This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/6QujOxzf4C6K0r-hHQOFn_yfCUI.roa
File:                     6QujOxzf4C6K0r-hHQOFn_yfCUI.roa (raw, json)
Hash identifier:          VpztrU2iFQ8Ah/D8jT+xPTLG0sW08bpvg3e6MmJ6Zdg=
Subject key identifier:   E9:0B:A3:3B:1C:DF:E0:2E:8A:D2:BF:A1:1D:03:85:9F:FC:9F:09:42
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019B78A2651E8603E6EA5A2D69183B0E9D6D
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/6QujOxzf4C6K0r-hHQOFn_yfCUI.roa
Signing time:             Thu 01 Jan 2026 08:17:47 +0000
ROA not before:           Thu 01 Jan 2026 08:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212784
IP address blocks:        193.108.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:65:1e:86:03:e6:ea:5a:2d:69:18:3b:0e:9d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Jan  1 08:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e90ba33b1cdfe02e8ad2bfa11d03859ffc9f0942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:e8:f4:a3:47:7c:ff:9e:23:ac:7e:a1:3b:
                    0e:2f:6f:72:a5:76:15:0d:8a:c1:50:9f:f2:e2:11:
                    00:7e:c7:9b:66:8c:20:b5:75:0d:2d:70:09:9d:5a:
                    bd:65:37:dd:2d:c8:f1:7c:99:25:bd:55:6f:65:92:
                    ec:73:f8:3a:64:f8:d2:fa:31:f7:4b:17:bf:98:58:
                    86:80:11:3e:e3:a5:87:9b:2f:74:db:b7:80:c2:77:
                    83:0e:3e:10:6b:ee:d2:77:da:f8:36:64:4f:6d:20:
                    06:1f:3c:cb:63:10:e0:e4:fa:5a:8b:5b:67:81:87:
                    39:58:12:de:6a:25:de:3a:59:78:58:03:8a:9d:7b:
                    d6:1e:4a:b3:23:86:93:32:64:2b:a0:91:3c:6b:01:
                    0b:7d:48:49:24:0b:6f:80:7d:c8:3c:a8:36:cf:be:
                    75:f6:36:63:fb:c9:5e:3c:a6:f5:c6:2b:1b:31:04:
                    49:f5:14:eb:c0:66:35:92:7e:a1:dc:8e:60:ec:7d:
                    df:02:b9:4b:4f:10:92:b0:fa:f6:18:ab:41:5a:1b:
                    01:29:f2:a5:a2:03:20:19:68:5c:80:63:04:a3:5b:
                    17:10:05:57:fe:a6:c0:41:4c:e5:c2:1a:f2:f8:42:
                    d1:e1:69:d1:3b:aa:00:6b:9b:c1:0d:fa:98:b8:f1:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0B:A3:3B:1C:DF:E0:2E:8A:D2:BF:A1:1D:03:85:9F:FC:9F:09:42
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/6QujOxzf4C6K0r-hHQOFn_yfCUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:97:9c:da:a3:af:99:61:90:2e:81:4d:79:4b:2b:99:0d:
         60:47:20:2a:0d:05:a7:91:86:c7:21:cb:44:a9:bf:b1:35:b0:
         37:17:97:fa:39:18:55:1c:f7:2c:7c:84:62:4f:c0:9f:10:4a:
         39:69:79:36:4e:6d:82:b1:a5:44:25:de:d4:53:dc:c5:bd:cc:
         35:63:cd:f2:fb:6b:fd:04:dc:3e:ed:93:3d:1a:9e:93:32:7b:
         29:58:f5:a8:6e:58:f7:f1:46:8f:10:f8:a2:9c:78:0f:7a:44:
         45:27:20:e5:0a:6f:9c:18:3a:d9:95:a6:fd:65:c8:2a:67:2a:
         40:59:27:26:61:05:4a:c2:ba:83:19:4e:f8:3c:45:10:09:2c:
         3f:35:b6:ba:15:36:66:f9:54:32:aa:4b:6d:b3:ed:c3:58:ba:
         e3:3c:f1:4e:ff:ce:e5:26:42:75:af:bd:7d:32:c6:5a:23:88:
         37:e8:ea:1e:b1:97:09:60:60:0a:56:d8:8e:d9:3d:17:4f:40:
         2b:03:c8:96:63:ee:6f:19:8b:4b:b1:a5:21:97:70:44:b5:4e:
         01:bb:ff:5b:5d:f3:68:5f:7f:c7:89:ee:42:f9:57:97:5f:ab:
         ac:30:c4:56:2e:fe:b1:db:ec:3f:95:ed:53:3c:52:13:b0:b1:
         1c:95:5c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:59:36 2026 by rpki-client