This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa
File:                     l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa (raw, json)
Hash identifier:          mR/Sx8Gef6jaLXJaUX0OcwA84CHIBBS3pL7jXOr7b50=
Subject key identifier:   97:A7:43:EB:F6:30:60:6D:86:A0:0C:82:C1:53:48:19:32:16:C8:5D
Certificate issuer:       /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial:       019B7C7FEE85F73F36DF140155AC8F2E1899
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa
Signing time:             Fri 02 Jan 2026 02:18:37 +0000
ROA not before:           Fri 02 Jan 2026 02:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56958
IP address blocks:        45.130.16.0/22 maxlen: 22
                          45.142.228.0/22 maxlen: 22
                          178.211.133.0/24 maxlen: 24
                          185.237.234.0/23 maxlen: 23
                          201.46.112.0/23 maxlen: 23
                          2a12:d280::/31 maxlen: 31
                          2a12:d282::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:ee:85:f7:3f:36:df:14:01:55:ac:8f:2e:18:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
        Validity
            Not Before: Jan  2 02:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=97a743ebf630606d86a00c82c15348193216c85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5b:db:4a:79:41:bb:19:46:6c:a8:11:c1:07:
                    d4:bd:7e:5a:fd:52:11:c3:24:dd:e3:73:00:8d:33:
                    75:63:ba:9a:68:fe:3a:8d:71:22:36:c5:2c:f3:50:
                    c0:f2:dc:5d:a1:2e:89:41:80:f2:35:a5:80:12:78:
                    e6:d3:22:a0:2c:35:94:44:e0:cb:f3:1a:fd:bb:cb:
                    de:40:0f:d9:51:f5:b4:db:ca:00:01:46:79:1c:07:
                    bd:c6:35:aa:f6:e2:55:46:2a:d3:12:72:40:91:64:
                    c7:95:70:c1:e6:ed:16:e4:2b:ea:4f:24:ba:e3:8c:
                    6a:02:04:a3:56:4e:80:2d:5e:46:b5:4e:d9:48:66:
                    11:70:1e:a2:34:cb:3b:93:4f:c4:4c:c0:de:d7:39:
                    44:45:34:b9:e7:77:fe:b2:55:c5:71:ae:c3:67:04:
                    1c:d2:bc:5c:89:34:b6:25:20:be:4b:82:2a:2d:d2:
                    1a:4c:f2:4a:b8:7a:3c:0a:4c:4d:ac:f0:6a:da:60:
                    16:0a:88:78:f4:81:85:a4:48:b1:79:2b:58:29:3a:
                    f4:d7:64:65:96:c8:b3:70:37:56:c5:49:63:31:76:
                    7d:33:bd:3a:c0:4e:23:65:7a:87:03:27:bb:8f:ff:
                    f7:f4:d4:06:ef:37:f4:3e:95:45:fa:06:01:55:c2:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A7:43:EB:F6:30:60:6D:86:A0:0C:82:C1:53:48:19:32:16:C8:5D
            X509v3 Authority Key Identifier:
                keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.16.0/22
                  45.142.228.0/22
                  178.211.133.0/24
                  185.237.234.0/23
                  201.46.112.0/23
                IPv6:
                  2a12:d280::/30

    Signature Algorithm: sha256WithRSAEncryption
         a3:c2:18:18:5c:08:e7:e6:dc:67:29:b8:6d:ca:f6:04:0c:b0:
         3a:21:ef:4a:9e:5f:2e:2b:ff:5b:65:5f:66:f7:bb:f5:7d:b5:
         b8:dd:6b:45:bb:fa:f5:6f:5c:18:9e:e3:28:2c:d6:77:0d:48:
         93:76:44:c0:46:1c:b4:ca:08:21:df:6b:09:a1:a8:f3:51:f5:
         58:11:44:ea:db:5a:8e:28:4e:80:7f:7d:81:96:e6:54:30:fa:
         fa:97:2a:f6:76:3c:a7:2a:2a:9e:bf:b4:1b:13:d3:58:eb:3b:
         56:2a:b4:15:b9:09:c5:57:c2:0b:3e:56:b4:27:f8:ff:66:90:
         36:48:3c:bb:bf:13:89:3f:58:51:50:7d:4a:cc:a8:78:aa:4b:
         1c:29:b6:b1:13:5f:4e:08:35:4b:ed:4d:a2:ab:f3:82:6d:88:
         f5:50:f3:04:5d:fb:36:6a:20:39:b1:67:2f:5a:44:1f:c9:a6:
         0f:81:0e:3f:64:3c:e1:f0:17:39:b9:72:a7:49:f6:0c:eb:13:
         4b:bc:05:dc:09:de:29:9c:cc:cf:fd:c7:78:dc:2b:2d:f5:9f:
         6a:9c:91:0a:ce:1d:c6:c3:dc:06:e8:e8:57:d8:e4:45:87:92:
         10:fa:19:ac:8a:f9:e7:7a:a6:6a:cd:2a:45:32:29:ab:c7:fb:
         f5:fb:05:c2
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZt8f+6F9z823xQBVayPLhiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZWIzM2MyY2VmYjVkYTM0NjA3YjAwYjUwMDVlNDRiNzU1
MjRhMWYwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2E3NDNlYmY2MzA2MDZkODZhMDBjODJjMTUzNDgxOTMyMTZjODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FvbSnlBuxlGbKgRwQfUvX5a/VIR
wyTd43MAjTN1Y7qaaP46jXEiNsUs81DA8txdoS6JQYDyNaWAEnjm0yKgLDWURODL
8xr9u8veQA/ZUfW028oAAUZ5HAe9xjWq9uJVRirTEnJAkWTHlXDB5u0W5CvqTyS6
44xqAgSjVk6ALV5GtU7ZSGYRcB6iNMs7k0/ETMDe1zlERTS553f+slXFca7DZwQc
0rxciTS2JSC+S4IqLdIaTPJKuHo8CkxNrPBq2mAWCoh49IGFpEixeStYKTr012Rl
lsizcDdWxUljMXZ9M706wE4jZXqHAye7j//39NQG7zf0PpVF+gYBVcLqUQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFJenQ+v2MGBthqAMgsFTSBkyFshdMB8GA1UdIwQY
MBaAFJjrM8LO+12jRgewC1AF5Et1UkofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83NmIxZDMtNGZkOS00NmNmLTgzZTYt
MjBjNGRjMWU0YTc3LzEvbDZkRDZfWXdZRzJHb0F5Q3dWTklHVElXeUYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83NmIxZDMtNGZkOS00NmNmLTgzZTYtMjBjNGRjMWU0YTc3
LzEvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLYIQAwQC
LY7kAwQAstOFAwQBue3qAwQByS5wMA0EAgACMAcDBQIqEtKAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjwhgYXAjn5txnKbhtyvYEDLA6Ie9Knl8uK/9bZV9m97v1fbW43WtF
u/r1b1wYnuMoLNZ3DUiTdkTARhy0yggh32sJoajzUfVYEUTq21qOKE6Af32BluZU
MPr6lyr2djynKiqev7QbE9NY6ztWKrQVuQnFV8ILPla0J/j/ZpA2SDy7vxOJP1hR
UH1KzKh4qkscKbaxE19OCDVL7U2iq/OCbYj1UPMEXfs2aiA5sWcvWkQfyaYPgQ4/
ZDzh8Bc5uXKnSfYM6xNLvAXcCd4pnMzP/cd43Cst9Z9qnJEKzh3Gw9wG6OhX2ORF
h5IQ+hmsivnneqZqzSpFMimrx/v1+wXC
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:42 2026 by rpki-client