This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/acesTEBAVC0cVWi453r9ACpaESE.roa
File:                     acesTEBAVC0cVWi453r9ACpaESE.roa (raw, json)
Hash identifier:          9ko+Tn763E3lcLVJtQufJSq7vf3ntZ16gqwRW1zNS8M=
Subject key identifier:   69:C7:AC:4C:40:40:54:2D:1C:55:68:B8:E7:7A:FD:00:2A:5A:11:21
Certificate issuer:       /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial:       019B797EBAF4C1C9D05FD7A6E2BB686E5F49
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/acesTEBAVC0cVWi453r9ACpaESE.roa
Signing time:             Thu 01 Jan 2026 12:18:27 +0000
ROA not before:           Thu 01 Jan 2026 12:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1213
IP address blocks:        160.6.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:ba:f4:c1:c9:d0:5f:d7:a6:e2:bb:68:6e:5f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
        Validity
            Not Before: Jan  1 12:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69c7ac4c4040542d1c5568b8e77afd002a5a1121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:4c:60:17:76:6a:cb:ab:f6:0e:b0:70:22:
                    aa:0b:31:b9:a3:77:79:e7:08:00:66:9d:f2:69:73:
                    56:42:4e:e4:b3:26:55:84:d7:fe:54:28:2a:ee:51:
                    31:f5:6f:0e:7a:ac:55:94:21:58:23:91:34:f9:4b:
                    e1:6a:c9:59:2f:33:6f:ba:e0:a4:70:b6:67:75:5e:
                    bc:2b:b6:43:26:8b:37:86:40:5d:04:f3:4e:24:50:
                    a1:39:c8:3b:36:84:9a:2c:67:be:28:89:d5:ee:88:
                    66:49:37:a2:2e:e2:1c:3a:11:8e:2d:a1:03:43:d1:
                    9d:17:66:e1:f1:ee:dd:df:79:b8:e4:a2:f6:0c:6e:
                    ad:29:41:d5:d3:0e:c8:06:e1:56:5b:63:f0:a5:77:
                    a0:01:07:d4:c3:56:e7:62:d5:3d:15:77:09:2c:75:
                    14:6c:e7:b8:59:f3:59:a9:ba:89:cb:51:c1:f6:bd:
                    a2:fe:62:c4:a2:22:ca:98:8a:18:42:d9:2d:1e:a4:
                    2e:a0:c0:4a:b1:b0:d2:9c:eb:39:ce:2e:c0:87:14:
                    f8:3a:e9:bc:8d:41:ca:8b:f1:ba:09:34:38:ec:70:
                    ba:eb:53:59:76:59:92:be:23:29:11:87:1e:39:88:
                    87:db:63:61:3c:3c:2b:a3:ae:51:76:3b:89:51:13:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C7:AC:4C:40:40:54:2D:1C:55:68:B8:E7:7A:FD:00:2A:5A:11:21
            X509v3 Authority Key Identifier:
                keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/acesTEBAVC0cVWi453r9ACpaESE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:22:c7:3e:60:70:d3:23:e7:36:14:33:d8:56:ba:87:f9:
         e3:02:8b:72:f1:17:86:b5:c6:a4:47:aa:48:ad:75:d2:95:a2:
         1c:ab:71:57:4d:cc:7e:22:c5:33:9d:cf:ad:b8:f4:ee:d7:8f:
         c3:59:f5:b4:d3:3f:fa:0a:ba:bf:60:7a:d1:99:46:9c:75:2e:
         a9:aa:2b:33:62:76:08:8e:b0:51:16:55:db:a3:a2:5e:5f:d0:
         f7:47:85:98:49:69:00:04:b4:50:82:a0:77:78:c1:56:89:c5:
         86:d8:00:80:d6:b1:6d:ae:0e:5c:78:63:48:ca:7f:20:0b:5f:
         d3:35:c2:81:4d:c4:ef:6e:69:fb:e0:8c:d6:aa:c6:8f:c6:5a:
         85:1d:ed:f7:b5:3c:b9:a3:a7:bd:07:67:8f:f1:41:c9:bf:e4:
         83:e1:23:a4:af:d6:0b:78:08:f8:80:4f:0e:66:c1:ed:82:ce:
         64:74:cc:7c:d3:18:fd:52:b1:cd:16:28:ef:42:3d:fb:a5:4b:
         48:6a:42:a7:0c:e5:ac:f7:a0:4d:e5:6c:b2:f4:bf:72:a4:c8:
         a8:bb:fc:e2:fa:40:66:72:cc:3c:6c:fa:69:bf:b2:47:4e:f0:
         ce:98:4e:30:0d:06:35:ce:65:74:d4:d7:f1:2d:b8:1e:74:7a:
         1b:13:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:10:47 2026 by rpki-client