This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/rR6bC3nGRb0R25RzXiMQeGJ-1sc.roa
File:                     rR6bC3nGRb0R25RzXiMQeGJ-1sc.roa (raw, json)
Hash identifier:          0alGeHDZjg/Rc5/CXBTY3qIbzWIm6w6jf9n9/91FunA=
Subject key identifier:   AD:1E:9B:0B:79:C6:45:BD:11:DB:94:73:5E:23:10:78:62:7E:D6:C7
Certificate issuer:       /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial:       019B7A5B87BAF0A34B9B012C2E9335296706
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/rR6bC3nGRb0R25RzXiMQeGJ-1sc.roa
Signing time:             Thu 01 Jan 2026 16:19:37 +0000
ROA not before:           Thu 01 Jan 2026 16:19:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211251
IP address blocks:        79.98.176.0/22 maxlen: 24
                          79.98.176.0/24 maxlen: 24
                          79.98.177.0/24 maxlen: 24
                          79.98.179.0/24 maxlen: 24
                          213.171.64.0/23 maxlen: 23
                          213.171.66.0/23 maxlen: 23
                          213.171.66.0/24 maxlen: 24
                          213.171.67.0/24 maxlen: 24
                          213.171.68.0/23 maxlen: 23
                          213.171.72.0/23 maxlen: 23
                          213.171.72.0/24 maxlen: 24
                          213.171.73.0/24 maxlen: 24
                          213.171.74.0/24 maxlen: 24
                          213.171.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:87:ba:f0:a3:4b:9b:01:2c:2e:93:35:29:67:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
        Validity
            Not Before: Jan  1 16:19:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad1e9b0b79c645bd11db94735e231078627ed6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:70:62:50:ed:da:52:26:54:9b:2c:6e:f5:
                    66:e6:4f:c5:5f:47:58:b2:64:98:00:4e:89:40:00:
                    be:8a:0b:d2:70:61:49:12:95:01:fa:51:93:a8:3d:
                    a1:6f:f3:3e:29:2e:3c:21:70:d4:56:b4:ed:04:a1:
                    40:6a:80:91:77:d4:7a:47:d7:d5:1d:31:bb:59:1c:
                    80:8d:63:c0:f1:28:82:19:8c:87:cd:c5:f5:67:05:
                    b4:63:fe:af:b1:15:93:a0:ac:94:74:89:18:a7:d7:
                    48:68:e2:7a:93:db:3a:92:8b:b0:cd:75:bc:ad:d4:
                    14:11:9f:ab:d3:c2:e2:b1:b2:e0:f2:14:ed:55:0c:
                    c7:40:52:3f:d5:88:af:77:52:fb:5a:77:00:c6:22:
                    7b:1e:5f:48:40:2b:bc:d9:5b:b6:7d:e1:e6:86:96:
                    77:ec:b1:ca:ee:e3:96:d5:8a:3f:a9:53:db:f4:b5:
                    8a:95:26:13:c1:16:fb:51:0f:3e:56:39:4d:f7:3b:
                    da:14:c1:97:1e:ae:da:e6:89:70:91:aa:ac:5f:f2:
                    f5:86:29:19:65:ee:b9:9c:4d:25:c7:24:c9:86:f1:
                    e5:12:43:27:f7:b8:93:6f:f1:b8:ad:5a:7b:b6:d6:
                    25:24:8a:75:c5:55:ed:7e:04:d7:22:03:6f:56:8a:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1E:9B:0B:79:C6:45:BD:11:DB:94:73:5E:23:10:78:62:7E:D6:C7
            X509v3 Authority Key Identifier:
                keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/rR6bC3nGRb0R25RzXiMQeGJ-1sc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.98.176.0/22
                  213.171.64.0-213.171.69.255
                  213.171.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:b6:55:07:47:9e:92:e0:28:86:9c:5f:0d:f7:e2:f4:75:77:
         6f:8d:8c:17:9e:37:7d:e9:de:8d:29:e2:2f:0a:8d:c4:e6:4d:
         d7:df:58:d4:42:0c:41:d3:d6:c0:e4:6f:35:12:c6:60:f4:ae:
         56:5c:10:82:50:ed:dc:e8:ff:25:8c:88:26:f3:d7:4e:5e:38:
         26:e3:e3:cb:12:aa:e4:e2:4d:d8:c7:2c:d0:49:4e:dc:2a:15:
         41:c0:6f:8e:bf:41:60:77:12:16:9f:c2:bc:6e:5e:f5:e5:e2:
         ee:54:0e:ab:0a:fa:05:b5:aa:73:14:45:d9:ae:00:02:34:fc:
         9d:19:bf:6d:29:03:5d:82:af:26:5d:27:31:66:cb:42:73:d2:
         76:36:8c:c7:53:e2:2e:a3:10:d2:f8:7d:a6:97:8e:7f:30:a6:
         12:fb:1a:14:bc:5c:4b:b2:34:e3:f3:f7:03:d4:31:0a:38:32:
         c0:4f:41:cb:62:32:a6:6a:7c:ce:c8:df:1e:72:d4:b3:6b:c2:
         13:68:8a:2c:6a:79:bb:11:9d:cd:2b:e8:2f:8a:6a:3c:b5:cf:
         82:ad:53:b0:9b:e4:35:1e:3f:e9:6f:22:8b:da:ea:df:7e:8b:
         1c:7e:90:52:f8:45:3e:aa:c0:87:45:3f:7f:b7:0b:c4:d2:48:
         c4:cf:20:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:10:25 2026 by rpki-client