This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/6J5TSLLBcZQZ1t0m9tHYx1zQO8E.roa
File:                     6J5TSLLBcZQZ1t0m9tHYx1zQO8E.roa (raw, json)
Hash identifier:          KO2aOSJGd+WUr2sCNzhk71scD2DSjrZzDD3qQEnCxGw=
Subject key identifier:   E8:9E:53:48:B2:C1:71:94:19:D6:DD:26:F6:D1:D8:C7:5C:D0:3B:C1
Certificate issuer:       /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial:       019B7758C062E3586CCF8187AAAD1CF84847
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/6J5TSLLBcZQZ1t0m9tHYx1zQO8E.roa
Signing time:             Thu 01 Jan 2026 02:17:43 +0000
ROA not before:           Thu 01 Jan 2026 02:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200295
IP address blocks:        80.64.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:c0:62:e3:58:6c:cf:81:87:aa:ad:1c:f8:48:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
        Validity
            Not Before: Jan  1 02:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e89e5348b2c1719419d6dd26f6d1d8c75cd03bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:c2:ab:e5:ff:9a:22:cf:bd:49:00:fa:2b:
                    c9:ed:4e:42:8c:11:3a:40:ca:18:ec:12:1d:79:40:
                    82:7a:c8:b8:a7:a2:41:03:8c:9a:19:d9:0f:35:48:
                    c5:cf:2f:35:92:b6:9c:f3:c7:f9:92:e6:b8:52:ec:
                    4d:c6:a3:16:0e:a8:c5:33:83:b8:0c:41:a3:6d:f4:
                    56:d2:bd:b1:5c:9d:a3:67:b3:f2:e9:ea:4d:11:45:
                    b5:a6:ac:4f:6c:4a:0d:b6:2e:2c:54:b3:b2:47:44:
                    c5:1e:9e:65:06:a0:d9:cd:54:02:f9:e9:bf:7d:ec:
                    db:ca:0e:2f:fc:2f:b3:5c:2c:c6:ba:7a:43:a2:59:
                    85:38:12:85:b0:ec:fd:3c:52:eb:67:bd:98:cb:a8:
                    b1:a5:55:12:e8:c8:42:f2:7a:bf:a6:0d:0a:85:81:
                    93:53:73:a4:e1:cc:1a:3a:73:e5:89:d3:3a:36:54:
                    eb:39:34:e9:39:0c:64:14:88:2b:58:46:c7:31:ab:
                    d5:c7:a0:bb:d2:fc:6e:cc:38:88:59:31:db:14:a0:
                    6a:fe:e6:78:59:88:16:1c:7c:0c:d2:53:bf:37:5d:
                    a5:d0:a3:d3:ce:bc:69:aa:2e:5f:ab:04:c2:97:be:
                    0d:87:da:f9:2c:83:c1:eb:1e:6d:dd:86:ac:f6:3c:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9E:53:48:B2:C1:71:94:19:D6:DD:26:F6:D1:D8:C7:5C:D0:3B:C1
            X509v3 Authority Key Identifier:
                keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/6J5TSLLBcZQZ1t0m9tHYx1zQO8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.64.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:af:b7:62:ad:19:a8:84:a3:b8:76:c7:3f:4f:9d:c0:a3:
         a7:35:84:a8:59:1d:05:f8:cd:7b:04:01:03:60:70:38:7b:4c:
         06:87:6e:c6:fb:b6:3d:53:8d:60:85:6b:ad:93:cc:29:8b:c5:
         1c:cb:8f:e8:3f:ad:d1:a7:54:49:20:e0:a0:0d:59:c5:e2:08:
         e5:1b:67:0a:7c:d3:4a:6a:6a:f7:c5:09:e8:57:aa:9d:ec:5f:
         11:51:d4:19:d1:2e:7c:29:85:69:2f:2a:df:98:4a:9b:96:32:
         d6:23:71:b6:40:d1:0d:c1:27:ed:b1:85:c3:95:80:45:ab:a9:
         77:bc:20:dc:14:53:1f:cb:c6:d8:0d:dd:c5:c5:28:3c:97:b1:
         07:43:d6:84:9d:48:9f:c4:d8:05:fb:86:4b:44:67:4a:e0:3f:
         0f:5a:b5:d6:a9:c5:c8:1d:ba:5f:b7:a3:98:15:bb:32:d3:f3:
         a7:c2:12:80:d9:84:6c:9b:8e:9a:09:40:a9:8a:d5:79:d4:59:
         1d:5c:eb:63:1c:1f:19:cd:06:2d:06:ce:fb:95:7e:39:11:6a:
         2d:61:95:3c:7b:17:61:8c:a4:c0:44:a4:fb:6d:ec:21:19:fc:
         cd:fb:1e:67:59:90:b4:e1:8b:bc:25:1c:1d:91:59:17:25:5e:
         39:aa:27:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:24 2026 by rpki-client