This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/6yY6DHXCUp0-mtoCCLRQRpOy0Lg.roa
File:                     6yY6DHXCUp0-mtoCCLRQRpOy0Lg.roa (raw, json)
Hash identifier:          2i0eUBbBDwosjWl+pJkRt8nwBhZb81HA+7BnLWvezVQ=
Subject key identifier:   EB:26:3A:0C:75:C2:52:9D:3E:9A:DA:02:08:B4:50:46:93:B2:D0:B8
Certificate issuer:       /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial:       019BDA643FE0C54338A56ED4516E76F2288B
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/6yY6DHXCUp0-mtoCCLRQRpOy0Lg.roa
Signing time:             Tue 20 Jan 2026 07:52:41 +0000
ROA not before:           Tue 20 Jan 2026 07:52:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49082
IP address blocks:        46.19.17.0/24 maxlen: 24
                          46.19.18.0/23 maxlen: 23
                          46.19.20.0/22 maxlen: 22
                          95.130.216.0/24 maxlen: 24
                          95.130.218.0/23 maxlen: 23
                          95.130.220.0/22 maxlen: 22
                          185.4.36.0/22 maxlen: 22
                          2a02:6340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:da:64:3f:e0:c5:43:38:a5:6e:d4:51:6e:76:f2:28:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
        Validity
            Not Before: Jan 20 07:52:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb263a0c75c2529d3e9ada0208b4504693b2d0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:c6:ac:ec:bb:a1:8b:25:0d:65:09:c5:f5:
                    13:25:d6:d0:5b:62:3d:24:96:38:5c:e2:01:2a:7d:
                    23:f4:6e:b3:9e:88:25:c2:18:14:97:38:64:06:94:
                    4e:66:ae:4d:19:32:5c:cd:82:48:82:34:96:8e:0b:
                    8e:7c:68:57:f0:5d:26:01:91:61:9e:5d:a8:0b:94:
                    2f:d6:02:63:08:05:8d:3c:7d:ef:86:b7:ca:bd:fe:
                    d6:97:cb:4a:47:4b:a2:4f:a4:96:2b:0a:8f:d5:6e:
                    9f:b9:88:ac:d9:54:7d:c6:2c:8d:6a:0b:66:fb:d3:
                    40:2c:56:c8:d4:20:ef:37:58:fc:7d:0c:4e:87:78:
                    0c:f9:c8:3b:08:e2:cd:d9:8f:49:58:8b:70:71:35:
                    5a:e1:f3:9a:2d:41:73:89:4d:2b:44:68:09:b7:5a:
                    5b:10:e9:89:85:35:3b:7b:0f:5e:23:d8:92:75:b9:
                    03:8c:17:a6:0f:19:af:a0:00:ce:80:4a:19:68:1d:
                    45:20:9c:b9:09:f2:0d:bb:ce:ab:e0:f7:4d:31:26:
                    81:62:60:15:b3:ae:e9:59:5d:aa:b4:be:3c:2b:5e:
                    0c:ed:6e:35:c4:ea:49:9f:6e:fd:b5:76:0a:70:e2:
                    94:3d:52:4b:4b:5d:4f:56:bf:2c:60:5a:90:22:29:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:26:3A:0C:75:C2:52:9D:3E:9A:DA:02:08:B4:50:46:93:B2:D0:B8
            X509v3 Authority Key Identifier:
                keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/6yY6DHXCUp0-mtoCCLRQRpOy0Lg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.19.17.0-46.19.23.255
                  95.130.216.0/24
                  95.130.218.0-95.130.223.255
                  185.4.36.0/22
                IPv6:
                  2a02:6340::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:e7:8a:39:35:f2:c7:e4:94:64:fc:5c:e2:c2:bb:1c:2b:
         ce:56:6e:62:02:5e:5c:0b:6d:88:81:16:e2:c3:3d:bb:aa:34:
         e8:f7:c7:d6:ab:f4:80:b8:af:ab:40:97:b8:31:7d:7b:44:39:
         39:ca:cd:41:c4:52:fd:5e:5c:78:5e:c5:ce:64:02:5f:a1:7c:
         60:47:cf:9f:5e:d8:2f:20:27:89:3f:3d:f7:6d:e1:d4:14:97:
         54:8d:12:53:80:10:82:48:02:69:f8:00:fc:0e:e7:98:af:67:
         0a:03:58:c6:96:5e:94:08:5b:93:22:32:d5:8a:24:31:85:f9:
         c4:88:5f:2c:a8:3a:c0:12:e9:99:01:e5:8e:09:6a:17:2b:ec:
         da:ea:9c:67:b6:2e:92:69:a3:c9:65:87:b9:81:33:40:98:c7:
         ea:f1:06:b8:4a:e0:75:fb:ed:1c:76:ff:5f:53:85:22:42:52:
         47:14:d3:16:65:c6:76:fd:7b:57:b4:a9:8b:44:33:60:0a:9a:
         4a:09:68:e0:28:3e:52:92:e7:33:b0:16:47:1b:27:94:d8:72:
         a8:5a:02:53:db:d1:7f:48:86:4f:e2:ac:26:3e:3b:3a:64:d4:
         55:16:e5:63:af:ef:12:b8:4d:75:9a:e5:33:cd:7b:b7:8a:cd:
         28:e4:f4:33
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZvaZD/gxUM4pW7UUW528iiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY2MmY3ZTg5OTgxNzQ0MTE4MDkzNWY0MmI4MmEzOTk4
MGEyZGMwHhcNMjYwMTIwMDc1MjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjI2M2EwYzc1YzI1MjlkM2U5YWRhMDIwOGI0NTA0NjkzYjJkMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4fGrOy7oYslDWUJxfUTJdbQW2I9
JJY4XOIBKn0j9G6znoglwhgUlzhkBpROZq5NGTJczYJIgjSWjguOfGhX8F0mAZFh
nl2oC5Qv1gJjCAWNPH3vhrfKvf7Wl8tKR0uiT6SWKwqP1W6fuYis2VR9xiyNagtm
+9NALFbI1CDvN1j8fQxOh3gM+cg7COLN2Y9JWItwcTVa4fOaLUFziU0rRGgJt1pb
EOmJhTU7ew9eI9iSdbkDjBemDxmvoADOgEoZaB1FIJy5CfINu86r4PdNMSaBYmAV
s67pWV2qtL48K14M7W41xOpJn279tXYKcOKUPVJLS11PVr8sYFqQIimCBwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFOsmOgx1wlKdPpraAgi0UEaTstC4MB8GA1UdIwQY
MBaAFHcvYvfomYF0QRgJNfQrgqOZgKLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTkt
YTA2MWE4Yzc3ZjE2LzEvNnlZNkRIWENVcDAtbXRvQ0NMUlFScE95MExnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTktYTA2MWE4Yzc3ZjE2
LzEvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoMAwDBAAuExED
BAMuExADBABfgtgwDAMEAV+C2gMEBV+CwAMEArkEJDANBAIAAjAHAwUAKgJjQDAN
BgkqhkiG9w0BAQsFAAOCAQEALyvnijk18sfklGT8XOLCuxwrzlZuYgJeXAttiIEW
4sM9u6o06PfH1qv0gLivq0CXuDF9e0Q5OcrNQcRS/V5ceF7FzmQCX6F8YEfPn17Y
LyAniT89923h1BSXVI0SU4AQgkgCafgA/A7nmK9nCgNYxpZelAhbkyIy1YokMYX5
xIhfLKg6wBLpmQHljglqFyvs2uqcZ7YukmmjyWWHuYEzQJjH6vEGuErgdfvtHHb/
X1OFIkJSRxTTFmXGdv17V7Spi0QzYAqaSglo4Cg+UpLnM7AWRxsnlNhyqFoCU9vR
f0iGT+KsJj47OmTUVRblY6/vErhNdZrlM817t4rNKOT0Mw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:47 2026 by rpki-client