This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa
File:                     t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa (raw, json)
Hash identifier:          lkQHddLK92kTmS7mRA5Mrvzd/PdOAJ8/DAOJGdqwGqU=
Subject key identifier:   B7:A4:13:78:EF:D4:50:AC:AF:43:AA:E7:B8:54:D5:41:5B:55:F9:DF
Certificate issuer:       /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial:       019B998B2F83FC6B4C13011C1D90C0E981BF
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa
Signing time:             Wed 07 Jan 2026 17:39:54 +0000
ROA not before:           Wed 07 Jan 2026 17:39:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211381
IP address blocks:        45.131.182.0/24 maxlen: 24
                          2a13:4ac0::/46 maxlen: 46
                          2a13:4ac0:4::/46 maxlen: 46
                          2a13:4ac0:10::/46 maxlen: 46
                          2a13:4ac0:14::/46 maxlen: 46
                          2a13:4ac0:18::/46 maxlen: 46
                          2a13:4ac0:1c::/46 maxlen: 46
                          2a13:4ac0:20::/46 maxlen: 46
                          2a13:4ac0:24::/46 maxlen: 46
                          2a13:4ac0:28::/46 maxlen: 46
                          2a13:4ac0:2c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:99:8b:2f:83:fc:6b:4c:13:01:1c:1d:90:c0:e9:81:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
        Validity
            Not Before: Jan  7 17:39:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7a41378efd450acaf43aae7b854d5415b55f9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:09:48:8f:ed:2b:26:1c:3d:29:42:60:f8:
                    09:cd:5d:d3:f0:36:dd:b9:a0:3a:00:e5:1f:ab:48:
                    18:79:a8:75:10:21:f9:c9:71:28:d9:ea:03:2e:56:
                    7d:0f:ce:ac:02:c1:b8:48:93:62:6c:75:7f:10:f7:
                    c9:79:b1:5e:e9:6e:89:bc:34:28:16:e6:e4:66:e2:
                    82:1a:3f:25:c2:cf:81:04:4c:c1:85:b3:9f:04:92:
                    e2:34:59:bf:3d:e7:f6:58:85:7a:8e:b5:70:ce:62:
                    f3:81:c6:01:5d:09:a7:11:5f:b7:1d:a0:79:8a:c2:
                    8c:32:30:37:58:b6:2a:47:c0:75:e3:aa:f5:0b:0f:
                    70:59:e3:c4:18:db:21:e4:62:9d:97:e1:cb:53:2d:
                    99:f6:d1:d1:6a:0b:aa:a1:d4:bd:3a:f6:e1:85:58:
                    5a:1f:95:b3:12:bd:e0:89:75:41:10:1e:6c:26:e5:
                    77:31:a2:69:c5:d6:b1:b1:33:44:a1:b9:81:7c:f2:
                    33:ba:e7:4c:ae:55:33:98:8e:98:03:1f:07:b7:ce:
                    0f:d6:1f:90:c6:4f:f1:2e:9a:14:5c:e3:65:f6:f9:
                    56:bf:60:19:b1:ed:45:4b:57:63:fd:dc:a3:27:f6:
                    fb:14:95:2b:60:ff:7c:4c:af:d5:99:24:1d:63:ca:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A4:13:78:EF:D4:50:AC:AF:43:AA:E7:B8:54:D5:41:5B:55:F9:DF
            X509v3 Authority Key Identifier:
                keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/t6QTeO_UUKyvQ6rnuFTVQVtV-d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.182.0/24
                IPv6:
                  2a13:4ac0::/45
                  2a13:4ac0:10::-2a13:4ac0:2f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         30:ae:f7:05:f0:d8:7f:da:1c:43:ec:67:e9:de:48:a2:6e:43:
         5a:b6:60:9c:7e:f1:51:4a:76:d7:94:8d:db:59:dc:cd:be:8e:
         ea:a3:78:bf:85:6d:e0:20:6c:bc:03:97:5c:e8:00:97:f8:7a:
         8f:14:44:05:06:f4:2b:da:2f:4b:af:de:87:06:e5:58:61:0c:
         7b:67:4f:13:3f:46:b9:51:60:22:13:33:4a:08:22:fe:93:9d:
         de:e1:bb:77:3a:47:f9:03:9e:44:18:0a:61:5a:83:ac:12:d1:
         66:06:21:18:5d:e8:f1:b2:80:7a:b1:e4:0d:b2:20:67:86:f3:
         bf:d1:63:d7:4f:81:20:55:5c:6e:f4:33:db:44:39:fb:1b:11:
         95:af:d5:fe:bf:a3:aa:fe:a7:01:97:f8:12:f1:80:60:df:b7:
         1d:1c:1f:45:88:e9:cd:65:bc:20:2d:a1:3b:6b:bf:29:26:85:
         25:40:c8:35:ef:4e:58:fc:19:d2:5a:80:4a:d7:f6:5c:ec:2b:
         3a:ed:de:2a:eb:63:bd:bd:43:ca:cd:4e:51:6c:a5:c6:fe:68:
         e5:28:16:fa:f0:49:d3:b9:7f:5a:94:5a:1a:a1:6a:12:6f:91:
         18:5b:d1:e6:e9:ca:fc:4c:a8:f7:2b:c1:fd:a4:6d:63:e4:e7:
         a3:8f:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:21 2026 by rpki-client