4:CE:A1:F7
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/as6r6Ztzl3B5GCKyaxwnI7TOofc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:6900::/48
                  2a06:e881:6902::/47
                  2a06:e881:690c::/48
                  2a06:e881:690f::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:98:c4:f8:c1:ad:0e:95:e3:1e:59:0b:61:01:6a:f1:cd:56:
         a6:74:2b:3b:f0:62:5e:67:13:2d:64:c8:b0:95:40:59:fc:10:
         b7:91:ad:7e:cf:f8:cd:b5:4a:91:9c:d0:7a:3d:c5:f1:9a:88:
         01:03:e9:8a:8b:9d:0d:94:61:9d:fa:ce:15:94:3a:e2:f3:77:
         1c:a1:67:c2:d2:90:ba:79:c0:8c:ee:b6:73:f9:9a:7f:51:18:
         54:c6:8e:5f:65:8f:af:0d:48:86:77:7f:f2:73:c0:0f:c5:be:
         70:18:22:0d:27:8f:fa:8b:62:4d:ef:42:57:67:38:4e:82:34:
         9f:d8:f5:71:30:e4:60:a8:6c:7e:d1:1d:37:b4:e8:a3:4b:ab:
         bf:06:50:74:b1:06:95:29:ee:96:93:75:06:ae:ce:7e:fe:df:
         7f:a2:31:53:9d:22:76:1a:9c:f4:e3:35:cb:00:fc:13:90:5b:
         12:31:e6:0a:a0:76:0d:5b:9e:42:be:c9:65:a8:49:45:67:30:
         e6:d0:ae:73:f1:12:ba:3f:81:d3:3c:ff:ca:bd:da:86:f1:6e:
         94:c1:64:e5:9b:a0:cd:6a:95:18:f2:89:92:c2:1b:1a:c9:57:
         13:8e:d1:05:59:7f:70:9a:23:0f:f2:2a:a8:88:36:7a:fa:96:
         52:e4:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 22:47:37 2026 by rpki-client