This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa
File:                     6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (raw, json)
Hash identifier:          KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=
Subject key identifier:   E9:31:94:7C:84:20:F9:50:70:43:54:D2:8D:B0:02:10:D3:F4:16:E9
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       019B78355F728AC6B7D80B951B4C7CE314E2
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa
Signing time:             Thu 01 Jan 2026 06:18:42 +0000
ROA not before:           Thu 01 Jan 2026 06:18:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198065
IP address blocks:        185.164.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:5f:72:8a:c6:b7:d8:0b:95:1b:4c:7c:e3:14:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: Jan  1 06:18:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e931947c8420f950704354d28db00210d3f416e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:72:e4:b5:27:3b:06:f4:bd:d4:7d:35:c0:
                    89:18:cb:96:96:aa:9a:b8:c7:94:60:d1:b5:37:c5:
                    e1:47:09:d8:6b:30:9a:1a:54:6b:78:35:22:46:79:
                    ec:cf:c4:fe:d9:42:c4:f7:47:be:3a:93:87:e1:89:
                    a9:d3:92:1f:36:8d:ed:5f:53:25:81:e9:5f:51:fc:
                    94:71:44:1b:8b:7a:b6:d8:87:3d:44:d4:46:cd:04:
                    e4:9d:5f:37:0f:ef:2b:52:5e:22:b1:d5:20:b8:27:
                    2a:04:77:3a:02:1e:a6:6e:a6:fb:6d:a5:2a:19:43:
                    69:e7:51:31:b1:af:f9:5d:8a:49:ac:08:98:48:c4:
                    7c:fa:c4:68:69:67:f9:32:f9:bd:6d:e6:e2:ce:f4:
                    47:26:12:2e:18:c8:39:07:c8:13:98:40:de:7d:0c:
                    e1:f1:1e:35:a2:7d:a6:36:5a:8b:ed:73:46:78:b9:
                    07:99:58:80:b3:12:48:9f:28:f6:24:2c:91:66:2c:
                    8a:9a:37:be:e0:ea:02:6b:72:0e:2b:f6:71:7e:82:
                    2b:cb:e3:0b:88:be:3a:22:db:a5:34:b9:65:7e:ea:
                    54:5b:cd:89:5d:b3:ac:b0:ea:f3:e2:2c:45:de:d9:
                    28:32:0a:c5:32:74:fa:52:1e:34:47:f1:20:97:67:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:31:94:7C:84:20:F9:50:70:43:54:D2:8D:B0:02:10:D3:F4:16:E9
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:df:58:fc:a4:5a:25:74:0b:3c:21:41:31:fd:db:30:bb:e5:
         d1:77:21:fc:e3:e7:11:26:b0:e3:cb:4c:ac:82:c3:4a:0f:12:
         fa:ae:71:df:a5:a0:d3:af:df:f0:50:7d:14:07:09:63:6e:54:
         d5:6c:a8:14:f0:00:c9:2e:22:10:ed:70:b3:c4:e6:de:2f:3c:
         4c:aa:6d:49:5c:bb:d4:f2:1f:b0:2b:4d:2e:44:a6:a0:c6:e5:
         00:cd:08:1a:8d:a6:4e:81:d6:1d:7b:62:f1:00:ac:d3:94:3d:
         3a:4e:1c:7a:e5:57:8e:6d:b6:64:d9:9f:23:3a:9b:e2:20:ea:
         ea:27:9b:32:fd:d5:4d:f1:d2:91:2e:cf:66:b1:43:e5:75:8e:
         76:bf:e8:d0:34:69:58:3a:c5:f7:3c:fc:75:2f:b3:c6:8d:ff:
         94:ae:38:58:90:fd:2b:59:b2:b3:33:44:c8:f9:fc:ab:a1:0c:
         60:37:bb:24:f4:01:24:fb:76:78:c3:b1:65:9f:8d:ec:69:bd:
         ff:3b:34:b1:fc:aa:b7:89:f0:15:2f:e4:fc:e4:42:fe:04:62:
         19:8e:cf:43:88:2e:ab:84:c0:c9:66:5e:bd:95:25:20:77:c1:
         7b:52:8e:aa:01:f7:60:9f:a2:5c:ef:69:f4:a9:6f:59:8c:4a:
         2e:d4:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:45:05 2026 by rpki-client