This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/06zDVhvC2wG0GB9x97qsiQizFTM.roa
File:                     06zDVhvC2wG0GB9x97qsiQizFTM.roa (raw, json)
Hash identifier:          JvVnPN4nSkUYGY1CjK3ZJoX6NrGYaNBFt7orDkPoKJY=
Subject key identifier:   D3:AC:C3:56:1B:C2:DB:01:B4:18:1F:71:F7:BA:AC:89:08:B3:15:33
Certificate issuer:       /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial:       019B79106DB13795C71F26AE37EC98DC0C5C
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/06zDVhvC2wG0GB9x97qsiQizFTM.roa
Signing time:             Thu 01 Jan 2026 10:17:58 +0000
ROA not before:           Thu 01 Jan 2026 10:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211334
IP address blocks:        94.229.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:6d:b1:37:95:c7:1f:26:ae:37:ec:98:dc:0c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
        Validity
            Not Before: Jan  1 10:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d3acc3561bc2db01b4181f71f7baac8908b31533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:9e:3f:52:b2:07:bd:30:0e:3b:53:ed:26:
                    b3:d8:d9:1c:93:1b:85:49:de:28:69:35:8e:42:4b:
                    c4:cd:e8:ca:75:b7:13:56:dd:9d:ef:6e:f7:92:c6:
                    f8:f3:7c:c2:b0:61:c5:b3:12:73:76:c6:00:2a:51:
                    5c:89:45:5d:53:94:5b:e4:f6:11:9f:bc:69:93:fb:
                    d1:c9:30:17:80:04:2a:53:7f:37:3d:4e:58:42:3f:
                    9c:4d:09:79:57:d0:1a:39:28:e0:ea:6e:e2:83:d1:
                    82:45:7b:96:0f:ad:68:c9:32:1f:f0:0d:52:f3:ac:
                    78:0b:5f:8f:9e:1e:b0:9c:1b:be:76:34:d6:3f:c1:
                    16:4d:f9:80:70:a1:42:de:07:a4:ba:8c:76:c5:eb:
                    fc:26:5c:e7:f1:b9:0d:65:a7:e5:58:fe:61:ec:df:
                    53:87:5c:79:8c:d5:36:fe:80:f8:53:2e:74:8c:79:
                    ed:ee:93:5c:ca:fd:8c:20:19:74:42:23:d5:53:a1:
                    dc:8a:d0:e6:06:dd:cb:c2:dd:77:f5:d7:72:18:04:
                    54:7c:46:17:3e:e4:9c:fc:8d:c3:64:b0:68:0b:7d:
                    24:ba:e4:ea:5d:ce:31:d0:24:41:8e:ea:04:6a:54:
                    1b:e4:4f:eb:3a:35:81:45:80:ed:cf:90:a0:6e:2d:
                    60:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AC:C3:56:1B:C2:DB:01:B4:18:1F:71:F7:BA:AC:89:08:B3:15:33
            X509v3 Authority Key Identifier:
                keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/06zDVhvC2wG0GB9x97qsiQizFTM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.229.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:5c:bb:d8:3b:7f:51:a1:5e:5b:ee:61:dc:cf:bf:3c:e9:c4:
         ed:83:73:b9:d6:e8:dd:89:25:8b:75:bd:51:a6:28:05:c5:45:
         33:8e:de:94:29:22:9b:70:b6:13:0b:47:ca:dc:37:d7:e1:70:
         e4:d1:4a:dd:ff:df:6c:6f:af:7a:b9:cb:52:bd:e1:aa:f7:e2:
         dd:f2:06:87:bf:a9:12:da:05:7a:06:76:b3:34:9a:ce:b6:56:
         dc:5b:db:e1:11:10:b6:21:b5:a7:36:fe:94:45:08:45:84:d2:
         c9:1d:b1:6d:c1:d6:10:49:4d:72:13:c6:6f:05:42:3c:3e:58:
         5b:ec:66:76:20:ba:81:a4:ba:bf:f3:9f:24:a8:98:0b:bf:f9:
         53:db:8e:3e:c8:45:9e:e0:fa:8f:21:15:84:55:da:e7:04:de:
         f5:28:1c:9e:e9:71:87:b7:1b:13:89:78:ce:8e:17:c2:aa:d8:
         39:8c:75:3f:9f:58:4c:a1:fe:68:1b:a9:97:db:e6:e6:bf:6a:
         8d:84:50:ab:39:82:ae:b9:63:cd:a3:ce:81:a7:82:a4:60:a4:
         06:88:0a:ae:57:55:ba:3b:06:20:22:69:da:2e:ef:98:6c:7d:
         75:4d:a7:a4:b5:05:e0:38:e1:2c:67:5e:17:3b:e8:d3:8a:9e:
         2f:1c:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:59 2026 by rpki-client