This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/e-6WD8D3mEFR_ZDYpwqy-7zuUX0.roa
File:                     e-6WD8D3mEFR_ZDYpwqy-7zuUX0.roa (raw, json)
Hash identifier:          oSkJln9vG/4/X+xn1LGzw2WJ6e7PPLo482idKW7VAhs=
Subject key identifier:   7B:EE:96:0F:C0:F7:98:41:51:FD:90:D8:A7:0A:B2:FB:BC:EE:51:7D
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       019B7D5AF7C377DD2A8C6582CA4EEE6A86F4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/e-6WD8D3mEFR_ZDYpwqy-7zuUX0.roa
Signing time:             Fri 02 Jan 2026 06:17:52 +0000
ROA not before:           Fri 02 Jan 2026 06:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        89.47.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:f7:c3:77:dd:2a:8c:65:82:ca:4e:ee:6a:86:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jan  2 06:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7bee960fc0f7984151fd90d8a70ab2fbbcee517d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:0e:c8:62:d8:99:c8:45:ff:40:e8:54:67:
                    42:5a:3e:cd:60:7e:36:93:22:42:79:40:87:a4:85:
                    9f:0a:ca:a1:ef:02:a5:d4:07:c0:02:b1:e4:49:dd:
                    99:1d:eb:58:6d:9c:2d:41:3b:2f:e3:fe:62:2b:7c:
                    bf:c8:d0:63:b5:56:da:b4:10:37:d8:69:49:43:fb:
                    4f:94:03:cf:49:b4:af:74:fd:52:09:36:a6:2f:66:
                    e4:e6:2c:e3:43:26:3f:2a:08:b7:8e:0a:81:2d:c7:
                    02:1b:56:a7:0b:15:66:d5:bb:87:4a:f7:ce:d0:45:
                    0c:8d:0d:7b:a3:0c:eb:ee:97:98:50:a4:01:3c:8a:
                    b7:61:66:ab:ed:b2:d0:80:26:62:b7:eb:13:aa:cd:
                    18:16:33:63:3d:41:ee:8c:ad:93:c6:81:73:4a:54:
                    c8:68:33:a4:4e:13:06:9c:06:2f:aa:d6:fd:00:b0:
                    55:1d:96:b7:ae:87:d8:a2:e6:55:b5:63:8d:18:f6:
                    75:9d:30:8b:7b:38:37:4e:4c:68:b6:36:6a:1a:ec:
                    de:11:0d:c9:df:0e:ff:7f:81:a9:24:3b:d0:22:ce:
                    7f:07:11:ea:86:e3:a0:b3:82:19:29:2a:2f:67:38:
                    2b:e0:cd:80:c6:01:01:ca:ba:71:5e:e9:29:40:d4:
                    dd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EE:96:0F:C0:F7:98:41:51:FD:90:D8:A7:0A:B2:FB:BC:EE:51:7D
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/e-6WD8D3mEFR_ZDYpwqy-7zuUX0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.47.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:43:37:92:0c:7f:f2:65:b4:0c:88:e5:45:39:a2:9a:18:16:
         4c:a9:44:07:fa:96:ff:20:d9:29:b2:74:e1:9f:d2:fa:e5:2a:
         b1:67:ad:a5:6c:0d:26:71:9b:2a:07:3c:14:05:19:d1:be:3f:
         69:6d:df:2f:0c:3b:17:2b:db:0e:24:b0:29:0d:4b:8a:35:13:
         4c:3d:c5:f1:98:f2:98:43:59:36:b7:1d:36:14:2c:87:f9:1a:
         06:8d:81:20:94:70:c5:85:0e:0d:d9:ed:dd:41:82:96:d5:2e:
         32:aa:e1:b2:a9:65:db:84:50:ee:87:5b:ca:8a:31:9a:97:b2:
         05:60:6d:34:c5:41:32:61:22:f6:a5:ad:2b:33:62:9c:10:3a:
         5a:96:8d:66:50:8a:aa:81:5e:f3:9a:ee:8c:46:61:65:d1:3e:
         c9:6f:42:30:7f:18:82:5d:36:25:65:aa:31:a2:96:cd:38:34:
         43:4d:6b:63:0c:c3:53:9f:ff:e7:9b:19:cf:02:03:14:15:1b:
         6f:46:98:7c:8a:c8:30:4b:d5:1e:fd:07:7d:19:07:1f:88:76:
         31:c6:31:22:4b:a6:2b:1b:5c:1e:d3:c1:67:4b:79:1f:e0:ff:
         a1:44:3e:ae:0e:33:29:bd:dd:f9:68:28:4c:41:fb:a8:a3:bc:
         0c:18:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:03:55 2026 by rpki-client