This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/g6jPgmA9vQSNd66VYMtew1oI3xI.roa
File:                     g6jPgmA9vQSNd66VYMtew1oI3xI.roa (raw, json)
Hash identifier:          1XDTsi1Gk9TJEDNyRLrsTppHwp6Q/DYze7H82uVbr9o=
Subject key identifier:   83:A8:CF:82:60:3D:BD:04:8D:77:AE:95:60:CB:5E:C3:5A:08:DF:12
Certificate issuer:       /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial:       019B35D8A6D98DBBC708B9250FDE447FFFFA
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/g6jPgmA9vQSNd66VYMtew1oI3xI.roa
Signing time:             Fri 19 Dec 2025 09:02:29 +0000
ROA not before:           Fri 19 Dec 2025 09:02:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16019
IP address blocks:        178.211.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:d8:a6:d9:8d:bb:c7:08:b9:25:0f:de:44:7f:ff:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
        Validity
            Not Before: Dec 19 09:02:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=83a8cf82603dbd048d77ae9560cb5ec35a08df12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:c1:78:4b:dc:8d:fb:1c:fb:82:24:01:80:
                    9f:51:6d:c1:89:d4:10:7c:bb:4a:fe:29:ae:e8:5f:
                    eb:b5:19:ec:f2:80:e1:1b:18:0d:14:79:5e:c5:8f:
                    3b:1b:9e:ff:e0:25:82:cd:21:10:b1:e0:5c:70:54:
                    76:e3:a5:83:97:cc:15:40:b1:cb:73:a5:0a:5b:1f:
                    7c:e4:02:47:9b:93:56:da:e3:d7:31:e7:fd:b5:24:
                    8d:ab:12:33:df:7b:6a:2b:3a:70:30:2f:b8:68:88:
                    13:86:c6:f3:04:0e:d1:51:5b:1b:27:cf:7e:03:39:
                    78:b5:3d:db:ec:00:25:0b:e4:3b:e1:01:64:b8:4f:
                    f7:e4:9a:5d:b5:d1:92:57:5c:cf:77:83:9d:bc:14:
                    98:d6:55:aa:31:84:c2:c9:f8:f4:00:8f:47:ec:30:
                    e2:2f:f6:40:d1:8b:87:fe:e0:2c:a9:86:cc:a9:d1:
                    f3:f3:1f:e2:3d:99:75:77:b8:00:4f:cb:6b:96:fe:
                    b7:81:55:d7:45:18:75:4f:70:ee:17:ed:36:fe:25:
                    e9:65:63:4f:d9:7f:10:cf:4a:4d:52:23:21:03:46:
                    bd:5d:f6:57:07:8e:9d:64:11:d2:50:31:18:2c:73:
                    d8:78:1c:52:da:13:17:21:41:1d:ea:73:90:9c:7a:
                    57:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A8:CF:82:60:3D:BD:04:8D:77:AE:95:60:CB:5E:C3:5A:08:DF:12
            X509v3 Authority Key Identifier:
                keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/g6jPgmA9vQSNd66VYMtew1oI3xI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:7a:8c:49:66:28:16:f5:6f:cd:7e:9f:60:98:44:5a:88:ac:
         b4:2a:4b:08:67:7d:62:ea:47:c2:ef:55:6b:f4:08:84:78:52:
         bb:ab:1a:aa:98:7c:f5:cd:9f:3e:27:68:d6:f0:4a:a8:0d:a0:
         03:a0:36:cc:af:a9:a1:52:fa:99:9d:41:be:e3:72:d1:cc:be:
         ea:ee:f0:11:d5:9a:79:e3:2e:c6:41:e7:00:96:b7:6c:6b:41:
         11:6e:3e:17:d7:71:18:2a:17:bf:ab:71:29:14:4f:67:20:0d:
         4b:b3:0b:54:b0:79:6f:7f:eb:b1:a4:97:4f:d4:f9:d0:e0:84:
         fd:cb:e9:d4:4f:57:23:cc:ac:a3:91:4b:11:cd:71:4c:f8:0a:
         ed:43:43:d8:cd:b4:47:9e:a6:dc:0b:06:3b:ad:dc:15:7b:33:
         ba:b4:34:88:f2:21:d5:18:af:1d:e8:06:15:58:57:c4:4b:9d:
         90:2c:cf:73:b4:1e:b0:0d:75:e8:ad:f6:48:08:1c:83:f6:6a:
         cd:bf:ab:91:df:0e:bb:1e:be:91:67:2e:ea:17:88:d8:32:18:
         a9:eb:6f:15:f3:1d:e9:c9:60:26:4b:2e:88:28:2e:db:e0:3d:
         33:39:4a:5a:60:80:98:02:8b:dc:74:41:70:59:c7:30:38:38:
         8c:95:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:43:54 2025 by rpki-client