This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/t6uJnjT04JxAMbhWunFCrGch9dE.roa
File:                     t6uJnjT04JxAMbhWunFCrGch9dE.roa (raw, json)
Hash identifier:          ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=
Subject key identifier:   B7:AB:89:9E:34:F4:E0:9C:40:31:B8:56:BA:71:42:AC:67:21:F5:D1
Certificate issuer:       /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial:       019B7F1565D90B2A1CA15C42E24D3082AD08
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/t6uJnjT04JxAMbhWunFCrGch9dE.roa
Signing time:             Fri 02 Jan 2026 14:21:07 +0000
ROA not before:           Fri 02 Jan 2026 14:21:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8220
IP address blocks:        195.234.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 08:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:65:d9:0b:2a:1c:a1:5c:42:e2:4d:30:82:ad:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
        Validity
            Not Before: Jan  2 14:21:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7ab899e34f4e09c4031b856ba7142ac6721f5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9e:bb:a5:8d:06:e0:25:00:82:9e:25:98:ab:
                    0d:0a:bc:fc:24:2d:10:38:95:3a:f4:ec:c2:91:ed:
                    8d:52:80:d4:2c:67:d1:88:7d:da:84:d6:0a:2b:ce:
                    ad:20:22:fd:5e:a3:ba:d4:80:f8:b4:14:8c:6b:bf:
                    fd:b8:cf:dc:45:6d:4e:d3:30:53:34:c5:67:c2:fc:
                    35:2d:4e:ab:81:53:f1:47:cd:93:f7:d6:97:64:df:
                    75:d9:5d:af:3f:82:6c:d7:96:10:a2:3f:5f:a4:19:
                    88:f8:9d:3c:3b:d1:4b:f3:2d:27:f6:e4:18:f2:53:
                    1b:1c:45:96:f1:53:26:ef:dd:39:05:74:fa:be:7a:
                    7e:fc:10:b4:bb:a7:f6:af:54:c1:92:8e:44:a3:d7:
                    8b:02:8d:b3:2d:ff:3d:6c:61:bf:7a:42:e7:7d:d2:
                    9b:43:77:aa:da:15:72:5e:59:d0:3c:ef:99:9b:27:
                    f5:28:71:c8:ed:da:47:fa:7a:90:6a:e7:c8:6b:a7:
                    ad:22:a7:2b:b7:a3:3c:3e:54:5d:27:e3:6c:58:a5:
                    9f:69:1b:91:75:8b:83:e7:e3:a8:bd:a8:23:d1:6e:
                    cc:7e:fc:c5:49:28:e1:6d:5e:9d:92:85:c0:08:ef:
                    71:be:e9:4e:1a:09:a1:24:df:7d:f3:99:08:7e:6f:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AB:89:9E:34:F4:E0:9C:40:31:B8:56:BA:71:42:AC:67:21:F5:D1
            X509v3 Authority Key Identifier:
                keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/t6uJnjT04JxAMbhWunFCrGch9dE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:9c:74:17:93:f0:cf:3c:b4:7c:1f:88:35:6f:87:3e:f4:35:
         2f:4b:84:02:dd:c6:07:2d:52:bb:2d:51:07:d5:23:b9:1e:9c:
         20:c5:53:fa:59:12:99:12:4c:f6:fa:b5:be:f4:6b:12:b1:15:
         f5:9b:45:02:4e:1b:c8:62:d9:be:33:35:7c:1c:83:a3:54:e0:
         d1:e8:14:f5:a0:cb:ce:8b:b6:6f:b1:ea:b3:18:af:04:4b:a2:
         15:48:7d:3b:9d:f1:fd:8d:79:1b:af:c2:16:20:87:26:e7:e4:
         a3:c1:07:34:f0:47:c9:ee:64:74:9c:8b:da:7f:ea:e7:88:2d:
         3f:90:02:b4:d8:0f:f7:85:8b:49:2a:6a:9e:e6:69:82:1b:54:
         ec:6e:b5:00:f0:32:f2:99:3c:de:a9:c5:2b:34:54:e3:f7:85:
         63:91:0e:94:20:c0:6b:5e:9d:a6:28:b3:0f:e9:5d:17:f4:82:
         db:79:64:63:60:58:42:cb:3e:2a:c2:1a:fa:b0:69:2b:f3:f4:
         2f:ad:27:80:53:18:30:d2:4f:a1:5d:85:84:c6:e0:38:ff:09:
         f6:dd:a6:08:58:ec:d2:a9:0f:16:91:88:43:d2:99:86:7a:57:
         79:f5:16:20:bd:aa:c6:92:80:a0:6e:da:a1:f8:a4:3e:98:fd:
         63:b5:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:19:14 2026 by rpki-client