This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/PT62C61CPHdRc2fJbDVDuVJRXj0.roa
File:                     PT62C61CPHdRc2fJbDVDuVJRXj0.roa (raw, json)
Hash identifier:          QoRuxKV7gftAIFcmKvKd/abqm9YeDR7k0cYgqnasPfc=
Subject key identifier:   3D:3E:B6:0B:AD:42:3C:77:51:73:67:C9:6C:35:43:B9:52:51:5E:3D
Certificate issuer:       /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial:       019B79EC4E4E55C30A0704892D3DA7BE012B
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/PT62C61CPHdRc2fJbDVDuVJRXj0.roa
Signing time:             Thu 01 Jan 2026 14:18:08 +0000
ROA not before:           Thu 01 Jan 2026 14:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61428
IP address blocks:        185.6.84.0/22 maxlen: 24
                          2a03:dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:4e:4e:55:c3:0a:07:04:89:2d:3d:a7:be:01:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
        Validity
            Not Before: Jan  1 14:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d3eb60bad423c77517367c96c3543b952515e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:15:50:9b:18:af:78:5c:eb:1b:b0:bc:b8:
                    5f:8b:79:db:c6:fa:01:55:86:5d:0a:36:df:e3:10:
                    f6:f3:fd:29:61:2e:d4:44:9f:f5:f5:31:60:fa:5a:
                    05:70:28:69:37:e1:6d:e4:ee:4d:c9:ca:3a:ff:6c:
                    0c:65:fb:ad:48:d0:95:41:b5:54:04:30:c7:7f:ca:
                    8c:7c:99:d0:98:a3:62:e3:15:d1:94:55:ca:b7:ae:
                    5a:52:7e:76:c0:c5:66:fa:6f:ea:30:84:fd:b2:1c:
                    76:c6:19:d4:3b:77:68:2b:fc:e4:b4:7c:2d:f0:ea:
                    89:1a:cd:72:c7:5a:58:55:c4:11:5d:92:64:e0:6d:
                    77:54:5f:86:4d:9a:6d:4d:a7:e0:8c:c1:c3:58:0a:
                    8b:95:4a:d2:2b:12:24:1e:fe:bc:0c:a1:6f:63:01:
                    e4:92:ea:28:7b:9b:77:eb:bb:56:da:2e:02:0e:45:
                    6a:1c:21:64:aa:1a:ab:e8:66:32:c2:3a:44:02:6a:
                    2b:fb:a5:3b:be:77:67:85:10:f2:c1:2f:df:07:d8:
                    c1:98:b6:4a:ef:af:b0:41:83:5d:fa:ab:3c:5c:37:
                    d4:0e:27:20:ae:43:91:3f:66:59:97:93:3e:fd:1e:
                    a2:b6:96:1e:cb:f6:ab:f5:77:64:95:71:23:6d:dc:
                    38:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3E:B6:0B:AD:42:3C:77:51:73:67:C9:6C:35:43:B9:52:51:5E:3D
            X509v3 Authority Key Identifier:
                keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/PT62C61CPHdRc2fJbDVDuVJRXj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.6.84.0/22
                IPv6:
                  2a03:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ea:f1:5a:e6:74:29:32:fe:be:71:16:00:03:f1:52:35:7c:93:
         bd:02:d3:97:4b:eb:be:67:92:94:14:9c:a1:95:58:29:82:be:
         9c:58:00:4f:59:98:da:cf:6b:9b:a4:0e:69:03:f9:e7:3a:2f:
         43:27:21:e0:c4:8b:0c:ac:8b:5b:80:73:10:57:cc:68:fc:2c:
         9a:29:48:9e:61:ea:47:80:e4:1b:aa:f8:ca:22:0e:ea:f1:12:
         2a:48:62:c3:c2:1a:dc:c8:c1:22:1d:0f:9c:0c:41:27:ce:99:
         74:10:de:a3:64:4f:60:a7:a3:5e:f9:28:06:d3:1d:33:e4:7f:
         b6:eb:93:fb:bf:5b:b7:6e:6f:a2:c9:ad:3c:82:af:1c:cb:73:
         33:f1:b6:5c:81:ba:c9:0a:39:08:1b:d8:69:c0:ef:52:68:a7:
         ef:2a:e3:73:a9:c4:b8:fc:2a:11:67:f6:39:2f:da:34:fa:03:
         de:b1:e6:6a:db:b2:68:83:07:37:09:2e:f3:16:7b:e9:4b:8b:
         a9:38:db:18:af:a3:b3:8c:ce:68:6a:60:d7:10:3e:b8:6e:58:
         b4:70:5d:3e:d8:d1:92:e5:b5:2e:26:8c:83:fc:8b:7b:fe:d7:
         71:3c:26:1e:c2:d1:ec:b8:1b:c1:ff:69:16:31:de:e8:c0:b2:
         74:08:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:13:59 2026 by rpki-client