This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/6xtEtECX1hmiBfg2kCnuxEarwpg.roa
File:                     6xtEtECX1hmiBfg2kCnuxEarwpg.roa (raw, json)
Hash identifier:          0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=
Subject key identifier:   EB:1B:44:B4:40:97:D6:19:A2:05:F8:36:90:29:EE:C4:46:AB:C2:98
Certificate issuer:       /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial:       019B7E387C1AD825AB29894F079AADE680FC
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/6xtEtECX1hmiBfg2kCnuxEarwpg.roa
Signing time:             Fri 02 Jan 2026 10:19:49 +0000
ROA not before:           Fri 02 Jan 2026 10:19:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198381
IP address blocks:        91.126.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:7c:1a:d8:25:ab:29:89:4f:07:9a:ad:e6:80:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
        Validity
            Not Before: Jan  2 10:19:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb1b44b44097d619a205f8369029eec446abc298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:53:6e:d2:cc:48:a6:11:0f:5a:fc:1e:ad:
                    b9:ab:2e:0e:21:cf:f5:c5:5c:3d:d6:90:9f:62:92:
                    cc:0d:97:a8:46:c6:d2:1d:fa:03:1b:72:9c:0f:62:
                    35:1b:03:f7:49:ec:dc:e6:23:8f:74:2a:a2:4c:0c:
                    1e:0c:52:cf:92:78:e4:d7:f6:c7:74:69:a3:08:bb:
                    1f:9a:5f:e5:40:82:ff:21:46:1e:76:cc:88:a3:75:
                    7c:81:34:4b:55:0d:09:1a:bc:31:1f:30:cb:76:7a:
                    7a:c5:41:16:6e:f8:7f:20:ec:69:c5:3e:35:17:1c:
                    94:87:51:ed:2f:5a:83:be:45:61:3b:fb:cc:24:1c:
                    2c:c6:b5:1d:46:0a:3c:7f:49:de:4f:77:0e:13:f8:
                    5a:23:15:f7:88:2a:e8:5d:30:60:fc:c4:a3:5f:21:
                    3f:fc:85:2d:80:c9:ab:4b:f4:b6:67:68:01:28:70:
                    8a:10:7a:25:32:e0:a1:7e:d6:42:de:d2:42:21:a3:
                    5a:20:c0:32:34:7f:cd:15:f8:53:31:24:94:be:48:
                    88:93:b5:37:14:4b:9e:33:cd:34:6c:c7:88:75:c6:
                    6a:60:3f:70:32:3b:2f:59:70:b9:45:12:ca:19:e0:
                    f6:c9:50:38:6f:48:48:db:f9:58:f7:cf:3b:d2:01:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1B:44:B4:40:97:D6:19:A2:05:F8:36:90:29:EE:C4:46:AB:C2:98
            X509v3 Authority Key Identifier:
                keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/6xtEtECX1hmiBfg2kCnuxEarwpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.126.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:c7:1f:86:2a:b7:11:92:3f:1b:16:5a:c7:ef:e3:de:a6:
         11:64:f3:b4:0f:3d:a0:e7:96:4a:c5:94:46:63:11:0b:b3:cd:
         2b:39:99:6e:3d:be:f4:d5:a3:00:52:6e:46:cd:5b:60:ee:82:
         a5:f8:c5:27:32:48:11:8f:d2:8c:31:91:56:40:94:38:14:34:
         f0:45:cf:04:6b:31:84:06:49:30:9f:1a:c6:aa:dc:96:2c:86:
         96:e9:1b:5a:75:03:d6:cb:7d:12:8c:d5:ac:e5:1c:d8:31:a3:
         15:71:ac:9c:8f:6d:ca:85:45:62:af:cf:11:01:93:70:60:69:
         3f:f0:da:5f:fa:36:0c:5a:1f:69:01:81:af:bd:84:87:c8:0d:
         65:99:9a:c1:07:39:05:92:30:90:e5:fc:18:e2:3d:d7:a8:2b:
         7e:49:ac:24:76:d7:f6:fd:bd:97:d7:a4:38:9f:26:75:72:39:
         ce:97:35:41:2a:6f:4d:fe:76:b3:a1:cb:49:57:e3:08:c1:65:
         b1:62:30:d4:49:fd:cf:e9:25:5d:bb:a6:1c:86:96:ea:2e:9d:
         31:38:2f:47:d5:bf:1e:92:8a:1b:4c:8b:0d:5e:af:7f:b5:f4:
         50:46:36:44:c4:f8:dc:5b:fd:1c:13:b4:8c:b6:9d:13:c8:c4:
         5e:72:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:56:08 2026 by rpki-client