This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6oLmSdGLMfCCgXXJ4F70DbToVCY.roa
File:                     6oLmSdGLMfCCgXXJ4F70DbToVCY.roa (raw, json)
Hash identifier:          vqz6XKv7v7NRGvZ8FgtQa20w2CCUd+QGgS3yNw2riO0=
Subject key identifier:   EA:82:E6:49:D1:8B:31:F0:82:81:75:C9:E0:5E:F4:0D:B4:E8:54:26
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5D0F6B1538F697272FCD79C06B5FF8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6oLmSdGLMfCCgXXJ4F70DbToVCY.roa
Signing time:             Fri 02 Jan 2026 06:20:09 +0000
ROA not before:           Fri 02 Jan 2026 06:20:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207740
IP address blocks:        2a0e:b107:198::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:0f:6b:15:38:f6:97:27:2f:cd:79:c0:6b:5f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:20:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea82e649d18b31f0828175c9e05ef40db4e85426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3c:70:02:73:9b:d1:0f:82:4a:2a:89:54:0a:
                    0a:4b:4d:46:5d:cb:8f:19:5d:2e:69:81:f0:b5:33:
                    04:41:a5:2e:a0:48:15:ef:b0:eb:d5:fb:07:28:28:
                    86:18:a8:eb:e3:f9:0f:f7:41:e4:85:54:61:8e:84:
                    7e:6e:0c:44:55:da:c1:80:c1:d2:43:b4:c9:be:91:
                    3c:85:5f:1a:65:ae:3f:fd:f3:25:5d:7e:cd:54:ae:
                    16:b2:1a:97:71:eb:5c:ed:b9:d0:ab:1a:fa:2e:a6:
                    49:ea:41:58:72:52:5a:28:4c:d5:b4:7e:66:cb:de:
                    5f:a4:d4:a1:08:f8:24:27:93:b9:8f:1f:a4:ff:df:
                    42:64:e3:e6:af:df:6d:53:a2:16:d3:ba:26:0a:36:
                    d2:76:22:59:23:ff:50:2e:41:26:5b:f1:50:d4:4a:
                    3e:59:ae:98:b0:0f:92:71:9c:d5:4e:77:9a:30:5d:
                    9e:32:b3:93:4e:bb:bc:c3:f8:06:ff:22:4b:41:b6:
                    c5:e4:51:ed:83:bc:2a:43:af:55:5d:ae:cf:82:32:
                    50:37:09:f9:55:a6:80:2f:59:58:76:f2:7b:0f:c5:
                    78:d1:14:10:17:d4:81:da:07:cd:73:41:90:ef:4e:
                    25:16:d7:50:0b:b8:77:b6:b1:4e:09:ef:a4:f5:44:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:82:E6:49:D1:8B:31:F0:82:81:75:C9:E0:5E:F4:0D:B4:E8:54:26
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6oLmSdGLMfCCgXXJ4F70DbToVCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:198::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:a3:a6:1c:a0:ce:df:26:8a:7d:0b:5f:06:62:38:ab:1d:6c:
         7c:eb:8f:75:e4:82:13:4a:76:a0:58:5f:42:3f:03:16:ea:e4:
         16:fb:d4:fb:88:25:37:83:34:c3:68:8c:7c:6d:66:ef:9e:f3:
         01:88:18:00:6d:d5:56:76:b0:0e:d4:4a:53:76:8e:cb:de:c0:
         99:a4:55:17:21:c9:dc:e8:69:4a:4d:93:46:7e:35:ed:50:4b:
         7a:75:d1:40:48:5c:63:ea:d0:59:93:6f:10:23:74:ea:57:d0:
         17:a7:c5:90:b6:8d:90:49:4e:bd:2f:ef:5e:fa:a4:e9:0c:f1:
         b9:d2:f1:a7:20:0a:48:52:b8:f5:63:67:13:39:14:d7:97:8f:
         88:18:2c:8f:f4:b0:e7:75:e9:bf:f1:5b:2f:bc:e0:43:ef:8b:
         e4:8b:f3:26:52:37:05:55:eb:4e:de:3f:99:8b:60:4c:8a:bd:
         c2:91:ff:80:cd:57:4c:7e:54:9f:29:e6:ba:84:bc:22:f3:9e:
         28:9f:41:e0:51:59:bf:11:2b:b7:51:0f:27:19:8f:84:af:4f:
         13:0c:49:d8:de:87:b7:5e:01:c2:25:df:6a:ba:fd:94:ab:bb:
         96:09:69:a5:d7:37:ff:0e:d4:11:79:01:1c:9a:64:aa:3e:80:
         f3:81:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:53:57 2026 by rpki-client