This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/6EkJKay6ASec3Uw_czHATgEyfKA.roa
File:                     6EkJKay6ASec3Uw_czHATgEyfKA.roa (raw, json)
Hash identifier:          2c9WHQTBPJnNJtn4QC9p7CmncMVB1cW6dCt+0dg0vCE=
Subject key identifier:   E8:49:09:29:AC:BA:01:27:9C:DD:4C:3F:73:31:C0:4E:01:32:7C:A0
Certificate issuer:       /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial:       019B7A5B28F59A16CF1165529CF4A7D222E9
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/6EkJKay6ASec3Uw_czHATgEyfKA.roa
Signing time:             Thu 01 Jan 2026 16:19:13 +0000
ROA not before:           Thu 01 Jan 2026 16:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204300
IP address blocks:        185.155.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:28:f5:9a:16:cf:11:65:52:9c:f4:a7:d2:22:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c7018034725963a971c96a8caab598cae638a
        Validity
            Not Before: Jan  1 16:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8490929acba01279cdd4c3f7331c04e01327ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:97:60:94:c6:85:10:81:30:f8:fc:6e:05:98:
                    8a:77:a6:73:d9:2b:07:d6:e1:3d:1c:f9:f9:7f:8f:
                    6f:3c:44:a2:da:ef:bb:44:28:ee:6c:f5:dc:66:ea:
                    16:70:a9:2c:c3:13:53:ab:86:f4:dc:68:94:7e:f6:
                    7d:d1:02:61:23:0a:d4:88:94:93:8c:e6:73:a7:3b:
                    a2:98:9f:6f:a8:b4:7d:b6:42:39:1d:97:97:e6:2d:
                    40:82:f6:6a:5f:d4:e3:04:d3:2d:be:49:e0:79:5a:
                    55:bb:5e:12:d3:bb:59:7b:a4:43:c3:67:0c:7c:49:
                    05:41:ad:7b:96:4d:fc:fc:53:e6:f8:b9:8c:b3:0a:
                    a2:7a:43:65:53:c9:31:51:aa:0b:71:6c:31:c5:14:
                    e7:f3:5a:0d:de:0b:9f:ab:db:80:3b:f8:f2:a7:72:
                    e4:27:af:5b:82:37:07:fd:2b:19:64:66:dc:12:c7:
                    ee:b0:d3:28:c1:fd:ab:96:fc:b3:f8:1d:36:e1:17:
                    cb:be:e6:40:e7:48:ed:3b:9c:d3:a9:ea:de:46:ec:
                    74:3c:9a:0a:c7:89:b6:81:8b:e5:af:5a:1b:51:da:
                    3a:55:f8:2c:79:42:ac:03:07:3e:75:50:7e:10:97:
                    01:73:3b:59:84:7d:e7:7b:5b:17:90:56:44:51:77:
                    5d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:49:09:29:AC:BA:01:27:9C:DD:4C:3F:73:31:C0:4E:01:32:7C:A0
            X509v3 Authority Key Identifier:
                keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/6EkJKay6ASec3Uw_czHATgEyfKA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e1:c0:88:bd:77:0e:b3:e0:17:37:f9:65:15:d1:f7:69:cc:
         54:6b:82:4c:e3:75:3a:f3:3f:e0:b8:bf:5d:cd:26:91:2b:10:
         d2:1f:15:e4:3f:5c:ea:a9:8f:38:60:bd:03:cd:13:04:e9:0a:
         46:48:08:8f:97:51:a1:57:81:20:b5:bd:2d:dd:e9:32:dc:d6:
         88:d5:6a:4c:ca:72:ad:08:9e:81:31:fa:85:22:d3:f6:3e:22:
         24:33:03:0a:66:0f:73:62:ff:69:e3:ca:48:31:4d:31:9e:e1:
         55:c1:5e:14:fd:1b:3d:50:ee:a2:c1:57:64:75:90:fd:02:e2:
         52:3d:bd:c5:e4:1c:19:05:a2:12:93:08:70:b3:5b:e3:9d:92:
         32:91:01:67:15:c9:82:1f:56:9d:fc:ba:76:7e:62:d6:a6:b8:
         c8:0e:10:70:e0:d1:19:91:21:e0:f4:16:d5:88:c8:c2:ca:bc:
         cc:c2:71:91:cb:d9:b8:da:88:08:1e:26:df:3b:7d:96:7b:40:
         b3:a9:92:0e:bc:67:88:33:fb:81:5c:c6:3d:e9:36:d6:4b:85:
         54:aa:d4:76:5b:39:55:6a:d1:78:43:df:e0:ee:7b:54:db:df:
         30:a4:97:9d:95:d9:d8:60:0a:e5:4b:9f:8d:5c:de:d4:66:51:
         18:47:20:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6Wyj1mhbPEWVSnPSn0iLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M3MDE4MDM0NzI1OTYzYTk3MWM5NmE4Y2FhYjU5OGNh
ZTYzOGEwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODQ5MDkyOWFjYmEwMTI3OWNkZDRjM2Y3MzMxYzA0ZTAxMzI3Y2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JdglMaFEIEw+PxuBZiKd6Zz2SsH
1uE9HPn5f49vPESi2u+7RCjubPXcZuoWcKkswxNTq4b03GiUfvZ90QJhIwrUiJST
jOZzpzuimJ9vqLR9tkI5HZeX5i1AgvZqX9TjBNMtvkngeVpVu14S07tZe6RDw2cM
fEkFQa17lk38/FPm+LmMswqiekNlU8kxUaoLcWwxxRTn81oN3gufq9uAO/jyp3Lk
J69bgjcH/SsZZGbcEsfusNMowf2rlvyz+B024RfLvuZA50jtO5zTqereRux0PJoK
x4m2gYvlr1obUdo6VfgseUKsAwc+dVB+EJcBcztZhH3ne1sXkFZEUXddGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhJCSmsugEnnN1MP3MxwE4BMnygMB8GA1UdIwQY
MBaAFFQ8cBgDRyWWOpcclqjKq1mMrmOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2Qt
Mzc1ZjI0NDlhOGMxLzEvNkVrSktheTZBU2VjM1V3X2N6SEFUZ0V5ZktBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2QtMzc1ZjI0NDlhOGMx
LzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZtKMA0G
CSqGSIb3DQEBCwUAA4IBAQBl4cCIvXcOs+AXN/llFdH3acxUa4JM43U68z/guL9d
zSaRKxDSHxXkP1zqqY84YL0DzRME6QpGSAiPl1GhV4Egtb0t3eky3NaI1WpMynKt
CJ6BMfqFItP2PiIkMwMKZg9zYv9p48pIMU0xnuFVwV4U/Rs9UO6iwVdkdZD9AuJS
Pb3F5BwZBaISkwhws1vjnZIykQFnFcmCH1ad/Lp2fmLWprjIDhBw4NEZkSHg9BbV
iMjCyrzMwnGRy9m42ogIHibfO32We0CzqZIOvGeIM/uBXMY96TbWS4VUqtR2WzlV
atF4Q9/g7ntU298wpJedldnYYArlS5+NXN7UZlEYRyCY
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:46:26 2026 by rpki-client