This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6-c2JXaLz47i_iznX2scMdNciBs.roa
File:                     6-c2JXaLz47i_iznX2scMdNciBs.roa (raw, json)
Hash identifier:          kPEED+hMNbrIf83Jn21e1R1kDQD3D3bZ2JFY4BY4nes=
Subject key identifier:   EB:E7:36:25:76:8B:CF:8E:E2:FE:2C:E7:5F:6B:1C:31:D3:5C:88:1B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5D87831927E70025DE132B1B7AA43F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6-c2JXaLz47i_iznX2scMdNciBs.roa
Signing time:             Fri 02 Jan 2026 06:20:40 +0000
ROA not before:           Fri 02 Jan 2026 06:20:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216039
IP address blocks:        45.12.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:87:83:19:27:e7:00:25:de:13:2b:1b:7a:a4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:20:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ebe73625768bcf8ee2fe2ce75f6b1c31d35c881b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:33:a5:79:5c:f7:3f:06:73:30:87:fc:f7:
                    d1:a4:40:ae:e1:ef:76:96:d5:10:86:d2:bf:ba:c5:
                    ae:6b:3f:93:15:a9:a5:5e:76:91:c5:60:9f:37:09:
                    c0:bd:62:27:1c:5d:a9:ea:1e:84:85:04:18:eb:96:
                    35:ca:29:97:3a:b2:62:1f:fe:bc:e5:12:a4:a3:08:
                    0d:d8:44:5d:3a:c2:0c:23:b7:39:03:48:e4:34:b9:
                    85:88:01:ff:be:7f:0b:a5:00:b4:1c:f1:4d:63:70:
                    3a:d9:c0:a3:11:fe:aa:66:1d:91:de:4b:7b:0f:26:
                    cd:40:5d:e9:40:60:86:99:1a:9a:38:c0:5b:24:4c:
                    2b:a6:72:6d:e6:07:1c:8c:47:14:54:b6:a7:8c:55:
                    00:62:0f:16:96:38:47:6b:2a:1b:d8:22:42:8c:b2:
                    4b:f6:ce:cb:08:33:32:af:4d:97:33:4a:2d:c3:8f:
                    b8:bb:47:a4:40:64:a2:f5:5e:12:b8:c4:29:32:a3:
                    44:4c:22:9f:aa:07:80:8f:34:ff:79:56:36:ff:55:
                    39:e0:59:58:e7:55:fc:3c:f7:e6:6e:1a:18:c6:dc:
                    5b:e5:d5:57:59:ba:df:c0:4a:07:55:62:1d:36:c9:
                    ec:60:8b:d3:73:d0:78:ff:35:a9:3e:b1:43:91:1b:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E7:36:25:76:8B:CF:8E:E2:FE:2C:E7:5F:6B:1C:31:D3:5C:88:1B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6-c2JXaLz47i_iznX2scMdNciBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:dd:db:17:f4:49:68:fe:a4:4f:7a:3a:50:d0:06:35:3e:2b:
         f7:52:e7:62:0e:f8:9b:3b:99:b2:1c:a3:22:39:ac:c4:43:20:
         12:c9:9a:b2:33:ac:be:1f:91:97:c9:d5:c6:aa:ee:e5:ab:40:
         9d:d7:76:1e:33:80:06:2f:81:ff:97:83:69:76:3c:62:6f:c6:
         9e:f8:13:38:9d:6d:50:50:aa:9a:8b:6f:af:2d:0e:88:91:95:
         8e:57:d1:4d:c2:f6:73:97:49:ea:ff:8e:07:53:73:62:65:4d:
         cb:73:38:3a:93:29:31:4d:a3:d4:c5:8d:30:5f:7f:b0:fe:e6:
         0f:2f:56:66:5e:cd:a7:19:f8:1e:c6:26:5b:7c:01:06:3f:ab:
         39:3c:b0:f6:20:f5:78:c5:1b:04:6a:af:00:ec:20:03:66:b7:
         67:12:66:97:17:47:d5:5a:78:d3:98:1d:84:68:84:15:12:53:
         50:d0:6a:73:2b:30:7c:1a:43:01:27:6c:c2:2c:00:b6:3d:1f:
         03:6e:70:5e:b6:ff:07:dc:57:58:0d:e0:c5:3f:04:ac:22:f0:
         f0:29:36:25:0f:d3:36:ee:a8:2d:0a:2b:e0:5a:64:be:7d:22:
         61:b3:9c:d3:ed:86:5f:00:e6:6a:2d:4f:3e:e9:c3:c8:1a:db:
         8c:36:90:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XYeDGSfnACXeEysbeqQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwMTAyMDYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmU3MzYyNTc2OGJjZjhlZTJmZTJjZTc1ZjZiMWMzMWQzNWM4ODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1egzpXlc9z8GczCH/PfRpECu4e92
ltUQhtK/usWuaz+TFamlXnaRxWCfNwnAvWInHF2p6h6EhQQY65Y1yimXOrJiH/68
5RKkowgN2ERdOsIMI7c5A0jkNLmFiAH/vn8LpQC0HPFNY3A62cCjEf6qZh2R3kt7
DybNQF3pQGCGmRqaOMBbJEwrpnJt5gccjEcUVLanjFUAYg8WljhHayob2CJCjLJL
9s7LCDMyr02XM0otw4+4u0ekQGSi9V4SuMQpMqNETCKfqgeAjzT/eVY2/1U54FlY
51X8PPfmbhoYxtxb5dVXWbrfwEoHVWIdNsnsYIvTc9B4/zWpPrFDkRt4gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvnNiV2i8+O4v4s519rHDHTXIgbMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNi1jMkpYYUx6NDdpX2l6blgyc2NNZE5jaUJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQxHMA0G
CSqGSIb3DQEBCwUAA4IBAQDL3dsX9Elo/qRPejpQ0AY1Piv3UudiDvibO5myHKMi
OazEQyASyZqyM6y+H5GXydXGqu7lq0Cd13YeM4AGL4H/l4Npdjxib8ae+BM4nW1Q
UKqai2+vLQ6IkZWOV9FNwvZzl0nq/44HU3NiZU3Lczg6kykxTaPUxY0wX3+w/uYP
L1ZmXs2nGfgexiZbfAEGP6s5PLD2IPV4xRsEaq8A7CADZrdnEmaXF0fVWnjTmB2E
aIQVElNQ0GpzKzB8GkMBJ2zCLAC2PR8DbnBetv8H3FdYDeDFPwSsIvDwKTYlD9M2
7qgtCivgWmS+fSJhs5zT7YZfAOZqLU8+6cPIGtuMNpCu
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:53:29 2026 by rpki-client