This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AD6JtVgrEpex3YXg49I2S0j_9qc.roa
File:                     AD6JtVgrEpex3YXg49I2S0j_9qc.roa (raw, json)
Hash identifier:          2NwmpEf9xxJ+wfu+ua+oOE/q4G+dxZtYDJ728w4u4tY=
Subject key identifier:   00:3E:89:B5:58:2B:12:97:B1:DD:85:E0:E3:D2:36:4B:48:FF:F6:A7
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019B7A5AA84C2DBC4C46EF42E5FA9E7FEC50
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AD6JtVgrEpex3YXg49I2S0j_9qc.roa
Signing time:             Thu 01 Jan 2026 16:18:40 +0000
ROA not before:           Thu 01 Jan 2026 16:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     400909
IP address blocks:        83.147.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:a8:4c:2d:bc:4c:46:ef:42:e5:fa:9e:7f:ec:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 16:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=003e89b5582b1297b1dd85e0e3d2364b48fff6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:c8:7e:63:c0:87:e9:be:b5:23:2c:13:9d:
                    f9:f8:13:d4:51:16:2b:29:a9:9f:c2:bb:b2:a5:32:
                    68:3d:ab:9e:6a:31:db:e3:dc:fd:71:f0:65:3f:bd:
                    2d:e4:16:ed:8c:07:a3:cd:e0:f3:07:99:3f:cd:3c:
                    bb:2d:1a:f7:28:ab:6e:f1:ae:8f:76:c8:30:64:5b:
                    25:e3:c2:59:02:1d:8e:53:eb:4c:50:4f:d0:55:fc:
                    e4:1a:f8:85:31:3a:5b:20:02:73:c7:16:85:f5:68:
                    c1:fa:bc:94:6a:54:a0:39:3c:42:5c:b4:62:df:1e:
                    30:bf:bd:5c:6e:a4:8a:d2:da:fa:29:22:2b:07:4f:
                    98:7e:d9:73:cb:ef:a4:64:a3:1a:34:c0:6c:30:f5:
                    93:5e:0f:fb:ed:f3:53:0e:46:af:8c:aa:2b:9f:23:
                    db:9c:2a:b9:38:80:af:a1:0a:31:4c:b8:33:79:3a:
                    02:94:53:f6:dc:c4:97:a8:68:49:f3:b8:91:d8:cb:
                    d5:94:67:19:21:b7:45:3f:a5:c1:cf:0c:4d:55:5e:
                    23:be:ee:a0:90:12:68:a0:d2:e6:f3:96:83:9e:53:
                    06:49:94:e9:2c:79:b1:0a:3f:0b:5a:de:16:54:dd:
                    08:d8:0b:e8:d8:76:d7:79:e9:37:7a:db:57:0a:c1:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3E:89:B5:58:2B:12:97:B1:DD:85:E0:E3:D2:36:4B:48:FF:F6:A7
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AD6JtVgrEpex3YXg49I2S0j_9qc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:3a:a1:c0:5e:7c:c5:a6:ae:a6:1b:09:02:19:31:ee:ed:8b:
         68:0c:69:df:68:04:d6:ab:4d:02:8c:e0:03:f3:30:1b:6b:9f:
         57:02:45:28:38:ae:4e:37:62:e0:97:d8:47:34:6d:8e:fe:cf:
         fa:4b:55:aa:ad:25:84:9e:ca:e3:d1:6a:a2:d6:68:92:fe:29:
         6e:2c:34:92:0c:8c:9b:5e:d9:94:b2:ad:8e:ec:7d:56:e0:a7:
         1d:ff:b5:ad:ad:7b:87:9b:56:4b:18:63:ae:16:18:49:a5:94:
         3b:43:70:dc:64:dd:4a:6d:35:6d:7b:fa:a4:c3:9a:cc:9f:7f:
         1a:f4:41:7e:27:2d:94:f3:d3:0a:61:20:13:ed:c3:35:ec:b4:
         09:b8:8b:03:6d:49:7e:a0:92:ba:45:da:a7:c6:13:02:3a:26:
         58:93:35:fe:b8:c6:64:60:8b:41:fe:d7:a3:46:80:bf:ae:b3:
         72:ae:e8:2d:aa:40:26:96:df:bf:65:09:9e:10:f9:08:2d:19:
         b1:3e:87:e7:e5:53:48:be:85:ef:53:6e:12:09:fb:dd:2c:3c:
         07:9c:49:33:04:35:3d:e2:a0:c7:ba:34:d2:9b:8c:12:10:1a:
         3a:ee:2f:07:02:0d:88:e5:b9:66:1d:12:2a:4f:77:bf:e8:b7:
         d2:d2:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:36:34 2026 by rpki-client