This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/r6qKV9nEirBUwP3KmuLyUTNtefg.roa
File:                     r6qKV9nEirBUwP3KmuLyUTNtefg.roa (raw, json)
Hash identifier:          iWqKDpTKfBVdyUC9r9QWpqk9OSg69kGIRh/unEHarFg=
Subject key identifier:   AF:AA:8A:57:D9:C4:8A:B0:54:C0:FD:CA:9A:E2:F2:51:33:6D:79:F8
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       019C067E5C05FEC252B1704D7352F852F008
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/r6qKV9nEirBUwP3KmuLyUTNtefg.roa
Signing time:             Wed 28 Jan 2026 21:24:30 +0000
ROA not before:           Wed 28 Jan 2026 21:24:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395886
IP address blocks:        45.91.81.0/24 maxlen: 24
                          45.135.116.0/24 maxlen: 24
                          45.140.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:06:7e:5c:05:fe:c2:52:b1:70:4d:73:52:f8:52:f0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Jan 28 21:24:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=afaa8a57d9c48ab054c0fdca9ae2f251336d79f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:90:93:dd:42:99:0e:02:8e:45:5a:7f:47:
                    aa:a7:02:94:a0:89:50:d0:42:97:67:dd:0b:ee:bf:
                    c2:6f:a9:f4:89:44:e9:89:07:36:91:97:2e:76:03:
                    a8:ca:c6:f8:77:02:09:2f:3b:13:ba:15:6a:0f:4e:
                    f4:1b:24:3f:40:9e:fa:74:a8:d6:e0:c3:77:68:a5:
                    18:04:cc:00:c9:b9:1b:08:dc:e1:19:da:d3:c8:f4:
                    e0:77:c9:e4:93:cb:8d:f5:55:65:56:dd:af:2c:25:
                    a4:a1:e4:8b:79:fe:fd:4e:56:0e:29:7a:09:eb:fd:
                    ac:9c:a6:c0:e8:14:3a:6f:0a:ff:54:b3:27:70:13:
                    5e:59:02:5f:56:ff:3a:23:3e:58:cb:0c:50:35:3c:
                    8a:4f:b5:84:70:08:58:89:d9:a2:5e:e3:fa:1e:a1:
                    f7:73:e1:ab:c8:8a:c1:e4:a1:e8:59:ce:99:43:aa:
                    f6:ea:0c:78:9a:99:cf:88:3f:bd:82:c3:34:17:c8:
                    63:2f:2c:b0:b5:01:c1:51:e7:10:14:df:79:3c:c8:
                    1e:5c:40:f8:08:20:27:32:ef:93:91:6d:e0:b8:13:
                    d4:75:1b:d5:21:a1:02:94:96:a3:93:08:6e:a4:0a:
                    ec:7c:8d:08:2d:65:90:8b:0b:9b:91:9a:24:4d:75:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AA:8A:57:D9:C4:8A:B0:54:C0:FD:CA:9A:E2:F2:51:33:6D:79:F8
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/r6qKV9nEirBUwP3KmuLyUTNtefg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.81.0/24
                  45.135.116.0/24
                  45.140.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:38:ae:81:67:ae:56:aa:ac:ee:51:3c:2d:87:38:c7:cd:b1:
         9b:33:d1:7d:a9:0b:5a:f1:42:1e:54:cf:92:01:eb:cb:fb:54:
         76:27:47:92:14:03:84:2d:78:14:f0:e2:cb:5a:eb:fb:75:85:
         cb:61:00:3b:fa:3f:4b:32:cb:16:50:46:d6:cd:6b:19:fe:76:
         93:da:d2:38:58:ca:43:d8:03:b4:47:50:1d:7e:15:62:fc:8c:
         ef:92:cd:3e:8b:9c:04:a7:0e:35:16:c3:a8:f5:18:4a:5e:92:
         5d:83:85:5d:66:55:73:ce:16:8e:56:c3:01:b6:c0:9a:3f:32:
         89:f7:eb:10:f6:79:1c:11:fe:0d:ab:cc:5d:55:09:bb:cd:7f:
         fb:6a:e5:4c:02:82:3b:84:cf:fa:ae:91:a1:56:13:47:f2:43:
         39:b6:b7:bb:66:0a:94:47:e1:90:5a:26:5f:4b:36:fb:29:78:
         5b:e9:87:2f:e0:72:cf:6d:21:61:71:d4:57:e0:26:76:d3:3d:
         e3:19:72:d0:aa:5d:bc:b2:bf:39:21:d4:7c:59:52:76:23:b0:
         93:17:e9:79:71:f3:68:12:7d:89:d5:ed:38:08:82:f0:55:ba:
         21:41:06:18:c9:5d:d4:5d:d2:82:28:55:ea:84:ae:b8:18:c4:
         91:6d:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 03:48:05 2026 by rpki-client