This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/6w55XSdz6C1MVeTVI2bqPT0HfT4.roa
File:                     6w55XSdz6C1MVeTVI2bqPT0HfT4.roa (raw, json)
Hash identifier:          PA64tMamz9Jr6hO7ooAglcNP0CN5ddS+agnLpfV6sk8=
Subject key identifier:   EB:0E:79:5D:27:73:E8:2D:4C:55:E4:D5:23:66:EA:3D:3D:07:7D:3E
Certificate issuer:       /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial:       019B275BDA1759FEABF522EEC80DFDDAD568
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/6w55XSdz6C1MVeTVI2bqPT0HfT4.roa
Signing time:             Tue 16 Dec 2025 13:31:29 +0000
ROA not before:           Tue 16 Dec 2025 13:31:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21478
IP address blocks:        213.129.192.0/19 maxlen: 19
                          213.129.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 14:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:5b:da:17:59:fe:ab:f5:22:ee:c8:0d:fd:da:d5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
        Validity
            Not Before: Dec 16 13:31:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eb0e795d2773e82d4c55e4d52366ea3d3d077d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:ac:03:a4:6c:48:25:0a:be:83:d9:cc:a9:
                    6a:a9:6d:00:97:d4:b0:c4:b3:62:ea:5e:a8:57:ac:
                    d5:d3:d9:5d:03:d1:c7:f3:0a:ec:35:4c:41:8f:82:
                    16:10:42:e4:1d:db:36:1e:ef:f1:26:10:ab:d3:73:
                    49:45:92:19:4a:3f:99:3e:0d:f5:4f:c4:2f:05:66:
                    f4:98:f5:26:97:8a:f5:2a:cd:33:e7:0a:84:8f:13:
                    8e:67:9e:02:60:b4:9f:48:1f:f0:78:fe:1a:21:13:
                    34:b4:04:8e:f7:d8:69:2b:08:3d:27:da:06:8f:20:
                    58:21:02:8a:fc:1f:6e:fe:c8:ce:54:87:06:ed:26:
                    4d:c6:9d:14:32:e9:3f:e5:b3:a3:0b:19:aa:08:ea:
                    80:a7:2a:99:0f:74:44:26:8f:e3:19:c7:1e:79:d6:
                    5b:91:b5:cf:f5:cb:98:e4:c9:54:a9:f1:5a:04:10:
                    c0:7d:86:f1:6a:3a:ac:61:71:e1:3d:99:ae:d6:0f:
                    8f:86:74:dd:3a:c5:de:1f:c0:09:a0:24:41:55:85:
                    81:27:91:c1:85:c2:d4:dd:9d:05:9b:1e:22:da:e8:
                    de:e8:97:56:d3:bb:43:f6:a9:c9:f5:eb:45:4d:8f:
                    c6:06:71:6c:b8:c9:8b:04:52:bc:f4:9f:c9:c9:a0:
                    4f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0E:79:5D:27:73:E8:2D:4C:55:E4:D5:23:66:EA:3D:3D:07:7D:3E
            X509v3 Authority Key Identifier:
                keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/6w55XSdz6C1MVeTVI2bqPT0HfT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.129.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:2c:37:56:5b:cc:68:28:ff:6c:f4:3e:40:6e:c8:0c:45:b2:
         7d:a7:40:18:67:53:30:6e:e7:9e:18:da:6b:de:fb:58:94:75:
         27:43:25:74:57:18:e3:b4:30:6e:20:45:5a:97:41:38:7c:ba:
         c2:7b:e8:45:c6:bb:09:be:a8:4a:00:58:dd:bb:cc:ad:ba:87:
         aa:d0:a7:90:66:cd:fe:e4:5e:57:60:de:04:8b:24:de:05:d5:
         b6:6b:a5:cb:20:27:27:a9:94:4d:55:e9:46:0a:fe:f9:e8:cc:
         c0:f0:2a:54:16:07:7c:37:37:c8:01:04:76:4b:6b:15:56:ba:
         1a:ff:52:c5:eb:5b:2d:bf:e4:e2:a3:fb:1a:ea:80:7b:f3:07:
         c0:1b:f4:83:63:72:fb:ac:bb:55:aa:f4:93:c5:e6:7d:96:7c:
         ed:4e:ef:bb:a1:96:ec:80:d9:e1:64:cb:c3:6e:d1:df:2f:96:
         36:48:45:d4:c7:1e:c4:77:c6:34:d2:28:c6:5f:8c:ea:5f:5b:
         9f:77:1c:97:0b:d7:01:0b:86:ff:11:06:39:d3:54:96:aa:a0:
         00:b4:41:28:d6:f3:6a:da:21:b8:14:77:b4:85:89:6f:7f:5c:
         48:2c:8c:43:ff:f3:47:ed:9d:90:b4:ba:c9:0f:6f:c0:a4:1a:
         09:6b:83:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZsnW9oXWf6r9SLuyA392tVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDA4YzBjY2RhODAyY2YyMGNlN2FiZGVlYTIwMjE0ZTA1
ZTQ3YWYwHhcNMjUxMjE2MTMzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjBlNzk1ZDI3NzNlODJkNGM1NWU0ZDUyMzY2ZWEzZDNkMDc3ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFusA6RsSCUKvoPZzKlqqW0Al9Sw
xLNi6l6oV6zV09ldA9HH8wrsNUxBj4IWEELkHds2Hu/xJhCr03NJRZIZSj+ZPg31
T8QvBWb0mPUml4r1Ks0z5wqEjxOOZ54CYLSfSB/weP4aIRM0tASO99hpKwg9J9oG
jyBYIQKK/B9u/sjOVIcG7SZNxp0UMuk/5bOjCxmqCOqApyqZD3REJo/jGcceedZb
kbXP9cuY5MlUqfFaBBDAfYbxajqsYXHhPZmu1g+PhnTdOsXeH8AJoCRBVYWBJ5HB
hcLU3Z0Fmx4i2uje6JdW07tD9qnJ9etFTY/GBnFsuMmLBFK89J/JyaBPgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsOeV0nc+gtTFXk1SNm6j09B30+MB8GA1UdIwQY
MBaAFH7QjAzNqALPIM56ve6iAhTgXkevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEt
YWI1ZjM5ZmI4ZDM2LzEvNnc1NVhTZHo2QzFNVmVUVkkyYnFQVDBIZlQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEtYWI1ZjM5ZmI4ZDM2
LzEvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1YHAMA0G
CSqGSIb3DQEBCwUAA4IBAQBgLDdWW8xoKP9s9D5AbsgMRbJ9p0AYZ1MwbueeGNpr
3vtYlHUnQyV0VxjjtDBuIEVal0E4fLrCe+hFxrsJvqhKAFjdu8ytuoeq0KeQZs3+
5F5XYN4EiyTeBdW2a6XLICcnqZRNVelGCv756MzA8CpUFgd8NzfIAQR2S2sVVroa
/1LF61stv+Tio/sa6oB78wfAG/SDY3L7rLtVqvSTxeZ9lnztTu+7oZbsgNnhZMvD
btHfL5Y2SEXUxx7Ed8Y00ijGX4zqX1ufdxyXC9cBC4b/EQY501SWqqAAtEEo1vNq
2iG4FHe0hYlvf1xILIxD//NH7Z2QtLrJD2/ApBoJa4M/
-----END CERTIFICATE-----
Generated at Wed Dec 24 22:01:21 2025 by rpki-client