This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/H6Of78-SEJVpeQPPeMSvoJWzSqY.roa
File:                     H6Of78-SEJVpeQPPeMSvoJWzSqY.roa (raw, json)
Hash identifier:          UjGVzh+Q1JO5uh+huUY7jEJTVlGQGjLSLp6e36JFlSE=
Subject key identifier:   1F:A3:9F:EF:CF:92:10:95:69:79:03:CF:78:C4:AF:A0:95:B3:4A:A6
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F8516BADDD62CF19F505E04701D9A52
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/H6Of78-SEJVpeQPPeMSvoJWzSqY.roa
Signing time:             Fri 02 Jan 2026 16:23:07 +0000
ROA not before:           Fri 02 Jan 2026 16:23:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213029
IP address blocks:        93.170.6.0/24 maxlen: 24
                          93.170.83.0/24 maxlen: 24
                          93.170.88.0/24 maxlen: 24
                          95.46.210.0/23 maxlen: 24
                          95.47.124.0/23 maxlen: 24
                          95.47.127.0/24 maxlen: 24
                          95.47.238.0/23 maxlen: 24
                          146.120.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:16:ba:dd:d6:2c:f1:9f:50:5e:04:70:1d:9a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:23:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1fa39fefcf921095697903cf78c4afa095b34aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:22:5c:ce:e6:8c:2a:49:87:84:4a:44:f7:3d:
                    e0:d2:c9:c7:b5:bc:34:60:3b:cf:85:0b:8d:56:bd:
                    88:f5:5e:ec:3e:59:76:26:bf:39:7e:15:81:01:f1:
                    42:d0:9a:9b:25:27:99:04:fa:21:5f:19:74:94:f7:
                    7d:02:7c:94:50:3e:6c:78:82:5d:b2:b1:76:a6:d7:
                    52:40:b8:0f:0c:24:9e:7d:af:ac:48:10:2e:8f:d2:
                    cd:db:2a:a3:e6:4c:53:49:af:8b:23:ab:37:2e:91:
                    ce:fa:c1:95:78:f8:17:44:c4:c6:2b:2a:8e:72:2d:
                    67:b9:45:fc:1f:4e:70:9a:58:1a:0c:9d:ae:9e:d6:
                    e2:74:30:73:8d:22:70:9c:fa:d6:91:67:af:2f:5b:
                    32:b0:cc:62:1e:ab:b4:97:db:b7:58:8d:25:0f:00:
                    da:e3:6e:e8:bd:e8:1c:e0:9c:a3:79:6a:b5:27:89:
                    37:20:e9:08:74:f5:2f:bc:ff:50:1e:f0:8d:91:cd:
                    2c:1c:99:e1:50:e1:c5:18:3d:8c:61:a7:56:19:08:
                    42:0a:e2:3f:af:c1:45:af:53:02:45:1f:07:69:66:
                    b5:ce:40:0d:77:7d:82:a2:32:3f:0a:8b:b7:16:17:
                    53:34:f5:e8:2c:aa:67:a1:d4:f6:cf:1a:9b:ec:ac:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:9F:EF:CF:92:10:95:69:79:03:CF:78:C4:AF:A0:95:B3:4A:A6
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/H6Of78-SEJVpeQPPeMSvoJWzSqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.6.0/24
                  93.170.83.0/24
                  93.170.88.0/24
                  95.46.210.0/23
                  95.47.124.0/23
                  95.47.127.0/24
                  95.47.238.0/23
                  146.120.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:6d:c6:49:9d:f4:3e:b7:64:6e:21:1e:71:e9:f1:41:0e:
         00:fc:ef:d5:4d:6d:8b:cd:0a:c9:81:91:eb:64:84:1e:dd:97:
         2c:da:ac:30:dd:9c:3e:59:16:11:00:44:d2:62:19:5f:ee:0a:
         1e:f4:10:1e:ed:bb:42:14:7a:65:db:4f:48:08:0b:55:d6:29:
         12:ec:e2:87:45:72:6e:a8:97:9a:f4:f2:70:73:89:29:2f:82:
         1b:5e:93:d9:36:96:0a:ec:e2:46:61:73:7f:b6:ac:d0:df:04:
         4f:92:35:3f:37:8b:a1:b1:e9:dd:a4:1d:c3:cd:8b:63:9c:53:
         6e:73:86:16:d8:4b:4a:2e:0e:8e:bc:be:7c:81:63:7d:00:50:
         4a:dd:d2:dd:63:77:87:8b:76:e6:64:64:5d:90:a0:35:a2:b9:
         b5:6a:7d:f8:b9:25:2d:0b:a1:56:00:fc:90:77:73:47:7c:d1:
         0d:49:65:b4:ef:50:3f:51:4f:e4:ea:1a:b9:67:4d:d0:34:7e:
         29:23:58:5e:e6:82:98:42:1c:6f:2e:bd:d3:e3:22:b2:d1:2f:
         2e:59:7d:9f:fd:20:f1:b7:5d:6f:6b:25:8f:53:08:24:e2:3a:
         58:8c:05:00:b9:2e:a0:09:30:23:91:e2:ab:0f:11:3b:20:5d:
         c6:72:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:00 2026 by rpki-client