This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/6Y7UUUXvw-PaME2ae-Db8-eLow4.roa
File:                     6Y7UUUXvw-PaME2ae-Db8-eLow4.roa (raw, json)
Hash identifier:          93NzqW0eaEjLpzAyzS+ITs+WJkp6mSQ9IPQy/xcIc0U=
Subject key identifier:   E9:8E:D4:51:45:EF:C3:E3:DA:30:4D:9A:7B:E0:DB:F3:E7:8B:A3:0E
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       019B7DCB0BA616DEF28055C38F43D1520965
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/6Y7UUUXvw-PaME2ae-Db8-eLow4.roa
Signing time:             Fri 02 Jan 2026 08:20:17 +0000
ROA not before:           Fri 02 Jan 2026 08:20:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206557
IP address blocks:        77.222.160.0/19 maxlen: 24
                          81.93.96.0/20 maxlen: 24
                          85.113.160.0/19 maxlen: 24
                          213.161.160.0/19 maxlen: 24
                          2001:4b80::/29 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:0b:a6:16:de:f2:80:55:c3:8f:43:d1:52:09:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Jan  2 08:20:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e98ed45145efc3e3da304d9a7be0dbf3e78ba30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:e6:f1:2f:f4:ba:a0:ce:e7:8c:44:38:08:
                    38:ce:02:cb:78:30:98:fa:b9:63:3b:d1:5d:ca:f2:
                    4c:45:47:7e:ae:d4:9f:39:b9:ad:af:97:dc:55:2c:
                    5a:a3:01:73:84:16:d6:cb:ea:75:3f:82:85:99:f4:
                    1d:ed:37:c8:5b:c5:46:7f:51:29:a8:75:77:99:76:
                    96:87:d2:78:6b:23:10:f1:49:d5:b6:19:a5:54:0c:
                    cb:8f:2b:5e:c5:de:45:2c:d5:3e:a3:c4:f3:c4:8e:
                    a2:b6:b0:82:b0:a0:7e:0a:f6:bd:68:90:37:1c:b1:
                    c8:55:e0:d7:e7:28:0f:12:2a:3b:57:89:d3:77:e6:
                    61:ec:6b:68:84:41:c9:ad:a0:b7:06:64:f8:cb:6b:
                    fc:2c:69:6e:1c:d7:e0:04:91:92:a7:ce:c3:82:38:
                    d6:21:86:5f:09:5f:1c:07:3a:18:2a:23:8f:59:4c:
                    67:16:0f:70:aa:f7:a3:03:6c:ed:3d:a1:de:9d:05:
                    42:42:5d:87:32:dd:d8:8e:5e:71:81:b3:92:0a:6d:
                    d1:9c:5e:9f:58:75:5e:cc:99:c0:f4:3e:cc:d7:78:
                    3d:b2:18:06:2f:b9:6d:9a:99:97:0f:36:c9:98:dc:
                    3d:dc:a7:20:bf:96:c5:1a:52:6f:bf:68:95:0d:4d:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8E:D4:51:45:EF:C3:E3:DA:30:4D:9A:7B:E0:DB:F3:E7:8B:A3:0E
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/6Y7UUUXvw-PaME2ae-Db8-eLow4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.222.160.0/19
                  81.93.96.0/20
                  85.113.160.0/19
                  213.161.160.0/19
                IPv6:
                  2001:4b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:c5:09:d9:ce:0a:8d:99:fd:28:85:9c:55:d9:50:4e:40:73:
         96:30:4c:67:ea:63:fb:47:4c:02:22:5b:3f:33:25:39:95:00:
         60:08:7e:d3:00:05:77:1e:6e:06:bf:12:53:9f:fb:71:b9:4f:
         03:71:18:d4:eb:39:08:d1:d4:0e:0b:0f:43:80:43:44:57:63:
         da:f9:6f:a7:61:cb:73:5c:29:75:e5:ac:96:ad:90:09:3b:19:
         59:66:fb:f9:bf:a2:1c:f1:79:ee:aa:9e:1a:80:19:5f:b5:df:
         3a:1c:c9:06:d1:62:8d:9f:b2:84:91:4e:d9:62:e4:61:5a:66:
         61:35:42:e8:83:43:de:6a:84:3f:d4:3a:55:b4:38:e7:2b:38:
         f2:2e:08:0a:46:73:35:6e:48:16:14:f9:07:a7:12:cb:32:5f:
         36:98:2e:e5:a5:46:fe:3f:c3:dc:cc:0d:11:bf:0d:da:7e:07:
         f6:df:ff:6e:25:cf:7c:b4:f5:f7:0e:6f:fa:74:a1:7f:36:66:
         6f:d5:f7:8d:4f:32:d8:5a:22:55:82:c2:e6:14:48:93:81:d6:
         2d:02:2f:cb:65:ca:33:24:a0:74:b9:82:d0:db:e2:75:f0:0e:
         4a:81:0a:66:f1:76:00:c9:80:09:c5:49:fe:e7:16:00:3f:f0:
         41:1a:69:98
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZt9ywumFt7ygFXDj0PRUgllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjIwMjUwZDRjZGQzNjY3MTliOTY5ZDZmNDEyMzAxYzEz
ZWI5MDEwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOThlZDQ1MTQ1ZWZjM2UzZGEzMDRkOWE3YmUwZGJmM2U3OGJhMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6/m8S/0uqDO54xEOAg4zgLLeDCY
+rljO9FdyvJMRUd+rtSfObmtr5fcVSxaowFzhBbWy+p1P4KFmfQd7TfIW8VGf1Ep
qHV3mXaWh9J4ayMQ8UnVthmlVAzLjytexd5FLNU+o8TzxI6itrCCsKB+Cva9aJA3
HLHIVeDX5ygPEio7V4nTd+Zh7GtohEHJraC3BmT4y2v8LGluHNfgBJGSp87DgjjW
IYZfCV8cBzoYKiOPWUxnFg9wqvejA2ztPaHenQVCQl2HMt3Yjl5xgbOSCm3RnF6f
WHVezJnA9D7M13g9shgGL7ltmpmXDzbJmNw93Kcgv5bFGlJvv2iVDU3z1QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOmO1FFF78Pj2jBNmnvg2/Pni6MOMB8GA1UdIwQY
MBaAFKyyAlDUzdNmcZuWnW9BIwHBPrkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQt
NmY0ZjAzMWVlYWUyLzEvNlk3VVVVWHZ3LVBhTUUyYWUtRGI4LWVMb3c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQtNmY0ZjAzMWVlYWUy
LzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFTd6gAwQE
UV1gAwQFVXGgAwQF1aGgMA0EAgACMAcDBQMgAUuAMA0GCSqGSIb3DQEBCwUAA4IB
AQASxQnZzgqNmf0ohZxV2VBOQHOWMExn6mP7R0wCIls/MyU5lQBgCH7TAAV3Hm4G
vxJTn/txuU8DcRjU6zkI0dQOCw9DgENEV2Pa+W+nYctzXCl15ayWrZAJOxlZZvv5
v6Ic8Xnuqp4agBlftd86HMkG0WKNn7KEkU7ZYuRhWmZhNULog0PeaoQ/1DpVtDjn
KzjyLggKRnM1bkgWFPkHpxLLMl82mC7lpUb+P8PczA0Rvw3afgf23/9uJc98tPX3
Dm/6dKF/NmZv1feNTzLYWiJVgsLmFEiTgdYtAi/LZcozJKB0uYLQ2+J18A5KgQpm
8XYAyYAJxUn+5xYAP/BBGmmY
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:06:54 2026 by rpki-client