This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/aiNfAtwLgUKsL4qA7akVZhQU1bA.roa
File:                     aiNfAtwLgUKsL4qA7akVZhQU1bA.roa (raw, json)
Hash identifier:          Hw2VjFxuxUBTnIvwm5B0o1nhy9vvmSj+hAxZVQnZIws=
Subject key identifier:   6A:23:5F:02:DC:0B:81:42:AC:2F:8A:80:ED:A9:15:66:14:14:D5:B0
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       019B775901327EC9D8F316C3AEC2FB1BE84A
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/aiNfAtwLgUKsL4qA7akVZhQU1bA.roa
Signing time:             Thu 01 Jan 2026 02:18:00 +0000
ROA not before:           Thu 01 Jan 2026 02:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215359
IP address blocks:        2001:67c:1858::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:01:32:7e:c9:d8:f3:16:c3:ae:c2:fb:1b:e8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: Jan  1 02:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a235f02dc0b8142ac2f8a80eda915661414d5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3c:e9:0d:ed:71:7a:5e:75:10:60:67:b5:aa:
                    ef:f9:8c:1a:a6:75:fa:be:a6:56:4e:19:69:ee:2c:
                    db:95:1f:3f:35:a3:99:25:db:8b:94:68:4f:7c:5c:
                    b6:3b:c0:e9:18:e9:e1:61:e2:5b:6d:2d:0f:f5:5e:
                    d1:2d:c0:d1:4e:be:19:fe:e2:f2:d7:0f:e2:e7:d7:
                    2e:09:e0:42:85:0c:a3:ef:d4:31:f1:fe:87:f1:52:
                    ea:3c:a4:ae:c8:c3:98:90:30:50:fe:e7:95:b2:7e:
                    d5:e9:60:24:7a:26:96:e6:37:a4:21:b7:af:93:97:
                    cd:71:59:1c:26:ae:21:f8:1a:d4:97:76:4b:71:6c:
                    b2:06:e5:a0:b3:f3:a3:be:8e:73:9e:a6:12:d1:fb:
                    3f:99:49:09:c5:cf:8e:60:5c:9d:ea:5b:71:df:69:
                    5d:83:fe:9f:66:6d:56:65:83:49:59:30:d1:26:69:
                    37:9d:92:2d:e0:4b:8d:e6:e5:d2:0e:8c:d9:65:1b:
                    4a:a7:6e:f5:49:ab:93:a2:14:f4:c7:26:34:88:6a:
                    46:0d:1e:57:f9:a2:7d:09:b0:35:d8:b1:cf:5d:21:
                    ed:49:bd:37:ba:5b:23:74:70:dd:44:f2:b1:15:31:
                    fb:93:a7:33:a6:74:6c:a4:07:20:02:46:9d:9f:69:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:23:5F:02:DC:0B:81:42:AC:2F:8A:80:ED:A9:15:66:14:14:D5:B0
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/aiNfAtwLgUKsL4qA7akVZhQU1bA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1858::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:b1:d4:e9:11:9c:4a:6b:d3:09:b4:af:69:d6:bf:61:e8:9a:
         33:e4:a1:eb:ce:8b:91:32:5c:e5:97:d2:3b:d8:09:38:97:29:
         f5:98:e3:11:aa:d1:bb:f9:09:6d:c8:fd:40:1b:0d:ef:e5:c2:
         83:9c:53:3e:c6:80:1c:9e:8d:a5:5f:c1:72:f9:52:4e:25:98:
         2f:3f:90:6a:42:92:08:56:e4:cc:bf:ea:dc:fe:c7:74:ba:28:
         e6:b2:54:b6:a1:9a:97:50:e9:f2:d2:55:24:44:51:2a:6c:b0:
         9e:58:7b:b0:c1:54:0c:25:ee:b8:66:25:79:d5:a8:89:6c:87:
         9f:af:30:1f:eb:d2:f3:23:b6:dc:56:0e:01:f7:a4:92:0d:5a:
         3e:47:a8:58:aa:ae:8f:b1:18:26:8c:d4:1d:82:94:ba:ca:78:
         93:ad:f6:95:42:7a:3f:b4:c5:0f:64:ac:3c:ca:c1:0f:c1:e3:
         b2:62:8e:4a:a8:52:5b:2a:8a:3c:f4:c0:01:71:24:c8:ee:21:
         bb:d7:10:28:03:4b:79:4c:83:56:6f:ec:4f:cf:84:3f:2a:09:
         52:68:c1:eb:55:47:bc:46:ec:25:e0:59:13:31:24:6d:82:54:
         d4:a2:12:48:09:a9:7f:c4:6b:32:49:79:7e:42:5e:b0:f5:98:
         26:96:2f:7b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt3WQEyfsnY8xbDrsL7G+hKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZGY4N2NhNTMwNjU3OTg0NDc2NDUyNTVmODI5YjUzYmMx
ZGEyMTUwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTIzNWYwMmRjMGI4MTQyYWMyZjhhODBlZGE5MTU2NjE0MTRkNWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTzpDe1xel51EGBntarv+YwapnX6
vqZWThlp7izblR8/NaOZJduLlGhPfFy2O8DpGOnhYeJbbS0P9V7RLcDRTr4Z/uLy
1w/i59cuCeBChQyj79Qx8f6H8VLqPKSuyMOYkDBQ/ueVsn7V6WAkeiaW5jekIbev
k5fNcVkcJq4h+BrUl3ZLcWyyBuWgs/Ojvo5znqYS0fs/mUkJxc+OYFyd6ltx32ld
g/6fZm1WZYNJWTDRJmk3nZIt4EuN5uXSDozZZRtKp271SauTohT0xyY0iGpGDR5X
+aJ9CbA12LHPXSHtSb03ulsjdHDdRPKxFTH7k6czpnRspAcgAkadn2kn7wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGojXwLcC4FCrC+KgO2pFWYUFNWwMB8GA1UdIwQY
MBaAFI/fh8pTBleYRHZFJV+Cm1O8HaIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajktSHlsTUdWNWhFZGtVbFg0S2JVN3dkb2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MzQ4OTAtOGI0OC00OWFlLWIwNDIt
OTk5Y2NlNGQ0YWQyLzEvYWlOZkF0d0xnVUtzTDRxQTdha1ZaaFFVMWJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82MzQ4OTAtOGI0OC00OWFlLWIwNDItOTk5Y2NlNGQ0YWQy
LzEvajktSHlsTUdWNWhFZGtVbFg0S2JVN3dkb2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBhY
MA0GCSqGSIb3DQEBCwUAA4IBAQCmsdTpEZxKa9MJtK9p1r9h6Joz5KHrzouRMlzl
l9I72Ak4lyn1mOMRqtG7+QltyP1AGw3v5cKDnFM+xoAcno2lX8Fy+VJOJZgvP5Bq
QpIIVuTMv+rc/sd0uijmslS2oZqXUOny0lUkRFEqbLCeWHuwwVQMJe64ZiV51aiJ
bIefrzAf69LzI7bcVg4B96SSDVo+R6hYqq6PsRgmjNQdgpS6yniTrfaVQno/tMUP
ZKw8ysEPweOyYo5KqFJbKoo89MABcSTI7iG71xAoA0t5TINWb+xPz4Q/KglSaMHr
VUe8Ruwl4FkTMSRtglTUohJICal/xGsySXl+Ql6w9Zgmli97
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:07:14 2026 by rpki-client