This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/E6FBR8FbVLIUW7WxfYp69wFcuIY.roa
File:                     E6FBR8FbVLIUW7WxfYp69wFcuIY.roa (raw, json)
Hash identifier:          HezEpZLefLuIH9OWJJvBZrFd9gwz+w6esymhDsqSfJk=
Subject key identifier:   13:A1:41:47:C1:5B:54:B2:14:5B:B5:B1:7D:8A:7A:F7:01:5C:B8:86
Certificate issuer:       /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial:       019B7A5ADA1B747874AD0CB49D86CDCAE104
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/E6FBR8FbVLIUW7WxfYp69wFcuIY.roa
Signing time:             Thu 01 Jan 2026 16:18:53 +0000
ROA not before:           Thu 01 Jan 2026 16:18:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44270
IP address blocks:        79.141.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:da:1b:74:78:74:ad:0c:b4:9d:86:cd:ca:e1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
        Validity
            Not Before: Jan  1 16:18:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13a14147c15b54b2145bb5b17d8a7af7015cb886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:ac:72:3a:03:c2:f6:0e:e4:a2:9d:b1:1a:
                    d4:97:4c:6c:bb:f0:96:91:22:fd:b9:55:00:82:41:
                    e4:e0:4d:01:cf:04:fb:bb:67:d4:e7:6e:78:ef:42:
                    f4:1d:e9:f5:7c:cb:b9:2b:00:5a:a2:46:71:20:bc:
                    33:28:43:d5:00:a9:4b:db:2b:fb:21:1a:d0:81:5f:
                    04:ba:ed:77:55:30:c9:fa:d4:bc:a8:e2:f8:a7:2d:
                    1c:fb:8b:28:b6:06:fa:46:b3:e2:a7:15:93:17:a6:
                    80:5a:5e:1f:dc:7c:b2:b3:f4:9e:bf:e3:d1:93:11:
                    30:26:72:5d:78:20:87:e2:53:80:f1:f8:8e:27:d7:
                    df:09:1c:c6:4d:38:72:91:64:2f:3f:3c:fe:21:ea:
                    15:77:58:95:34:ab:80:4c:e8:27:58:4c:30:a2:71:
                    b1:d5:c3:5f:1b:88:e4:ae:72:c0:f6:85:71:85:7b:
                    94:99:b7:12:01:0e:cb:4b:74:94:bc:d2:cd:87:95:
                    c4:73:32:9f:2a:2b:9e:92:bc:9a:e9:de:bc:7f:eb:
                    78:a0:c3:3b:4c:55:5c:5f:c7:d0:f4:64:3b:49:de:
                    17:62:96:cc:3d:82:88:85:8e:43:f0:5e:41:b0:ca:
                    19:fc:c3:63:8f:75:cc:74:3a:05:84:e1:f8:a5:7b:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A1:41:47:C1:5B:54:B2:14:5B:B5:B1:7D:8A:7A:F7:01:5C:B8:86
            X509v3 Authority Key Identifier:
                keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/E6FBR8FbVLIUW7WxfYp69wFcuIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.141.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:52:9c:a0:2f:44:fb:33:f4:3f:f1:e1:55:b9:19:e7:b8:c6:
         94:e0:a1:26:56:bb:8c:42:c1:f5:2d:65:c8:fb:0c:1d:66:80:
         e6:3d:f8:10:54:41:60:03:28:39:9d:db:c2:05:a5:2a:53:b9:
         6d:a7:17:30:ce:d8:89:b8:b3:8c:5c:2d:24:ea:c8:f5:25:f6:
         d0:81:a1:76:55:0f:dc:6f:d8:55:a0:3a:c8:65:0b:8e:fa:f5:
         4a:35:6b:43:d7:67:6a:df:59:f0:0d:d6:b9:ec:65:6e:1b:1c:
         ff:e9:a2:31:2d:9a:05:94:f6:dd:c3:91:df:1e:7d:23:2d:26:
         c0:f7:99:16:00:15:70:41:a3:08:f1:42:0f:a3:a6:08:0a:ee:
         42:96:4b:16:2b:ac:02:90:64:19:cc:0b:01:54:f1:e0:21:17:
         33:0e:e2:84:f4:fb:58:5b:07:0c:4a:dd:39:55:68:36:e5:e5:
         d0:d0:05:fc:1f:ec:a0:95:b7:37:fe:c6:66:cd:cd:c9:15:2e:
         20:15:c9:f9:c1:66:dd:5a:2f:fe:4a:79:ef:f3:6d:06:60:80:
         b6:bb:4b:f6:82:29:24:d7:a0:3b:34:36:91:5e:00:6f:a7:a3:
         f7:3b:51:25:3d:2c:dd:f1:3a:f4:2d:69:34:42:48:b3:85:78:
         5e:5e:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:11:10 2026 by rpki-client