This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bCmxeAV4gLO763YqiKtKR-5tTlI.roa
File:                     bCmxeAV4gLO763YqiKtKR-5tTlI.roa (raw, json)
Hash identifier:          LIQlvdXbBEI0P5bAkhBTB9GiU9ltvI8O2aFTiuc7/8M=
Subject key identifier:   6C:29:B1:78:05:78:80:B3:BB:EB:76:2A:88:AB:4A:47:EE:6D:4E:52
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019B7C8066382E3CC588D1D84189157D8A01
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bCmxeAV4gLO763YqiKtKR-5tTlI.roa
Signing time:             Fri 02 Jan 2026 02:19:08 +0000
ROA not before:           Fri 02 Jan 2026 02:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62036
IP address blocks:        92.63.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:66:38:2e:3c:c5:88:d1:d8:41:89:15:7d:8a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 02:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c29b178057880b3bbeb762a88ab4a47ee6d4e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5e:da:37:44:b3:9a:cb:2e:da:80:95:b0:1f:
                    9e:cd:12:64:e0:cf:51:11:d0:d3:c6:ff:1c:ba:86:
                    48:9f:d0:cf:36:70:1a:20:b9:44:92:08:87:0b:5f:
                    02:7c:b0:b7:11:a9:94:9f:c9:8f:0d:35:16:31:aa:
                    a2:87:49:66:a0:46:3a:38:77:60:86:f5:19:f0:1d:
                    30:fc:52:4b:71:f3:61:d4:60:83:1d:03:7f:fa:43:
                    91:6a:dd:88:94:2d:09:1e:b9:c4:ec:37:a4:7c:c3:
                    1c:d1:51:4c:93:8d:93:47:8f:b8:a2:bb:27:25:79:
                    51:26:ec:aa:91:7d:e3:6d:18:58:82:57:13:93:43:
                    6e:0e:40:51:8f:a6:13:48:10:8e:b7:ad:de:3b:b5:
                    f5:2c:c8:83:80:92:86:84:e9:99:34:04:37:59:5e:
                    b6:56:b6:1f:72:20:c9:c2:0c:0a:a2:5d:14:b8:9f:
                    16:b9:e1:13:f5:ba:0f:b4:3c:06:bd:99:37:f8:2c:
                    8c:64:b8:2d:5c:cf:30:63:5f:ec:d8:e6:1e:e6:9e:
                    96:93:c6:8b:94:08:c1:6a:a0:0d:08:f1:aa:0c:8c:
                    59:e5:73:06:8b:be:da:95:66:5b:0f:b2:6d:70:01:
                    80:36:a5:e8:3e:83:e0:d2:82:36:b1:54:0f:bc:51:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:29:B1:78:05:78:80:B3:BB:EB:76:2A:88:AB:4A:47:EE:6D:4E:52
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bCmxeAV4gLO763YqiKtKR-5tTlI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d1:06:75:e1:84:00:21:96:22:60:ef:5f:74:bf:85:8a:21:
         54:26:22:ec:94:dc:29:7c:11:7d:96:ff:66:b5:2e:ea:ad:f2:
         fa:c4:59:0e:58:66:19:20:de:ff:1e:80:a9:ab:74:33:25:37:
         4c:bf:f6:66:04:22:e5:42:9e:10:6e:db:0f:66:b2:ef:94:76:
         ea:92:98:9f:ce:f3:df:96:32:0b:02:ea:d9:8d:82:a3:e9:9b:
         ad:2e:0a:3b:89:5e:ea:9f:97:9e:8e:99:7d:cc:3e:2a:d4:a2:
         c8:97:14:b8:fd:6e:bd:c0:31:79:c8:08:2b:ad:fb:df:e7:45:
         68:f8:22:8a:1f:5b:db:a0:24:4b:58:ce:9c:6a:21:e8:53:40:
         95:c6:fa:52:a0:5c:bd:02:7d:3d:74:a8:5c:cc:2f:f5:c4:21:
         c1:03:e3:9c:00:a1:8f:15:d2:06:77:ff:9b:7a:af:00:ac:79:
         94:54:e3:5d:5d:ed:74:25:20:91:91:94:d0:1f:66:fb:66:16:
         b7:83:d7:8b:74:e6:b6:57:9f:8e:34:f2:8a:2a:20:6a:c6:de:
         7d:80:63:29:85:a8:74:12:b4:53:81:fc:b0:7b:69:ee:ea:2f:
         3a:b5:b8:68:c4:d6:01:cf:d6:01:b5:60:91:1b:46:9a:ab:24:
         fa:cb:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:51:00 2026 by rpki-client