This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/6iAprnV5kqIXyXcpRUbGQgO9SaM.roa
File:                     6iAprnV5kqIXyXcpRUbGQgO9SaM.roa (raw, json)
Hash identifier:          pdyKwoYg0ynw9WDHpbBigS85Bj0l6yeKu12lhKM9YfA=
Subject key identifier:   EA:20:29:AE:75:79:92:A2:17:C9:77:29:45:46:C6:42:03:BD:49:A3
Certificate issuer:       /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial:       019B7A5B8EC3ABE90CBE179A2804CE31AA3F
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/6iAprnV5kqIXyXcpRUbGQgO9SaM.roa
Signing time:             Thu 01 Jan 2026 16:19:39 +0000
ROA not before:           Thu 01 Jan 2026 16:19:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199471
IP address blocks:        185.83.87.0/24 maxlen: 24
                          2001:67c:c48::/48 maxlen: 48
                          2a13:fc80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:8e:c3:ab:e9:0c:be:17:9a:28:04:ce:31:aa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
        Validity
            Not Before: Jan  1 16:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea2029ae757992a217c977294546c64203bd49a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:79:83:93:ee:26:06:b9:6b:a3:37:5b:96:
                    8c:38:6f:cb:a4:32:3e:f5:0a:5d:9f:95:78:1f:16:
                    e9:6c:2f:30:aa:98:45:8e:ad:2f:b6:d6:7a:c9:9b:
                    b1:48:eb:1c:66:ad:e0:d6:04:b6:98:bf:a2:9b:55:
                    e6:b8:bc:31:fb:1b:7c:55:f5:f1:b3:c0:a5:2f:f2:
                    ba:81:70:70:9c:57:97:a9:bc:17:2b:4d:cc:f3:f4:
                    19:48:c4:fc:df:62:a3:58:9a:d0:4e:25:17:1d:6e:
                    e1:4d:bb:19:0c:ed:20:e1:9a:4e:00:2d:5b:27:fc:
                    f3:7f:79:a2:9f:88:54:8e:f6:ec:47:98:a9:c6:75:
                    27:f1:3c:14:62:23:7d:74:57:8f:15:2f:9a:c9:58:
                    d9:c6:2e:54:4b:5e:b9:da:96:02:b1:13:74:6a:bb:
                    7c:98:76:5f:0b:a9:4c:9e:9d:1c:a5:58:ce:46:24:
                    8f:68:df:c8:7c:d3:6d:5a:16:63:24:dd:32:bd:89:
                    9e:73:83:c0:e9:6d:fa:c1:19:9e:5a:c0:40:ca:94:
                    d5:52:40:c8:41:80:d6:a6:ba:47:ac:16:95:37:dc:
                    9e:57:2e:1f:c4:02:90:5e:88:d7:7f:e1:8c:8f:59:
                    60:20:78:a9:36:59:48:6a:60:ff:42:d7:80:14:9d:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:20:29:AE:75:79:92:A2:17:C9:77:29:45:46:C6:42:03:BD:49:A3
            X509v3 Authority Key Identifier:
                keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/6iAprnV5kqIXyXcpRUbGQgO9SaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.87.0/24
                IPv6:
                  2001:67c:c48::/48
                  2a13:fc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ab:e5:b7:ef:29:b5:f2:41:8b:60:59:3b:3b:48:b6:ed:b1:
         c2:20:73:03:90:65:aa:71:ba:f3:52:69:57:15:82:d3:64:e3:
         36:54:af:72:e9:c8:fd:93:2e:24:cc:76:7d:d7:c3:79:4c:46:
         9f:a2:2a:87:a4:91:fd:d6:e6:1f:81:b0:41:e9:14:fb:a6:33:
         79:96:db:2a:03:25:71:d8:f2:0f:85:97:06:a8:de:eb:54:e7:
         0a:38:38:17:b7:6e:cc:2f:c4:36:4f:27:02:53:27:8b:b8:47:
         93:92:44:9d:5d:22:91:fa:73:c6:05:4d:6d:98:6d:e3:df:f1:
         03:e5:6a:9b:5e:2f:89:e3:19:8c:3b:a3:ef:9c:b7:59:86:9e:
         27:f3:e4:3f:f1:53:15:38:46:55:fc:45:ef:cb:cc:ec:77:20:
         08:d7:e5:60:2d:c6:b6:04:88:8a:78:b8:a8:53:2f:69:bb:c6:
         08:cd:f6:86:cc:7a:df:ee:5a:24:c2:3e:6f:b5:07:f9:20:7c:
         71:09:62:ac:63:0c:6d:aa:8d:69:81:5c:55:18:5c:c6:a9:5f:
         61:7c:f0:da:b4:37:f2:57:2e:da:1d:d6:6d:d0:42:39:10:d5:
         53:42:28:5d:7b:d9:ba:e9:13:98:ce:df:5b:6c:ac:5f:60:e7:
         25:37:05:ad
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZt6W47Dq+kMvheaKATOMao/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjdhYjNmMWE5M2U3MTRmMzA3NGEwNWQ4NmZjY2UyMjA2
MzA1YTgwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTIwMjlhZTc1Nzk5MmEyMTdjOTc3Mjk0NTQ2YzY0MjAzYmQ0OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b15g5PuJga5a6M3W5aMOG/LpDI+
9Qpdn5V4HxbpbC8wqphFjq0vttZ6yZuxSOscZq3g1gS2mL+im1XmuLwx+xt8VfXx
s8ClL/K6gXBwnFeXqbwXK03M8/QZSMT832KjWJrQTiUXHW7hTbsZDO0g4ZpOAC1b
J/zzf3min4hUjvbsR5ipxnUn8TwUYiN9dFePFS+ayVjZxi5US1652pYCsRN0art8
mHZfC6lMnp0cpVjORiSPaN/IfNNtWhZjJN0yvYmec4PA6W36wRmeWsBAypTVUkDI
QYDWprpHrBaVN9yeVy4fxAKQXojXf+GMj1lgIHipNllIamD/QteAFJ0+NwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOogKa51eZKiF8l3KUVGxkIDvUmjMB8GA1UdIwQY
MBaAFKz3qz8ak+cU8wdKBdhvzOIgYwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMt
YWQ0M2NjZDdhYWU4LzEvNmlBcHJuVjVrcUlYeVhjcFJVYkdRZ085U2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMtYWQ0M2NjZDdhYWU4
LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAuVNXMBYE
AgACMBADBwAgAQZ8DEgDBQAqE/yAMA0GCSqGSIb3DQEBCwUAA4IBAQAyq+W37ym1
8kGLYFk7O0i27bHCIHMDkGWqcbrzUmlXFYLTZOM2VK9y6cj9ky4kzHZ918N5TEaf
oiqHpJH91uYfgbBB6RT7pjN5ltsqAyVx2PIPhZcGqN7rVOcKODgXt27ML8Q2TycC
UyeLuEeTkkSdXSKR+nPGBU1tmG3j3/ED5WqbXi+J4xmMO6PvnLdZhp4n8+Q/8VMV
OEZV/EXvy8zsdyAI1+VgLca2BIiKeLioUy9pu8YIzfaGzHrf7lokwj5vtQf5IHxx
CWKsYwxtqo1pgVxVGFzGqV9hfPDatDfyVy7aHdZt0EI5ENVTQihde9m66ROYzt9b
bKxfYOclNwWt
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:52 2026 by rpki-client