This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa
File:                     K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa (raw, json)
Hash identifier:          v1gwKHJC5TEruomxCVoo3M10PFXjPvm/5QWXyyAdr3M=
Subject key identifier:   2B:A5:F1:9C:73:94:DD:2A:16:F2:35:D7:71:37:BE:5A:E4:07:BE:99
Certificate issuer:       /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial:       019B77593CFB82026FA6F0910F4B6C63AFE4
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa
Signing time:             Thu 01 Jan 2026 02:18:15 +0000
ROA not before:           Thu 01 Jan 2026 02:18:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15576
IP address blocks:        91.198.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:3c:fb:82:02:6f:a6:f0:91:0f:4b:6c:63:af:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
        Validity
            Not Before: Jan  1 02:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2ba5f19c7394dd2a16f235d77137be5ae407be99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:86:04:66:8c:f3:31:70:dc:a3:95:6f:9b:
                    eb:ba:3e:9d:e3:5e:d5:1a:33:36:4a:9f:2a:1a:fe:
                    bd:13:a5:b8:24:d3:26:e4:3c:c5:aa:ab:2a:0b:51:
                    b6:fc:d7:a6:26:c0:7f:ec:26:ae:82:1b:bb:ba:64:
                    72:f5:35:ab:6f:64:58:10:90:35:aa:10:a7:2b:58:
                    4a:e2:a7:34:40:d9:fa:d7:71:a8:b9:5f:da:51:32:
                    26:81:f2:a9:26:21:b9:2a:6b:3b:f6:05:10:46:f6:
                    04:8b:3f:a2:70:51:52:6e:45:ed:cd:ac:37:2f:f0:
                    08:cd:ec:bd:44:1f:7b:9e:08:e8:00:e8:23:35:dc:
                    9e:70:08:ad:35:42:1e:9c:d7:f8:ce:9b:c9:52:b5:
                    43:8c:b4:b1:aa:cb:05:dd:49:b3:04:75:86:07:bd:
                    64:17:aa:92:a1:83:f0:bd:4b:06:8a:5d:1d:bf:8c:
                    73:47:b3:26:0c:8d:ef:08:0e:f3:ed:45:d1:38:9e:
                    8c:8d:69:2e:a9:a4:df:a7:36:89:83:c9:1a:c3:b4:
                    6d:9c:ff:ea:d1:61:b2:1e:9f:1f:12:3d:87:7b:f1:
                    be:eb:78:00:a4:be:28:60:82:f4:17:25:23:a5:3b:
                    d8:df:93:1f:ea:c9:76:3f:25:b7:29:9f:6a:20:cf:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A5:F1:9C:73:94:DD:2A:16:F2:35:D7:71:37:BE:5A:E4:07:BE:99
            X509v3 Authority Key Identifier:
                keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:5b:10:8b:ff:b9:f1:e0:b2:97:59:be:05:6c:d8:8b:91:
         af:30:1c:d7:37:7e:84:03:1e:9d:47:17:6a:cf:c5:55:0f:a0:
         b4:a9:03:78:00:53:34:72:65:12:93:7f:e6:e7:d3:cf:d3:29:
         1c:e0:8b:6b:2b:50:65:31:1a:43:34:c6:c0:c6:0d:f8:78:46:
         7f:49:76:21:c1:73:98:c6:35:21:3a:26:bf:38:00:5e:85:b4:
         48:22:e5:ee:36:f2:c8:e0:cb:6a:f1:c6:92:c8:ce:a5:7f:06:
         04:88:99:1a:40:7f:0b:b4:f1:9a:93:38:40:f7:02:b7:f5:9b:
         de:98:4c:2b:fa:78:2c:f8:e5:c9:5b:64:0c:63:12:36:99:8a:
         3d:30:07:7c:18:3a:5b:d0:b6:d6:c5:28:68:e2:f6:24:c3:b6:
         0b:c6:e7:ce:ab:ee:0d:7b:49:e2:0f:b0:78:c2:4e:f5:0f:90:
         ae:dd:72:4a:db:32:cf:63:71:af:9c:07:9e:82:75:3b:c5:e2:
         55:0e:59:41:ae:ce:8c:ec:0c:55:48:93:24:4f:1b:dd:d7:94:
         fd:bb:8a:ba:1a:bf:8e:ff:93:fd:30:c7:8c:e0:ff:1f:f8:1c:
         df:8a:cb:0b:36:80:6a:de:e1:24:7e:3f:75:0b:9b:01:35:d9:
         83:4d:bf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:19:22 2026 by rpki-client