This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/6AMyGO7w4JxXqMV0Qy3msZsVfMY.roa
File:                     6AMyGO7w4JxXqMV0Qy3msZsVfMY.roa (raw, json)
Hash identifier:          OSFBP/zXhG/zuBZvcNRqTtILfOKDv+WvuRq3OdXqCRc=
Subject key identifier:   E8:03:32:18:EE:F0:E0:9C:57:A8:C5:74:43:2D:E6:B1:9B:15:7C:C6
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       019B7C7F63D3E0C4333692CF3151347151DD
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/6AMyGO7w4JxXqMV0Qy3msZsVfMY.roa
Signing time:             Fri 02 Jan 2026 02:18:01 +0000
ROA not before:           Fri 02 Jan 2026 02:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207206
IP address blocks:        77.79.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:63:d3:e0:c4:33:36:92:cf:31:51:34:71:51:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan  2 02:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8033218eef0e09c57a8c574432de6b19b157cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:bf:9c:d6:88:3a:ce:a3:1f:50:dd:9d:15:
                    be:18:20:11:88:ca:18:a9:70:31:bf:dd:84:5b:7a:
                    e2:4b:21:13:a1:60:8f:5b:27:cd:92:a6:9a:4f:20:
                    1e:ca:a2:ca:a4:1e:12:2f:d6:81:08:9a:cd:a1:3b:
                    a5:17:52:c5:8c:7e:59:99:1a:7c:87:74:c8:3d:49:
                    46:46:1c:ff:c6:87:7f:11:aa:bd:c6:4c:49:bd:9c:
                    5f:6c:f8:93:d0:51:6f:30:2b:37:af:30:99:76:d1:
                    ec:bc:22:70:4c:6c:a9:66:95:0f:e2:27:69:67:4d:
                    c0:14:98:7b:80:4f:6e:4b:8b:da:63:e1:62:04:84:
                    aa:f7:e7:16:02:e1:05:83:eb:80:4b:fd:5a:f5:f5:
                    13:b7:85:eb:4a:5f:47:ac:44:f1:7d:c9:09:ba:5c:
                    5d:48:a4:72:f0:6b:ad:5a:d0:84:0f:f8:21:19:a0:
                    22:a4:53:12:6f:1c:e0:60:33:7d:e8:ab:37:7b:5f:
                    12:f1:dc:52:59:22:cb:b0:13:41:d7:59:15:91:7d:
                    9d:79:35:d7:35:6d:c1:d9:bd:59:09:97:0a:df:3a:
                    f1:1c:62:d7:e3:e0:5b:af:fd:dd:9f:96:49:53:7f:
                    f1:b1:72:e9:10:8b:0b:c8:cb:13:16:b6:06:81:39:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:03:32:18:EE:F0:E0:9C:57:A8:C5:74:43:2D:E6:B1:9B:15:7C:C6
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/6AMyGO7w4JxXqMV0Qy3msZsVfMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.79.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:3a:54:a8:26:a1:45:0c:7f:02:bb:92:14:3d:60:f8:fe:
         0b:ae:39:75:7a:a1:5b:e0:b0:6a:52:9e:a2:be:45:50:84:10:
         23:4a:31:7f:23:ff:3e:dd:06:9d:66:9d:1a:01:41:88:30:87:
         f3:e0:f1:1c:04:c9:6a:a5:d3:43:da:41:d9:60:7c:f0:c9:a7:
         40:1f:0b:34:63:30:6a:bd:c5:dd:58:69:c8:ff:6f:05:f8:b2:
         f0:80:8f:f3:75:ef:07:3a:66:50:5e:9e:2e:d5:dd:03:80:98:
         01:45:0f:98:02:70:bb:a1:8b:64:e5:98:88:40:6b:60:c2:a6:
         01:37:b3:b5:54:58:74:08:c9:b2:6f:42:25:41:a5:b6:4d:2e:
         57:d4:c2:5c:a0:b6:5d:5e:12:59:87:47:4e:20:b4:70:31:b4:
         59:26:e3:d6:81:f8:3b:19:c9:18:c2:3c:96:c8:4e:1d:53:c7:
         7b:87:93:6d:6a:c2:81:85:ce:1e:c1:e8:51:b7:68:fa:ec:7e:
         20:46:49:db:3b:cf:c2:d3:87:33:6b:e5:97:42:89:c3:e4:6b:
         98:1b:5e:ad:e8:40:b0:b1:03:f9:aa:b8:5a:81:e8:be:ef:16:
         81:8a:c4:64:2a:71:7c:af:56:e8:47:70:12:bf:46:07:62:7a:
         40:7d:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:05 2026 by rpki-client