This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/6jv9jlHJmC7k64rvSsealEF_Ys4.roa
File:                     6jv9jlHJmC7k64rvSsealEF_Ys4.roa (raw, json)
Hash identifier:          crUEU6To7tUPJ210jDOrFjZwtJRVZ4icX9N2S6uxoc0=
Subject key identifier:   EA:3B:FD:8E:51:C9:98:2E:E4:EB:8A:EF:4A:C7:9A:94:41:7F:62:CE
Certificate issuer:       /CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Certificate serial:       019B7F83C6A86D6EACA222871995C20E8355
Authority key identifier: 71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/6jv9jlHJmC7k64rvSsealEF_Ys4.roa
Signing time:             Fri 02 Jan 2026 16:21:41 +0000
ROA not before:           Fri 02 Jan 2026 16:21:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199588
IP address blocks:        185.7.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:c6:a8:6d:6e:ac:a2:22:87:19:95:c2:0e:83:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d9baa0221942edfe4b3a9a5708295c04416e80
        Validity
            Not Before: Jan  2 16:21:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea3bfd8e51c9982ee4eb8aef4ac79a94417f62ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:92:cf:2c:66:7f:43:5a:32:ae:ea:22:4e:
                    38:cb:1c:d4:57:4e:86:a3:c9:55:3b:2e:75:61:7f:
                    d0:40:59:cc:fc:a3:2e:df:c2:ab:b4:d2:31:31:22:
                    20:ca:24:8d:60:97:1e:bc:60:6f:f9:bb:68:f0:28:
                    b6:19:ca:e1:49:87:45:3d:26:e3:46:d8:9c:16:67:
                    cb:68:3b:af:b9:51:1b:7c:67:89:bb:49:13:e3:8e:
                    e9:43:77:01:95:ef:3d:39:6f:23:6d:72:39:5d:b1:
                    2b:f5:3e:83:06:22:85:9f:0a:64:01:c0:d1:10:ce:
                    17:42:bc:d2:34:b7:9b:cf:44:05:4a:f9:ae:e1:6d:
                    dd:29:e0:f2:ad:8f:35:81:d2:6a:22:d5:34:52:ef:
                    1e:c3:f7:b9:12:10:d4:ca:d6:35:97:6a:0c:d4:84:
                    1c:84:46:80:8c:d7:69:8b:e5:33:51:5f:66:c2:12:
                    51:4d:4b:87:55:3e:1a:cc:1f:f6:82:81:02:42:b1:
                    a1:64:38:59:6f:92:c7:a4:c4:74:db:1b:46:a1:b8:
                    27:52:f7:e4:7c:76:34:b9:59:a2:8d:bd:a8:a0:8a:
                    8a:df:8e:8d:b6:20:b4:06:11:c3:89:5c:80:d8:4e:
                    a4:c4:d5:bf:0d:c6:c6:88:91:52:39:2b:86:7a:ec:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3B:FD:8E:51:C9:98:2E:E4:EB:8A:EF:4A:C7:9A:94:41:7F:62:CE
            X509v3 Authority Key Identifier:
                keyid:71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/6jv9jlHJmC7k64rvSsealEF_Ys4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.7.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:c5:e9:40:20:03:6e:ee:8e:91:d0:b8:c4:2b:a4:b8:97:5a:
         14:8e:f0:19:b1:40:92:f6:c9:5f:6f:bd:d2:93:b4:ae:64:d0:
         6d:e3:41:22:c5:db:ba:b7:a7:9f:40:36:ac:d2:00:7d:c9:54:
         d1:a9:2f:39:6d:32:e3:c9:53:4f:31:d7:6a:20:71:47:4a:b6:
         af:d9:f8:3d:74:d4:a9:4b:0f:4c:c0:f0:e7:c7:3b:9a:3d:57:
         6d:5c:68:08:cd:e8:63:dd:02:2b:39:a8:14:ff:3d:f0:a2:fa:
         ea:4d:be:48:05:97:c5:38:fb:39:81:4a:07:cc:bb:9f:46:45:
         d8:c6:b7:8b:ab:6c:b5:12:d3:ca:d0:8b:03:9e:25:61:2d:0b:
         de:8f:23:1f:06:91:18:a3:ee:f2:e0:d5:18:95:ae:7e:c4:c7:
         c4:24:42:c7:8f:ec:bb:d7:8e:20:a6:8b:9a:57:8b:fc:20:59:
         2c:74:81:b6:c9:14:a7:7c:6e:73:c5:32:61:80:e1:ec:69:36:
         9f:5d:2e:85:6b:72:24:e2:f4:4e:59:bd:b7:1f:c8:08:49:eb:
         ff:64:d9:ac:b4:eb:92:c3:22:bd:5f:ac:86:0f:d1:09:ac:da:
         b8:10:94:8b:e1:aa:54:56:14:a1:a3:3f:95:45:99:ee:ce:2a:
         32:d7:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:58 2026 by rpki-client