This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/T6n7EDa7L7y2Likx1LJt9fY0e84.roa
File:                     T6n7EDa7L7y2Likx1LJt9fY0e84.roa (raw, json)
Hash identifier:          1EysGC86dcCWQcka9wvraq3MLvlF/xfglQjOwZsEyRQ=
Subject key identifier:   4F:A9:FB:10:36:BB:2F:BC:B6:2E:29:31:D4:B2:6D:F5:F6:34:7B:CE
Certificate issuer:       /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial:       019B76EB2CEB07A746EAAC0A9BED63056FFA
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/T6n7EDa7L7y2Likx1LJt9fY0e84.roa
Signing time:             Thu 01 Jan 2026 00:18:02 +0000
ROA not before:           Thu 01 Jan 2026 00:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202936
IP address blocks:        185.148.64.0/22 maxlen: 23
                          185.241.232.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:2c:eb:07:a7:46:ea:ac:0a:9b:ed:63:05:6f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
        Validity
            Not Before: Jan  1 00:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4fa9fb1036bb2fbcb62e2931d4b26df5f6347bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:06:66:5e:2d:ee:18:f8:22:98:e0:55:1b:0f:
                    b8:04:d5:87:f1:4a:ff:9a:55:53:ed:89:73:df:1c:
                    87:e2:26:1b:f1:f7:a6:6f:75:b8:07:a9:b2:7d:67:
                    46:10:24:5f:55:4a:82:66:f6:5f:0e:94:fb:92:1b:
                    38:d9:ba:40:f3:63:c0:4e:02:7d:e3:83:6f:fc:eb:
                    00:be:79:60:17:93:a8:fa:30:e7:82:e1:4d:17:a4:
                    79:f4:d2:7e:77:60:b6:7c:a1:fb:5d:f3:07:bd:ab:
                    4e:55:56:7d:df:74:6c:6a:55:de:8c:dd:fb:6c:fd:
                    43:f6:7a:04:ff:da:bc:3c:c2:3a:f2:ec:e9:45:e8:
                    31:d0:13:d8:e7:e7:41:97:e2:12:d5:1b:43:a4:49:
                    47:96:87:07:6e:b9:21:3c:9d:64:33:47:6b:3c:b7:
                    66:0d:51:48:0e:49:a5:07:fc:ba:9b:da:57:de:4c:
                    28:91:15:aa:69:05:77:18:8c:01:79:3f:8b:7b:46:
                    a9:d6:f4:34:16:99:93:ef:27:49:3b:9a:0e:4f:98:
                    31:63:87:b0:2d:b4:44:d2:9a:1e:28:25:cd:f4:bb:
                    ab:b6:2e:e6:2a:0a:17:8d:7a:0f:b2:18:23:71:13:
                    18:1e:a0:b6:6c:81:fc:f6:c4:b4:d1:f6:3e:35:47:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:FB:10:36:BB:2F:BC:B6:2E:29:31:D4:B2:6D:F5:F6:34:7B:CE
            X509v3 Authority Key Identifier:
                keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/T6n7EDa7L7y2Likx1LJt9fY0e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.148.64.0/22
                  185.241.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:27:dd:6b:a1:85:d7:46:93:a7:40:5e:4b:fc:28:2d:56:a3:
         bf:03:e8:c1:96:a5:ce:f6:d1:79:c4:66:70:16:ec:eb:e6:b6:
         1a:04:08:bd:4f:9e:58:dc:af:46:de:a0:ef:ad:de:91:85:80:
         3a:0d:3a:3f:2c:e4:8b:26:ff:74:c5:2f:61:d7:50:37:8f:5d:
         7e:fd:9d:dc:67:c4:4e:ba:d0:94:3f:b0:4d:8e:cf:6a:de:c2:
         bf:ef:fb:e8:57:8c:01:24:c1:19:1b:2c:f7:70:49:c1:89:5d:
         01:41:a2:fc:94:84:a4:c4:a6:31:cd:e7:46:18:3b:59:ca:ac:
         77:22:1c:d6:b8:e2:df:1a:c9:07:59:43:10:56:9f:c7:96:2f:
         69:b7:07:9a:62:1b:41:14:43:af:01:8c:e5:20:07:27:ed:79:
         b6:6a:d4:5d:ad:9e:8d:0f:fb:33:98:72:3e:2e:61:62:12:3b:
         14:d1:bd:60:04:21:cc:e7:68:14:50:d2:fc:bd:b4:84:41:9d:
         73:cd:c2:1a:13:50:1d:f8:37:e3:47:2e:63:22:a4:b1:b1:c7:
         33:99:5c:69:0c:4a:98:26:e6:57:55:6d:1a:80:9d:4f:99:c6:
         81:e8:e2:ed:10:9c:6d:af:b5:16:c8:6e:60:e1:11:d0:54:91:
         df:80:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:12 2026 by rpki-client