This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/FD6SignaLxU1mMOUn7_cvBf_Yic.roa
File:                     FD6SignaLxU1mMOUn7_cvBf_Yic.roa (raw, json)
Hash identifier:          Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=
Subject key identifier:   14:3E:92:8A:09:DA:2F:15:35:98:C3:94:9F:BF:DC:BC:17:FF:62:27
Certificate issuer:       /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial:       019B79ECC6F3D4EC3547A3016C92315E845A
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/FD6SignaLxU1mMOUn7_cvBf_Yic.roa
Signing time:             Thu 01 Jan 2026 14:18:39 +0000
ROA not before:           Thu 01 Jan 2026 14:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1299
IP address blocks:        93.190.72.0/21 maxlen: 24
                          185.70.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:c6:f3:d4:ec:35:47:a3:01:6c:92:31:5e:84:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
        Validity
            Not Before: Jan  1 14:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=143e928a09da2f153598c3949fbfdcbc17ff6227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:c4:74:7c:f0:41:e5:8c:53:95:13:26:2a:
                    86:10:0d:b4:0f:f3:eb:87:e8:a9:13:52:e5:b8:82:
                    3e:1d:1f:c2:e8:67:2e:bd:5f:96:16:3e:64:db:2c:
                    56:ee:06:83:80:97:47:a4:e4:01:ca:f5:c9:cc:2d:
                    e0:d2:6d:a4:f3:e4:64:20:6a:bf:48:93:1e:d4:1c:
                    78:a2:b6:f8:c3:d3:e6:9d:d8:5a:96:c2:c4:6a:06:
                    f0:79:7e:7a:34:55:28:c1:7a:61:b1:20:6d:b0:ea:
                    a8:b9:10:38:1f:a9:b8:1c:e2:e8:0f:5e:40:c9:8d:
                    5f:8f:35:02:72:19:62:af:a0:4c:b2:41:4c:d8:c7:
                    90:a6:46:f5:8b:3c:59:d2:6e:1c:bc:1f:f4:17:8a:
                    d0:37:94:88:8e:31:d8:d3:ed:ab:bc:18:2f:9c:0a:
                    29:92:c4:e0:ee:50:b6:50:fb:3e:d6:f2:e0:a7:0d:
                    13:61:17:29:29:dd:13:ed:cf:b7:c1:61:b8:cf:ab:
                    34:d4:db:81:7e:6b:cf:49:cd:1a:b4:22:40:05:61:
                    7a:28:2a:7f:40:5e:c4:7f:2f:d8:c4:9e:9a:3b:5a:
                    b4:61:22:57:74:fa:c1:b9:66:f3:15:9f:dd:3d:5d:
                    6b:9a:ad:01:d4:3f:6e:24:2b:46:35:4d:27:02:3b:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3E:92:8A:09:DA:2F:15:35:98:C3:94:9F:BF:DC:BC:17:FF:62:27
            X509v3 Authority Key Identifier:
                keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/FD6SignaLxU1mMOUn7_cvBf_Yic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.72.0/21
                  185.70.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:76:f8:cc:21:be:6f:17:4a:e8:d3:62:db:c0:6a:f7:8f:58:
         3a:4b:13:be:49:b5:f5:b7:30:b3:52:07:40:37:a1:ed:52:11:
         4e:14:85:9b:33:d5:8c:4d:00:8a:4e:e3:bc:aa:24:f5:de:fc:
         75:8a:13:83:03:11:5e:8b:0f:59:2e:f8:95:25:9f:f9:02:f3:
         6c:5a:25:f9:c8:c8:0f:d0:0c:06:75:bf:49:85:18:a7:93:a3:
         57:ef:b6:5a:6b:b0:14:3f:8f:77:5d:e4:b4:19:dd:e3:2d:0d:
         be:40:4a:3a:25:4a:09:16:ab:0a:2d:16:a7:99:a3:a6:f3:52:
         2e:1b:5e:4a:d5:c4:43:3d:cb:14:ba:bd:cc:06:d8:85:21:66:
         58:a9:e4:be:82:60:a3:00:59:0d:94:ef:7a:4f:51:1c:05:e7:
         e9:03:02:4b:35:00:70:a4:2f:95:a2:c0:3e:cb:16:3c:32:99:
         b4:ea:fe:30:7e:40:73:d8:62:c5:9a:e7:9d:3c:93:e7:f8:88:
         08:f7:5c:d2:f7:43:ec:08:31:90:02:b7:00:75:85:f8:1e:ae:
         06:2e:85:91:4d:c1:c6:29:39:90:02:30:4a:84:67:2e:8c:c6:
         44:be:17:40:71:f8:86:ee:41:d0:2e:c3:0e:f0:d4:d8:a4:f9:
         87:be:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:22:15 2026 by rpki-client