This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/ttScyk0nEJvj6B9dbcRTLoD0eDc.roa
File:                     ttScyk0nEJvj6B9dbcRTLoD0eDc.roa (raw, json)
Hash identifier:          88OBT/soYdFP6btKziYk7b6XdT5PNfcTrPxPNTk8amc=
Subject key identifier:   B6:D4:9C:CA:4D:27:10:9B:E3:E8:1F:5D:6D:C4:53:2E:80:F4:78:37
Certificate issuer:       /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial:       019B797EA07F50B60617987E77C0B950E8CF
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/ttScyk0nEJvj6B9dbcRTLoD0eDc.roa
Signing time:             Thu 01 Jan 2026 12:18:19 +0000
ROA not before:           Thu 01 Jan 2026 12:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214307
IP address blocks:        2001:678:1018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:a0:7f:50:b6:06:17:98:7e:77:c0:b9:50:e8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
        Validity
            Not Before: Jan  1 12:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b6d49cca4d27109be3e81f5d6dc4532e80f47837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b0:db:8e:08:80:03:b5:00:0a:be:10:09:7e:
                    32:5b:65:27:54:4d:59:f6:59:30:25:79:51:01:56:
                    df:54:d0:c3:be:22:ec:86:f8:22:0a:df:48:97:4c:
                    9c:71:53:d5:ec:ad:b2:98:14:d2:5e:ec:a6:ab:a7:
                    e1:13:81:ef:88:02:04:18:b6:ff:80:d1:cb:ca:9e:
                    4e:88:cc:ed:6c:3f:9c:d2:7a:7e:0c:4b:08:50:58:
                    53:fe:d6:4e:00:4f:57:33:aa:91:45:31:62:7e:53:
                    f4:51:e7:d7:03:f8:3d:56:10:d9:fe:5d:35:8b:94:
                    a1:13:ff:06:08:86:15:b2:9f:ac:83:e4:a3:8a:cc:
                    16:3c:2d:c9:02:6f:74:5a:e8:c2:d9:7b:16:26:b6:
                    2f:78:90:44:3b:fe:09:50:0f:8e:be:21:94:66:75:
                    83:00:42:f5:71:a7:37:fa:87:8f:05:79:48:22:0a:
                    6e:83:94:30:fc:e5:35:48:75:94:51:ae:a0:90:be:
                    f4:66:60:52:56:9f:ce:fe:78:b7:60:b9:19:25:40:
                    23:6b:04:07:2b:c4:aa:ba:c2:ed:56:58:5b:b6:3b:
                    74:77:9b:39:09:30:37:92:b9:70:e0:f4:29:3c:fa:
                    84:da:15:0f:17:ae:9b:9e:a4:a0:4e:39:c9:f0:5b:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:9C:CA:4D:27:10:9B:E3:E8:1F:5D:6D:C4:53:2E:80:F4:78:37
            X509v3 Authority Key Identifier:
                keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/ttScyk0nEJvj6B9dbcRTLoD0eDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:1018::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:a2:58:d2:f0:42:a1:d1:b4:a9:15:8b:e1:f3:89:23:bf:
         f2:3b:91:a1:a2:e7:9a:29:02:99:5d:db:fd:66:28:c7:e9:20:
         a6:85:dc:f8:0a:c9:e8:c7:8c:85:cd:ee:31:9f:93:d4:2b:e2:
         1b:c3:c7:14:ee:57:f5:6e:80:58:a6:ae:ed:29:9e:3b:c5:45:
         2e:29:98:62:65:a5:d9:48:67:38:26:7b:5b:b2:10:16:3e:53:
         69:f5:e4:64:38:ed:21:66:22:d9:81:8f:a5:31:cb:39:59:8e:
         10:dd:1f:75:31:a8:83:16:c3:fd:8b:5c:0f:39:a8:cb:d7:e2:
         63:99:80:85:58:34:a6:cf:d0:f2:b0:09:40:53:ff:16:57:ee:
         02:a0:7f:2f:3c:bc:8a:36:dc:d3:8c:99:53:62:c8:1c:d7:e8:
         90:95:15:21:d2:68:07:a2:3d:16:dc:8a:30:11:96:f9:b9:71:
         d1:d5:d7:46:83:4f:ad:01:47:7b:55:4e:62:41:c1:0d:7c:fe:
         38:a7:9e:4e:ab:8b:42:25:8f:1a:a3:35:18:80:4a:7f:04:e8:
         42:a2:c7:55:b3:cf:37:f4:d1:17:f9:bb:0f:6f:31:57:72:48:
         ca:36:5c:2d:fa:a8:f2:bd:95:fb:d8:aa:90:7c:39:ff:38:ad:
         ba:19:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:07:58 2026 by rpki-client