This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa
File:                     6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa (raw, json)
Hash identifier:          gPmBms7Ee3F+CBTlSi6nlg1BBxS+Ey8K66xwmLZe70g=
Subject key identifier:   E9:35:95:6C:EA:34:69:16:66:71:7F:EC:A7:79:4F:0F:D0:A2:65:D2
Certificate issuer:       /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial:       019B7E37B280C08E9FA21C9B73B9419E2060
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa
Signing time:             Fri 02 Jan 2026 10:18:57 +0000
ROA not before:           Fri 02 Jan 2026 10:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60781
IP address blocks:        93.190.220.0/22 maxlen: 22
                          93.190.220.0/24 maxlen: 24
                          93.190.221.0/24 maxlen: 24
                          93.190.222.0/24 maxlen: 24
                          93.190.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:b2:80:c0:8e:9f:a2:1c:9b:73:b9:41:9e:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
        Validity
            Not Before: Jan  2 10:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e935956cea34691666717feca7794f0fd0a265d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:94:2a:b0:aa:90:e8:0d:e5:c3:47:84:37:
                    7d:59:d7:22:05:1e:55:22:9f:7d:43:53:d4:ea:29:
                    9b:d3:44:be:a4:c2:9d:d9:41:16:40:b9:fa:24:72:
                    12:2f:6d:88:c2:3b:79:f7:69:11:52:93:d3:10:f7:
                    8a:ae:df:b5:ba:ea:1d:68:0f:7e:f0:c2:0a:3a:9b:
                    d1:c4:08:4b:7f:3d:71:82:5c:1c:9a:3b:ca:24:70:
                    8f:4f:44:f9:f3:73:a2:31:dc:f4:bd:61:db:42:19:
                    42:1c:44:56:a1:36:22:de:a2:5d:19:cf:a6:b4:54:
                    74:3e:a5:fd:2c:7c:e7:9b:37:63:0b:64:68:df:c2:
                    b8:02:70:49:b4:64:d3:f4:ed:b2:77:10:2d:65:f2:
                    53:39:98:0d:14:6a:13:db:d3:3a:d7:56:59:c1:7a:
                    24:46:8a:e2:ce:a9:38:42:89:28:db:82:17:1f:fa:
                    3c:15:b0:de:eb:aa:4a:8a:f2:44:73:36:10:dc:55:
                    90:f8:a5:96:a4:f5:93:42:69:12:40:73:e6:6b:a7:
                    ef:2b:72:d8:0f:d0:c7:e5:ff:77:4a:36:f9:07:4c:
                    18:cb:a1:78:0f:95:47:6b:fd:aa:79:d5:e1:3a:43:
                    1f:21:9e:5c:4c:95:da:0b:bd:43:94:e4:f0:f8:e0:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:35:95:6C:EA:34:69:16:66:71:7F:EC:A7:79:4F:0F:D0:A2:65:D2
            X509v3 Authority Key Identifier:
                keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:b1:7c:1f:36:87:bd:45:08:52:02:f1:63:45:21:ce:9f:73:
         43:a3:3d:ef:c7:e0:e6:be:4c:71:08:45:22:76:ab:fa:90:7f:
         14:ad:d8:48:34:26:ea:97:31:78:43:27:fa:30:2f:2b:06:a3:
         41:39:67:48:df:46:2d:3e:35:3d:ed:55:4e:c5:46:85:09:2c:
         79:92:4d:a9:2f:30:fe:e3:57:bf:d8:59:63:d0:b1:15:4c:37:
         e3:7e:64:8c:6e:28:6a:85:bd:c3:89:65:6f:f7:c8:c1:0c:f7:
         5c:62:72:57:0c:70:11:83:f5:38:ca:51:ce:66:1e:7b:d5:18:
         b5:2a:ad:cb:cd:16:f6:37:54:c2:df:63:de:ef:c5:a9:97:09:
         27:12:8b:83:ae:03:08:18:83:c5:2c:15:b2:0a:ef:02:ac:fb:
         83:d5:7a:30:da:b4:97:75:13:3a:c6:bd:35:58:2b:a7:c7:10:
         6f:fd:8c:ed:19:9c:08:79:27:c5:9d:8a:62:cb:43:a2:a1:92:
         a1:aa:a0:0d:14:58:7c:fa:5c:d6:c5:ea:1c:29:24:05:45:e4:
         84:51:3d:23:37:b9:d7:ae:96:8f:2a:7b:c1:cd:50:a5:a4:2c:
         42:92:92:64:b0:9f:a8:bd:88:c0:28:94:9e:01:5b:dc:a6:ae:
         8a:c9:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:52:08 2026 by rpki-client