This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/6Q58Vst1sW7Sg0fhyD0gAveTsJg.roa
File:                     6Q58Vst1sW7Sg0fhyD0gAveTsJg.roa (raw, json)
Hash identifier:          aoLdXnEmVwlhhx6P0ecfdCHXNZ84VbOpBzKrwg0ApiA=
Subject key identifier:   E9:0E:7C:56:CB:75:B1:6E:D2:83:47:E1:C8:3D:20:02:F7:93:B0:98
Certificate issuer:       /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial:       019B7AC8E016966B00DF448085F5D7D1C2D0
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/6Q58Vst1sW7Sg0fhyD0gAveTsJg.roa
Signing time:             Thu 01 Jan 2026 18:19:03 +0000
ROA not before:           Thu 01 Jan 2026 18:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214171
IP address blocks:        2001:39c0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:e0:16:96:6b:00:df:44:80:85:f5:d7:d1:c2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
        Validity
            Not Before: Jan  1 18:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e90e7c56cb75b16ed28347e1c83d2002f793b098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:4a:21:1c:4f:ee:43:bb:dd:f3:1b:fa:97:
                    25:4d:a7:59:1f:bf:04:84:e7:92:fd:cf:ae:ba:d6:
                    e1:a4:65:8f:1c:89:e6:3e:68:9a:37:d3:0d:6d:f2:
                    9d:65:79:39:da:2f:a5:5f:62:49:e6:b6:ce:aa:4c:
                    3a:ac:15:b4:43:31:10:36:e6:35:06:e9:3f:0e:21:
                    21:a7:7d:1f:d6:d1:44:26:ef:e1:91:b8:8e:2c:08:
                    43:23:4f:c1:14:04:cc:ed:c0:67:c0:89:87:0c:d1:
                    ef:8a:03:10:cf:53:5e:c1:89:48:31:22:69:a9:5c:
                    2b:6a:ee:73:61:e4:bc:c7:97:47:6f:f0:c7:75:f3:
                    a5:df:b5:58:21:25:04:f4:e6:12:4d:e8:7a:c8:c2:
                    1b:d3:53:66:7d:d7:87:73:d6:6f:fb:d9:b8:05:4e:
                    6d:25:d9:fe:f0:e3:1e:12:d8:1b:55:4b:e0:ae:ff:
                    97:44:17:a9:1a:f1:6b:f8:36:e6:4a:08:4a:7d:3c:
                    eb:80:f7:e7:9b:39:19:17:ab:76:75:b8:08:28:09:
                    05:52:40:84:95:b2:03:31:ab:6a:c5:a4:b7:25:d7:
                    10:24:16:23:7d:a2:8c:9b:98:7b:43:e2:f2:25:64:
                    a8:47:90:3f:a1:fc:ab:5e:ee:33:82:7a:17:54:fd:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:7C:56:CB:75:B1:6E:D2:83:47:E1:C8:3D:20:02:F7:93:B0:98
            X509v3 Authority Key Identifier:
                keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/6Q58Vst1sW7Sg0fhyD0gAveTsJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:39c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:45:d5:62:11:85:4c:30:6d:a1:cf:5a:19:2d:6d:b3:5a:60:
         2f:c3:06:f4:d6:8d:55:eb:f0:aa:a0:c8:42:8c:90:f5:4a:fb:
         ad:74:5d:45:be:82:a2:84:1c:97:6b:a4:b4:2c:3c:95:00:e7:
         46:51:a8:90:35:3c:44:7f:c0:2b:37:61:12:ee:99:71:7b:f2:
         16:37:d3:e7:82:81:69:33:2f:dc:5d:8f:b5:26:35:4c:96:6a:
         19:17:1e:ac:43:ad:c5:4a:4b:c4:66:df:c1:7d:70:f1:30:b3:
         dd:55:1c:97:4f:b6:72:ac:d1:09:24:f9:68:34:34:f1:7f:cd:
         9d:cf:85:f5:ff:d0:15:4a:8d:b6:63:fd:b0:94:0e:f4:39:33:
         58:87:35:8c:4b:98:99:3e:fa:49:21:67:93:ce:6b:64:a0:8d:
         6c:e2:cc:6a:f8:22:f5:e8:8f:60:d8:f0:b8:4b:dc:69:c9:12:
         8a:4a:9d:4a:a8:71:6d:e2:c5:d8:28:bb:4b:36:c8:bc:86:b5:
         6a:b2:50:d3:35:4e:86:7d:97:1d:d8:80:23:97:2c:c3:9e:bb:
         4e:99:af:5a:35:7d:ff:94:d6:26:1c:20:0f:6c:51:04:1c:9c:
         00:79:05:29:1e:ec:c9:e5:bf:6d:95:c4:40:c2:54:03:81:fb:
         fb:a6:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:24:31 2026 by rpki-client