This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n-6-GLMta5BCgKxCT-dXiVfeSgM.roa
File:                     n-6-GLMta5BCgKxCT-dXiVfeSgM.roa (raw, json)
Hash identifier:          38gC/4a9QHLmVW3BjvSC4eVc0n+OhgJJRTnHiaKdQjA=
Subject key identifier:   9F:EE:BE:18:B3:2D:6B:90:42:80:AC:42:4F:E7:57:89:57:DE:4A:03
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       019BC0C33CC214379E1D4BFDB7F5989FDBFA
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n-6-GLMta5BCgKxCT-dXiVfeSgM.roa
Signing time:             Thu 15 Jan 2026 08:26:19 +0000
ROA not before:           Thu 15 Jan 2026 08:26:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15694
IP address blocks:        46.229.144.0/20 maxlen: 20
                          77.79.192.0/18 maxlen: 18
                          77.79.200.0/24 maxlen: 24
                          77.79.206.0/24 maxlen: 24
                          77.79.210.0/24 maxlen: 24
                          77.79.215.0/24 maxlen: 24
                          77.79.221.0/24 maxlen: 24
                          85.232.224.0/19 maxlen: 19
                          85.232.254.0/24 maxlen: 24
                          194.145.228.0/24 maxlen: 24
                          195.167.144.0/20 maxlen: 20
                          195.167.150.0/24 maxlen: 24
                          195.167.155.0/24 maxlen: 24
                          195.167.158.0/24 maxlen: 24
                          206.252.224.0/19 maxlen: 19
                          206.252.250.0/24 maxlen: 24
                          212.91.4.0/22 maxlen: 22
                          212.91.10.0/24 maxlen: 24
                          212.91.11.0/24 maxlen: 24
                          212.91.12.0/24 maxlen: 24
                          212.91.13.0/24 maxlen: 24
                          212.91.14.0/24 maxlen: 24
                          212.91.16.0/20 maxlen: 20
                          212.91.28.0/24 maxlen: 24
                          213.189.32.0/19 maxlen: 19
                          213.189.32.0/24 maxlen: 24
                          213.189.42.0/24 maxlen: 24
                          213.189.50.0/24 maxlen: 24
                          217.17.32.0/20 maxlen: 20
                          217.149.240.0/20 maxlen: 20
                          2001:1a68::/32 maxlen: 32
                          2001:1a68:0:13::/64 maxlen: 64
                          2001:1a68:0:1d::/64 maxlen: 64
                          2001:1a68:0:21::/64 maxlen: 64
                          2001:1a68:18::/48 maxlen: 48
                          2001:1a68:2e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c0:c3:3c:c2:14:37:9e:1d:4b:fd:b7:f5:98:9f:db:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan 15 08:26:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9feebe18b32d6b904280ac424fe7578957de4a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:2e:85:70:94:fa:09:d2:59:3d:a2:0d:5a:
                    de:f4:18:aa:bc:60:65:1a:35:c0:29:73:06:23:cd:
                    34:9f:87:14:99:05:61:c1:55:d9:14:17:23:a4:6d:
                    b9:80:80:f5:0e:87:12:89:4b:4e:d5:90:4a:ed:10:
                    99:f5:f6:fe:f2:43:8e:d0:56:dc:29:bc:88:e3:24:
                    16:4a:14:43:79:14:a6:44:f5:02:f6:bb:47:7c:89:
                    e4:5c:fa:bc:02:b6:c2:ba:41:a3:10:36:7c:a6:98:
                    aa:31:16:de:d7:99:b8:8d:c3:90:61:94:f0:3f:27:
                    0c:57:01:89:5c:68:7f:9c:e5:6b:b5:ea:99:ca:e2:
                    98:d5:ff:01:db:cf:0d:8f:89:2d:f4:88:ed:f4:07:
                    f2:7c:8a:dc:fa:07:35:84:ce:69:62:86:13:08:a4:
                    e9:eb:55:8f:2a:b0:87:42:f3:b7:fb:ca:c0:2f:0f:
                    cb:b9:3b:74:25:96:a6:e7:82:d6:57:c9:a4:d4:ce:
                    86:bb:da:06:cf:fc:4e:61:4b:a5:28:12:b9:b2:38:
                    48:7d:e4:7f:12:b8:2e:e8:cb:3d:09:c4:1c:70:4b:
                    e6:10:fb:3e:92:9b:39:e6:1f:01:43:41:8e:0e:47:
                    50:f0:46:40:a4:be:6f:7e:21:63:64:d9:e2:b4:b4:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EE:BE:18:B3:2D:6B:90:42:80:AC:42:4F:E7:57:89:57:DE:4A:03
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/n-6-GLMta5BCgKxCT-dXiVfeSgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.144.0/20
                  77.79.192.0/18
                  85.232.224.0/19
                  194.145.228.0/24
                  195.167.144.0/20
                  206.252.224.0/19
                  212.91.4.0/22
                  212.91.10.0-212.91.14.255
                  212.91.16.0/20
                  213.189.32.0/19
                  217.17.32.0/20
                  217.149.240.0/20
                IPv6:
                  2001:1a68::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:bd:7b:59:30:a8:e7:38:49:0e:01:b1:b4:87:91:2d:80:
         a7:6b:36:63:49:20:40:95:76:83:cd:3d:bd:39:5a:58:2a:a6:
         f3:cd:be:5c:bc:dc:be:b0:48:d0:cf:92:03:10:e6:45:50:98:
         aa:17:77:67:44:ae:db:3f:06:10:9e:83:81:ec:a3:32:4b:a8:
         3e:61:99:a6:a1:54:a5:4f:49:9f:e2:e4:95:4b:99:c9:dc:6d:
         43:34:22:34:84:2d:98:37:d2:c1:1f:f0:4e:6d:35:84:30:2f:
         1a:90:e4:e1:35:a7:94:ec:ac:89:ee:b0:37:50:0c:dd:87:22:
         c8:df:d7:2f:f0:44:21:a2:db:b8:55:b0:1c:56:ff:e1:e2:9d:
         58:5a:db:5b:65:4f:6b:bc:ea:df:e7:a8:40:4b:0d:4a:b3:71:
         73:f8:b6:8c:f0:53:21:08:5b:e3:af:3b:4d:ce:e3:58:28:1a:
         69:c6:30:10:ca:d9:e1:4a:10:9a:c5:17:07:b9:ed:2f:22:39:
         17:98:3f:50:b9:bd:91:44:9d:b4:af:75:0c:54:54:ab:8c:a0:
         fb:43:0d:fb:4f:3d:eb:6b:f9:c9:af:a9:91:0e:1d:8f:ab:40:
         ed:d1:d4:78:0a:78:cc:26:39:38:83:65:b7:ee:17:1e:0e:07:
         6b:ff:eb:1f
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgISAZvAwzzCFDeeHUv9t/WYn9v6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjYwMTE1MDgyNjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmVlYmUxOGIzMmQ2YjkwNDI4MGFjNDI0ZmU3NTc4OTU3ZGU0YTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5cuhXCU+gnSWT2iDVre9BiqvGBl
GjXAKXMGI800n4cUmQVhwVXZFBcjpG25gID1DocSiUtO1ZBK7RCZ9fb+8kOO0Fbc
KbyI4yQWShRDeRSmRPUC9rtHfInkXPq8ArbCukGjEDZ8ppiqMRbe15m4jcOQYZTw
PycMVwGJXGh/nOVrteqZyuKY1f8B288Nj4kt9Ijt9AfyfIrc+gc1hM5pYoYTCKTp
61WPKrCHQvO3+8rALw/LuTt0JZam54LWV8mk1M6Gu9oGz/xOYUulKBK5sjhIfeR/
Ergu6Ms9CcQccEvmEPs+kps55h8BQ0GODkdQ8EZApL5vfiFjZNnitLQnaQIDAQAB
o4ICYjCCAl4wHQYDVR0OBBYEFJ/uvhizLWuQQoCsQk/nV4lX3koDMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvbi02LUdMTXRhNUJDZ0t4Q1QtZFhpVmZlU2dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQELuWQAwQG
TU/AAwQFVejgAwQAwpHkAwQEw6eQAwQFzvzgAwQC1FsEMAwDBAHUWwoDBADUWw4D
BATUWxADBAXVvSADBATZESADBATZlfAwDQQCAAIwBwMFACABGmgwDQYJKoZIhvcN
AQELBQADggEBAAZ9vXtZMKjnOEkOAbG0h5EtgKdrNmNJIECVdoPNPb05WlgqpvPN
vly83L6wSNDPkgMQ5kVQmKoXd2dErts/BhCeg4HsozJLqD5hmaahVKVPSZ/i5JVL
mcncbUM0IjSELZg30sEf8E5tNYQwLxqQ5OE1p5TsrInusDdQDN2HIsjf1y/wRCGi
27hVsBxW/+HinVha21tlT2u86t/nqEBLDUqzcXP4tozwUyEIW+OvO03O41goGmnG
MBDK2eFKEJrFFwe57S8iOReYP1C5vZFEnbSvdQxUVKuMoPtDDftPPetr+cmvqZEO
HY+rQO3R1HgKeMwmOTiDZbfuFx4OB2v/6x8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:03 2026 by rpki-client