This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/1-6TPWOGFnVc0Nj7oVC4aAr613ls.roa
File:                     1-6TPWOGFnVc0Nj7oVC4aAr613ls.roa (raw, json)
Hash identifier:          fO8iBbvBaMNoHq3COqjue3TAdfcc3LHY54KEjAJ2QqA=
Subject key identifier:   FB:A4:CF:58:E1:85:9D:57:34:36:3E:E8:54:2E:1A:02:BE:B5:DE:5B
Certificate issuer:       /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial:       019B77C771596405C5FE98FDD49E8470D5B3
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/1-6TPWOGFnVc0Nj7oVC4aAr613ls.roa
Signing time:             Thu 01 Jan 2026 04:18:37 +0000
ROA not before:           Thu 01 Jan 2026 04:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201448
IP address blocks:        194.92.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:71:59:64:05:c5:fe:98:fd:d4:9e:84:70:d5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
        Validity
            Not Before: Jan  1 04:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fba4cf58e1859d5734363ee8542e1a02beb5de5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:1c:69:30:30:86:d2:88:14:bd:2f:87:7f:
                    45:5d:5f:83:96:b7:2c:5d:ab:fd:58:8d:f1:f9:c1:
                    00:b6:af:1d:9b:f7:c7:41:91:19:44:19:d8:5f:c4:
                    92:1d:68:71:fb:91:fa:46:89:4b:10:6d:90:fe:6e:
                    65:26:7a:9b:bc:84:a6:67:b0:f9:eb:91:c4:5b:3c:
                    bf:4c:29:40:8c:75:fb:58:dd:74:d1:99:0b:52:4e:
                    8b:26:09:8f:e3:a0:db:c4:e2:d8:ff:ab:7a:cc:f4:
                    29:4b:9e:9e:a2:86:ee:45:66:7b:cd:02:c1:8d:fc:
                    00:37:80:20:3d:b5:c4:22:fb:09:18:60:cc:79:f6:
                    9e:00:aa:a8:8c:71:3c:e1:25:ed:98:77:c7:b4:13:
                    fe:fd:c2:92:37:e1:0e:f3:db:56:33:5b:38:2e:db:
                    b0:47:61:a3:b3:d6:d0:c6:0b:b4:29:31:e0:2f:d2:
                    1e:a4:37:9f:99:d7:68:77:79:e4:e1:6e:c6:f8:19:
                    ac:59:20:ba:d3:f8:2b:bc:65:c9:77:b7:6b:dd:ac:
                    35:4b:32:be:0c:88:95:f5:1b:a9:c1:23:ba:0c:df:
                    99:2f:c2:6f:eb:c8:7b:75:1b:b6:e3:af:28:32:7a:
                    47:07:38:52:1f:73:d8:41:c2:97:f1:bc:c6:06:30:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:CF:58:E1:85:9D:57:34:36:3E:E8:54:2E:1A:02:BE:B5:DE:5B
            X509v3 Authority Key Identifier:
                keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/1-6TPWOGFnVc0Nj7oVC4aAr613ls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.92.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:23:9c:33:f4:ef:f7:86:de:d9:a2:fa:6a:6e:fb:29:e6:5f:
         c5:56:80:8b:4a:e5:fe:7f:41:28:4f:ca:e3:47:bc:9b:d5:fd:
         5b:0b:7f:64:f3:7b:25:54:58:3f:1a:e0:49:31:a3:62:ac:9c:
         0b:cb:78:a5:d0:de:fd:17:00:b0:70:a1:3e:55:85:b7:1f:74:
         fd:62:a6:b9:c6:16:34:f2:2f:9a:c0:96:18:f2:55:3d:03:26:
         cb:da:14:b2:b8:44:ab:16:21:7d:cc:17:43:4e:d2:cc:3b:5a:
         c2:b5:30:8a:bd:d0:74:87:45:fe:d4:86:3c:90:85:0f:a2:db:
         bc:45:01:e4:90:78:07:39:55:2e:bf:d5:08:d9:4a:c7:54:78:
         88:5a:d1:c1:b3:64:3f:86:42:c1:ea:f1:4b:ad:5f:c8:ad:62:
         c2:5f:19:2e:18:fc:e8:ec:fe:1a:e5:ed:ad:db:57:3d:d6:1f:
         a7:a0:b4:8c:db:d3:2f:55:62:de:ab:c4:3d:b8:c9:36:eb:df:
         9d:ac:05:de:74:5f:61:6a:a9:9a:8f:50:61:ab:24:da:4a:d8:
         e1:21:ad:0a:38:3d:75:3d:81:a9:a5:94:0b:55:4e:63:e7:0c:
         b2:a5:81:32:f5:57:81:2f:9c:86:3f:fe:dc:0a:41:3d:6c:90:
         08:ca:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:39:53 2026 by rpki-client