This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/A6J0iVR4kA-p0i9k4QAz8RenAdA.roa
File:                     A6J0iVR4kA-p0i9k4QAz8RenAdA.roa (raw, json)
Hash identifier:          dzCmVOism1LmSNcd/J2M7N7I8FZXNDV1E6PsgTS51yA=
Subject key identifier:   03:A2:74:89:54:78:90:0F:A9:D2:2F:64:E1:00:33:F1:17:A7:01:D0
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7759124710A58FE0BDDAB661B96AB4F0
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/A6J0iVR4kA-p0i9k4QAz8RenAdA.roa
Signing time:             Thu 01 Jan 2026 02:18:04 +0000
ROA not before:           Thu 01 Jan 2026 02:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209168
IP address blocks:        178.16.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:12:47:10:a5:8f:e0:bd:da:b6:61:b9:6a:b4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=03a274895478900fa9d22f64e10033f117a701d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:c7:54:9c:9e:2b:f4:28:3f:79:c6:fa:1e:
                    7e:36:4a:21:82:ef:f0:13:e1:ff:11:65:61:59:c0:
                    d6:99:c9:65:6b:29:4d:27:53:a6:05:31:5d:e1:de:
                    11:db:9b:e0:c2:29:14:45:e4:99:44:b7:5b:08:d5:
                    0c:17:80:3a:ad:94:bd:23:1d:a8:11:8c:45:e5:58:
                    c0:2f:d5:e5:ad:75:17:7c:d2:33:71:fd:df:88:32:
                    16:b5:7a:0b:81:e8:b3:fc:d6:82:d2:08:54:34:aa:
                    b3:fd:f6:0a:29:35:8e:21:e0:a0:1c:bc:9f:7f:eb:
                    6e:94:6e:08:f2:7f:b8:0c:9c:b6:dc:b6:97:ca:1a:
                    0a:5b:ae:da:25:ed:23:b9:1c:fe:52:13:4d:04:0d:
                    8c:95:e0:da:b1:b5:3c:78:c6:84:a9:64:e7:f2:da:
                    fa:8d:36:9e:59:3f:0f:8a:09:60:fa:d0:d2:d3:1c:
                    b7:99:5b:2a:b7:2a:3b:08:ce:91:9c:d5:e2:58:71:
                    cb:4b:5a:a9:5d:03:0c:6f:f3:d2:8e:56:cf:60:4f:
                    20:96:dd:73:62:28:26:72:53:0e:ed:3b:e6:bc:35:
                    b5:96:82:ee:ff:50:3c:d3:fd:fa:4e:e0:f7:5a:e0:
                    fd:10:d8:1f:00:2e:4b:3f:9f:80:24:27:ad:21:44:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:74:89:54:78:90:0F:A9:D2:2F:64:E1:00:33:F1:17:A7:01:D0
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/A6J0iVR4kA-p0i9k4QAz8RenAdA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.16.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6e:56:8b:4d:65:f3:4f:10:f9:c9:4f:a6:63:9e:23:b8:d0:
         2b:2e:fc:d4:d7:43:7a:52:81:3b:65:20:27:3b:ba:11:fd:06:
         4f:cb:d3:0f:3e:71:79:d2:ba:6e:11:47:0e:47:43:9c:75:65:
         ba:8f:d7:40:57:2f:98:b3:71:0c:c0:12:13:15:72:c0:01:ce:
         84:c0:8f:41:ad:e3:cc:4c:c9:ef:b8:dd:4c:2f:0e:5f:f7:c4:
         73:b2:4a:b9:4e:bd:99:7c:fa:18:07:0e:aa:d9:06:45:df:9a:
         36:9a:e3:fd:6b:0b:53:03:5a:a5:4f:0e:fc:a5:e3:97:34:99:
         23:ec:09:70:5f:cb:56:89:d0:ba:47:34:a3:27:8b:21:71:6f:
         d6:1c:60:a2:61:25:fd:a6:54:81:b7:cf:45:21:33:46:64:40:
         6b:59:00:ce:32:b7:c7:b0:84:73:4f:01:87:7e:e8:3f:50:75:
         05:66:d6:ae:78:48:4c:b7:f9:d1:8d:dc:df:2a:e7:e3:8c:08:
         a6:69:54:87:62:45:3c:6d:a9:fd:64:9f:c1:ac:18:a7:43:f2:
         00:5b:f0:dd:c1:d2:63:11:af:99:92:be:78:57:f5:ae:b3:45:
         9e:0e:f1:f4:cc:8f:77:95:37:c5:f3:35:0b:fe:be:7e:36:2b:
         cb:9d:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:24 2026 by rpki-client