This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/6TK55uf4E7Q4i5YH-VAZAMARA00.roa
File:                     6TK55uf4E7Q4i5YH-VAZAMARA00.roa (raw, json)
Hash identifier:          3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=
Subject key identifier:   E9:32:B9:E6:E7:F8:13:B4:38:8B:96:07:F9:50:19:00:C0:11:03:4D
Certificate issuer:       /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
Certificate serial:       019B76EB1E35CD017E689CC44A352ADDE718
Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/6TK55uf4E7Q4i5YH-VAZAMARA00.roa
Signing time:             Thu 01 Jan 2026 00:17:58 +0000
ROA not before:           Thu 01 Jan 2026 00:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137268
IP address blocks:        194.35.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:1e:35:cd:01:7e:68:9c:c4:4a:35:2a:dd:e7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268
        Validity
            Not Before: Jan  1 00:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e932b9e6e7f813b4388b9607f9501900c011034d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:3a:54:4a:c3:26:14:24:18:5e:24:e4:dd:
                    0c:6a:38:9d:37:d6:7d:ae:14:bd:97:0e:4e:2f:26:
                    ae:43:b8:97:bb:45:06:ad:00:4f:0e:cb:7e:a0:b1:
                    56:0a:2d:38:df:d7:74:d6:5e:67:3e:5e:5d:15:80:
                    a9:2a:67:16:5c:8a:4b:06:f0:bb:81:dd:e0:c3:f1:
                    43:73:af:4a:57:f6:2e:f2:06:58:e2:a2:93:a5:a4:
                    6f:c5:c8:da:15:7a:0d:31:eb:98:75:11:9d:3b:4e:
                    33:55:d8:92:24:cf:15:23:de:11:77:33:8b:75:ef:
                    2d:e7:fa:77:c2:aa:f8:e2:38:cb:f3:fc:3f:c7:60:
                    0f:40:7c:1a:8e:82:b5:9d:bc:5e:ed:8b:b0:d7:f5:
                    09:5e:51:6d:68:f7:08:0a:16:5b:c2:53:61:55:d7:
                    3b:c0:96:83:6e:a6:ef:22:93:27:97:dc:e8:ee:14:
                    93:85:f2:1d:00:d4:68:75:53:78:95:15:10:2f:22:
                    74:69:5d:e7:78:cd:2f:1d:d3:28:9f:81:aa:6e:49:
                    65:2b:a6:a8:94:b1:2f:07:8a:d1:83:cc:b7:79:b7:
                    39:02:92:c4:0a:6a:2e:50:79:58:a2:00:49:2c:66:
                    c9:69:ed:56:2a:e2:77:6b:91:98:7f:65:ff:59:4f:
                    f2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:32:B9:E6:E7:F8:13:B4:38:8B:96:07:F9:50:19:00:C0:11:03:4D
            X509v3 Authority Key Identifier:
                keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/6TK55uf4E7Q4i5YH-VAZAMARA00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.35.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:7a:92:6b:9a:fc:01:5d:25:6b:e4:58:0d:f2:0f:41:c0:61:
         04:78:8a:4b:c5:c7:e2:73:c7:b3:58:06:4c:90:26:10:a9:d8:
         af:51:91:0b:a5:28:38:5a:b2:e8:f6:f3:18:73:48:3f:b9:de:
         c8:db:fe:42:4f:3d:09:f6:e1:01:e0:81:df:07:10:1f:e0:8c:
         fc:e0:e5:3c:d3:bb:20:ae:e0:b5:34:3e:b1:1e:f0:25:07:63:
         e1:4f:d2:49:e0:96:1a:93:5a:a6:3c:5d:d7:ac:82:b5:f0:45:
         c8:83:fd:0e:32:53:5a:26:54:b0:6d:49:ea:f3:b3:2e:ef:ea:
         01:21:c7:aa:d0:6c:0e:ee:65:00:93:b9:14:02:0e:8d:14:ee:
         62:76:30:2a:fc:c2:4f:16:2e:1d:4d:be:6b:71:e8:e4:89:9c:
         00:ce:fd:e8:e1:41:68:d1:54:41:47:80:55:b8:70:87:e1:97:
         f7:77:66:53:f3:ea:96:1e:f4:74:84:63:c5:59:90:94:02:42:
         f5:2c:b8:70:24:8f:53:0a:b8:2f:6b:88:f4:c8:a7:e9:3b:32:
         51:36:6c:63:32:55:67:b1:42:01:7f:a7:4c:2b:9a:f1:9d:71:
         0f:7c:35:68:87:b5:fd:e7:3e:d9:9f:8a:89:5c:84:6a:a6:3b:
         7d:5a:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:46:46 2026 by rpki-client