This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/6n6d9llm9d3W9sApdO7SnFRv0iI.roa
File:                     6n6d9llm9d3W9sApdO7SnFRv0iI.roa (raw, json)
Hash identifier:          3aaBVDzL3bNaASVAu5LzBulC2B1ebcHezRnPmf8DCc8=
Subject key identifier:   EA:7E:9D:F6:59:66:F5:DD:D6:F6:C0:29:74:EE:D2:9C:54:6F:D2:22
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B775907812AF60ABCB24144517D954946
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/6n6d9llm9d3W9sApdO7SnFRv0iI.roa
Signing time:             Thu 01 Jan 2026 02:18:01 +0000
ROA not before:           Thu 01 Jan 2026 02:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203828
IP address blocks:        85.31.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:07:81:2a:f6:0a:bc:b2:41:44:51:7d:95:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea7e9df65966f5ddd6f6c02974eed29c546fd222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:92:1e:67:7e:77:cd:1d:15:a1:69:f9:ab:
                    04:8d:38:e3:8a:47:20:05:83:a5:0c:be:2e:b3:95:
                    ec:c8:ce:60:ca:e2:fc:af:1f:e9:10:a0:12:93:af:
                    18:7e:4d:ae:c0:fd:ee:ce:fe:de:9b:4a:f0:4e:ce:
                    1f:ef:96:23:36:32:62:dd:29:23:13:74:e4:4e:1c:
                    65:d3:af:fa:eb:f8:50:0a:c6:ed:ca:75:0d:f3:7e:
                    9c:ec:19:09:04:71:ef:aa:21:d2:8b:15:2f:3c:5d:
                    3f:c7:ad:c4:c1:cc:fb:7c:e2:ed:87:4a:4b:33:19:
                    64:a9:75:15:7e:29:10:3f:a1:02:54:1d:fc:53:e0:
                    a9:20:24:10:ed:35:90:09:30:2a:59:35:5b:f7:47:
                    3f:1c:c4:54:b9:64:e7:44:33:f1:25:0d:7a:31:04:
                    8f:00:05:a0:34:ad:f7:00:84:94:ca:21:50:61:4a:
                    fc:5f:b3:03:78:e4:36:58:a3:74:71:ed:b8:7e:cd:
                    aa:52:b8:41:1e:ff:80:5f:3b:c1:83:9a:80:79:b3:
                    f4:56:1b:33:a8:49:8f:fa:c5:aa:9d:21:d3:76:8d:
                    fb:41:0d:85:b1:03:38:eb:97:2a:11:c3:9e:f6:e2:
                    96:f1:37:31:3b:5f:83:d2:91:fb:5c:04:e5:0c:73:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7E:9D:F6:59:66:F5:DD:D6:F6:C0:29:74:EE:D2:9C:54:6F:D2:22
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/6n6d9llm9d3W9sApdO7SnFRv0iI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.31.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:d8:01:c3:32:a6:27:4e:b1:df:4c:2a:c3:76:dc:69:f4:f4:
         91:a6:0e:67:5d:1a:8c:d2:d3:7b:3b:40:28:ec:fe:45:65:06:
         28:1e:3c:a0:77:f4:88:05:ee:e6:b6:64:22:a2:84:6c:39:30:
         e6:81:3f:4b:04:6e:b9:6a:34:bd:f5:6c:42:d4:29:b6:51:66:
         e0:52:5a:02:b7:da:3a:52:ca:9f:2a:44:e9:b4:be:1e:f1:57:
         1f:95:28:ea:af:f6:3c:f8:41:43:cd:e6:46:b7:01:b2:5b:97:
         da:e5:0a:57:1b:ae:d5:da:ce:c6:82:28:e4:f7:a4:45:42:1e:
         e7:2e:43:9a:74:19:50:15:c6:2f:75:80:a3:64:3d:6d:48:9a:
         b9:8c:07:d6:cd:45:8b:80:05:51:7f:5c:c8:d7:b4:9d:ae:e0:
         bf:65:2a:ec:89:c3:f7:3e:03:f8:aa:4d:ef:06:43:ad:a0:51:
         af:67:54:b0:5e:12:78:bf:50:79:1d:4d:0e:1a:bb:f3:9f:86:
         5c:cd:cf:98:9c:3a:af:7c:f3:67:fb:22:2f:83:81:b5:93:41:
         2c:7c:82:73:ea:28:f9:e7:03:36:32:66:6a:ca:a4:87:5b:99:
         f0:9c:17:91:94:00:5b:fc:e7:95:f2:77:e4:19:a3:4e:d9:e9:
         59:3b:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:12 2026 by rpki-client