This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa
File:                     6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (raw, json)
Hash identifier:          2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=
Subject key identifier:   E8:F5:8E:1B:3F:CA:A9:19:1B:D7:34:89:04:F4:98:AB:00:37:39:B9
Certificate issuer:       /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial:       019B791119FA71016C863C09EF8D75664347
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa
Signing time:             Thu 01 Jan 2026 10:18:42 +0000
ROA not before:           Thu 01 Jan 2026 10:18:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15694
IP address blocks:        194.49.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:19:fa:71:01:6c:86:3c:09:ef:8d:75:66:43:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
        Validity
            Not Before: Jan  1 10:18:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8f58e1b3fcaa9191bd7348904f498ab003739b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:1e:0f:18:d8:05:b8:3d:83:d4:29:66:0a:
                    fb:00:08:0f:f3:c1:2b:b7:09:af:fb:df:2c:96:b6:
                    1d:39:7d:1f:2e:52:77:31:29:f9:ba:81:1c:08:b6:
                    cf:3a:5a:38:99:f5:21:a3:ba:ed:c9:70:03:81:a8:
                    17:3a:aa:fe:54:78:d3:e2:a6:d2:a4:2b:1f:08:2e:
                    5c:36:f9:4c:5a:a5:e2:cd:0d:d5:3e:7a:e1:29:93:
                    65:0b:16:e1:7b:c6:43:01:2e:b3:98:13:00:ce:e5:
                    f8:5c:05:57:54:19:9e:be:0d:42:4c:10:4f:d8:eb:
                    e6:6e:3a:af:a3:4a:82:62:6d:08:22:41:58:c3:a0:
                    26:9c:eb:da:b9:8c:5f:80:24:e4:a3:02:2d:79:46:
                    22:3b:9f:34:31:46:cb:4f:06:12:37:af:18:07:78:
                    c8:a0:8e:4d:87:e5:79:13:8b:dc:38:a2:ee:57:41:
                    b2:11:a1:6c:81:69:50:e2:f6:20:88:43:14:fc:57:
                    1f:de:85:11:20:18:6b:77:47:34:0e:39:1e:5b:f3:
                    7e:9e:2f:d8:fc:06:2e:1a:33:4a:92:a8:22:a5:bf:
                    69:da:16:db:d6:2b:12:f3:61:f1:d7:b8:62:6d:cf:
                    ce:05:23:4c:25:13:3e:f1:c7:93:a6:6c:43:5c:09:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F5:8E:1B:3F:CA:A9:19:1B:D7:34:89:04:F4:98:AB:00:37:39:B9
            X509v3 Authority Key Identifier:
                keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:3a:ec:2b:56:c1:20:c1:5c:e3:42:ef:4f:2e:0c:39:28:
         c7:32:a3:df:f5:64:b8:e8:ee:03:76:5c:f3:2a:39:c8:f2:c8:
         78:ec:f4:43:13:8e:94:78:f5:eb:bf:03:a0:26:73:1e:76:71:
         b9:fa:24:2c:d5:f5:48:96:94:8e:ff:ab:28:69:27:54:d8:26:
         12:4f:b7:e8:6f:28:39:fb:c1:5b:4e:ae:d3:51:42:48:95:ce:
         9d:a6:0b:69:85:97:1b:f7:1d:86:35:99:78:2b:2f:f3:27:fe:
         d0:f0:14:00:9f:ee:16:a1:b1:1b:44:36:3f:5e:ac:ef:7e:b6:
         e6:43:b0:c2:8c:df:0e:aa:39:43:78:55:9b:0e:b6:a8:10:aa:
         f8:ad:0e:2c:6e:92:94:ec:18:d5:9a:9a:ec:a6:f6:e2:c7:de:
         ba:52:4a:00:61:37:c8:db:2a:3c:fc:02:60:75:d4:9a:59:58:
         30:90:46:65:a8:50:c7:79:e3:68:5d:7b:cc:3d:8e:9c:9b:14:
         60:94:8f:8d:01:2a:ec:ed:00:d4:d9:fc:ef:69:61:64:fd:51:
         65:2f:6e:b4:74:5d:b0:1c:b7:ab:82:3e:55:4c:5d:16:39:a8:
         2c:5c:90:63:d0:ac:60:11:d2:96:f6:c1:19:01:96:26:98:5c:
         09:af:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:31 2026 by rpki-client