This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/oGx7JfYX53D__g9_5hLujNutUzE.roa
File:                     oGx7JfYX53D__g9_5hLujNutUzE.roa (raw, json)
Hash identifier:          lRBSZN0vcGbFXwTasrFrwyAWF1DzSBb5tPanlgAqXJc=
Subject key identifier:   A0:6C:7B:25:F6:17:E7:70:FF:FE:0F:7F:E6:12:EE:8C:DB:AD:53:31
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       019B77C6C0F7CFCF3F03D9404DCA7856371D
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/oGx7JfYX53D__g9_5hLujNutUzE.roa
Signing time:             Thu 01 Jan 2026 04:17:52 +0000
ROA not before:           Thu 01 Jan 2026 04:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212604
IP address blocks:        31.42.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:c0:f7:cf:cf:3f:03:d9:40:4d:ca:78:56:37:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Jan  1 04:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a06c7b25f617e770fffe0f7fe612ee8cdbad5331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:ab:38:ef:4a:59:f8:68:18:ce:69:45:bf:
                    90:0b:fa:3f:03:6d:6c:6f:b2:02:59:0d:55:1c:ea:
                    b8:ca:05:13:2b:fd:de:bd:49:01:e6:28:8c:d7:32:
                    a7:30:12:43:bf:af:a5:09:33:3c:a8:0c:93:6d:92:
                    6d:d0:2a:cb:f3:60:af:94:b6:86:d9:3e:4b:8e:7d:
                    cc:0e:89:d5:38:a2:d0:2a:b2:aa:df:65:75:98:a4:
                    c8:46:24:59:c8:1a:26:bb:2f:83:36:51:fc:44:f1:
                    89:de:e6:42:7e:44:85:95:30:d2:b2:9b:f8:cd:a5:
                    6c:4b:6e:ce:61:92:71:79:35:e2:9f:e0:49:22:b3:
                    34:ac:7f:e5:38:39:3a:d0:47:5a:50:f0:f9:be:fb:
                    73:a6:97:dd:ed:ee:e1:19:b4:4e:0f:f3:7e:61:13:
                    13:9b:e5:f9:0d:e4:b1:5f:87:35:d7:79:d1:cb:f8:
                    ce:2d:5a:82:7c:d2:91:23:a8:07:26:5d:65:55:21:
                    35:12:fb:34:91:ab:9a:c4:55:49:5e:7a:9a:89:5f:
                    d7:fa:89:d6:17:d0:fc:bc:dc:fc:60:4e:ff:6c:3f:
                    93:d5:0b:1f:1d:b2:73:bb:06:4f:93:92:63:a5:5d:
                    a4:d5:96:0f:e5:14:e1:ed:17:e2:68:61:3b:36:9d:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:7B:25:F6:17:E7:70:FF:FE:0F:7F:E6:12:EE:8C:DB:AD:53:31
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/oGx7JfYX53D__g9_5hLujNutUzE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.42.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:39:b6:26:1d:78:3c:49:10:bc:2e:60:b1:a1:79:8f:cd:
         e9:49:9c:98:b4:12:25:44:9e:d2:0b:c3:92:d7:91:f8:fd:17:
         ec:94:5a:7c:a2:b2:0e:a7:2c:51:a5:77:6f:c6:4d:9c:34:b1:
         ee:c3:3d:c5:31:b8:08:4d:93:b0:e7:5f:58:cd:88:e2:d1:f4:
         9a:bd:74:b1:af:f5:75:5f:95:ba:1b:a2:b8:3f:a3:d3:50:44:
         f2:62:5e:a8:e0:eb:07:84:d9:79:5d:60:c5:c4:53:8d:0d:70:
         16:6a:05:7a:0e:b5:9c:02:e8:46:d3:d1:31:f2:82:de:17:fb:
         01:52:0c:90:7d:4c:a2:71:22:dc:c5:6b:da:f3:8f:6d:65:77:
         d8:09:28:27:fd:25:0d:c6:c4:dd:ba:f4:c9:d3:fe:ff:0a:25:
         96:5f:a0:94:92:d1:0d:03:21:28:dc:00:8c:52:26:66:48:80:
         94:05:49:7e:00:5a:7e:d1:b3:25:50:7d:6f:2c:c9:e2:a4:4f:
         d3:7f:20:96:30:93:36:59:9a:00:ca:e9:7d:04:97:ef:36:cb:
         f2:1f:68:70:de:99:a6:f2:2d:bd:03:db:4e:18:6d:a5:94:26:
         07:e3:35:41:b1:1c:94:8d:26:89:ea:c0:fa:8a:86:7a:bf:d1:
         c0:58:e5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:48 2026 by rpki-client