This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa
File:                     6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (raw, json)
Hash identifier:          wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=
Subject key identifier:   EA:01:C6:87:F5:61:BB:EE:F7:36:83:D4:74:94:67:A4:36:B9:28:1B
Certificate issuer:       /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial:       019B7A5B83FABFE556EB1B75A4064A9FBEFD
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa
Signing time:             Thu 01 Jan 2026 16:19:36 +0000
ROA not before:           Thu 01 Jan 2026 16:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211895
IP address blocks:        2a14:bc80:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:83:fa:bf:e5:56:eb:1b:75:a4:06:4a:9f:be:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
        Validity
            Not Before: Jan  1 16:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea01c687f561bbeef73683d4749467a436b9281b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:4e:75:25:37:7f:31:3f:78:9c:5c:5f:71:
                    ba:8c:5c:67:d0:34:18:5b:a3:35:31:ad:6f:ff:8d:
                    ea:fc:fe:7e:5c:07:f7:4d:85:fd:f4:bf:54:ff:fd:
                    93:06:24:98:3b:0c:e9:b1:33:e2:cf:45:d7:a9:73:
                    01:46:49:ad:36:6f:e9:55:fa:93:92:69:86:c7:da:
                    01:45:eb:ae:bc:4c:50:e2:32:6d:1d:d6:06:62:7b:
                    22:9a:59:c1:5e:c2:ef:ad:db:d3:b2:b2:0d:de:3f:
                    0a:6a:cd:f5:b2:78:ad:c2:21:df:4c:57:50:55:f0:
                    84:99:64:68:0b:d9:7d:81:ff:c8:96:07:31:7b:99:
                    4c:0f:79:ce:26:61:c3:25:ba:53:58:8f:9e:46:75:
                    2d:d4:e9:90:b3:d3:a7:43:69:b7:74:3a:3d:04:53:
                    6d:29:5c:6f:05:6a:0c:5a:9e:e3:c1:ff:d3:5c:71:
                    22:47:1b:8c:a1:ee:d7:9f:23:58:f6:85:97:4e:0e:
                    86:35:b7:1e:55:7f:24:8c:85:c5:de:c8:be:b6:c9:
                    cf:3d:0f:08:f2:9f:59:bf:c3:c4:7b:9e:be:b1:a5:
                    91:72:16:dc:43:35:a5:cb:86:cd:bc:c5:38:2d:27:
                    26:9d:ba:28:dc:e6:5a:86:ad:b3:c4:9b:63:25:c9:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:01:C6:87:F5:61:BB:EE:F7:36:83:D4:74:94:67:A4:36:B9:28:1B
            X509v3 Authority Key Identifier:
                keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:bc80:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:99:16:3e:66:4d:df:76:96:40:4d:b1:3e:b8:a3:a7:67:93:
         41:4c:39:26:8d:40:1d:d7:73:f7:ff:c9:21:8d:2d:bd:3a:f2:
         d8:bb:77:36:7f:80:65:fd:b0:6e:c0:69:18:8c:af:89:4d:b0:
         38:23:9d:ed:00:70:4e:f5:e9:e4:fc:7f:89:0e:63:2f:8f:58:
         43:ca:fa:92:51:53:46:ce:2f:53:5d:35:11:ef:d9:33:6f:20:
         01:90:73:b0:c8:48:e6:09:18:35:84:10:1b:f3:61:dc:97:dd:
         c3:bc:51:9e:09:d7:be:62:14:4b:6d:d3:e5:6d:10:fa:fe:5a:
         56:f5:91:53:95:6a:86:2e:1c:1b:9d:ec:83:98:89:2f:c7:0f:
         ed:5a:69:12:27:d5:8d:35:b9:73:d4:54:b1:52:eb:d0:c7:92:
         05:b8:eb:c5:a3:5b:50:71:da:b2:c3:02:26:94:84:34:e0:5c:
         58:f4:f0:cc:9d:82:a5:c7:46:d2:b1:93:b9:60:8e:12:2a:f0:
         d0:27:29:bc:27:88:64:5b:98:a0:96:6d:3f:c8:80:fd:f3:92:
         1e:25:51:1b:44:a2:63:d5:73:8f:23:d4:0b:32:f1:92:77:ea:
         47:33:b6:08:87:0a:d0:e7:c0:7a:df:70:a6:91:f8:2d:08:c1:
         47:3c:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:15 2026 by rpki-client