This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/6PxBgUSRHd1EjYh3aR3NrW9EPHg.roa
File:                     6PxBgUSRHd1EjYh3aR3NrW9EPHg.roa (raw, json)
Hash identifier:          WiFLNJi8EFWrkwSxJcCvJRnRmfSBPW/TIg84s3LJWkY=
Subject key identifier:   E8:FC:41:81:44:91:1D:DD:44:8D:88:77:69:1D:CD:AD:6F:44:3C:78
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       019ACC076621D7CD5833A954D3B9EB79BD13
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/6PxBgUSRHd1EjYh3aR3NrW9EPHg.roa
Signing time:             Fri 28 Nov 2025 19:53:48 +0000
ROA not before:           Fri 28 Nov 2025 19:53:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62240
IP address blocks:        45.88.102.0/24 maxlen: 24
                          45.88.103.0/24 maxlen: 24
                          178.159.93.0/24 maxlen: 24
                          178.159.95.0/24 maxlen: 24
                          185.238.88.0/24 maxlen: 24
                          185.238.89.0/24 maxlen: 24
                          185.238.90.0/24 maxlen: 24
                          185.238.91.0/24 maxlen: 24
                          194.113.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:cc:07:66:21:d7:cd:58:33:a9:54:d3:b9:eb:79:bd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Nov 28 19:53:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e8fc418144911ddd448d8877691dcdad6f443c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:27:d3:97:f0:46:c5:4c:6f:f3:f9:3c:65:c1:
                    ef:99:6a:fa:f1:ca:29:ee:43:4a:ee:c0:97:2b:86:
                    e7:42:fd:aa:6b:b0:d9:76:8e:0d:ca:f5:63:09:32:
                    86:d1:d8:f0:fa:24:35:40:dd:cf:c0:70:4b:f1:13:
                    63:51:a0:e1:ad:17:89:25:29:72:ad:e3:f7:af:df:
                    e7:07:95:68:21:ee:38:f3:90:3a:32:47:8e:17:62:
                    ed:2e:77:a4:d5:a1:df:cc:ad:7d:bb:63:53:cf:c9:
                    d6:1a:31:c5:fd:aa:be:fd:1a:2d:ce:b6:c4:27:c3:
                    11:5a:83:0a:f6:6e:31:52:f5:60:71:14:41:5e:b9:
                    86:51:80:d4:43:e5:24:75:92:b3:71:c3:34:52:f3:
                    5b:83:6b:e5:46:52:72:62:a8:22:d1:76:8c:e3:ba:
                    4a:5f:0e:23:e2:12:68:de:1e:10:0b:de:b0:c5:40:
                    4b:14:be:89:f9:fb:3e:f0:56:9d:fb:61:4e:06:64:
                    9b:cd:18:3b:59:8c:bb:6f:23:4c:16:39:cd:7e:42:
                    60:d9:da:20:3a:e5:7b:de:96:7c:be:45:af:2a:a9:
                    00:5e:cc:42:2d:52:0c:45:dd:9d:54:24:1f:bf:a4:
                    97:3c:f0:0f:19:e4:6b:1e:07:91:d6:14:42:1b:79:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FC:41:81:44:91:1D:DD:44:8D:88:77:69:1D:CD:AD:6F:44:3C:78
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/6PxBgUSRHd1EjYh3aR3NrW9EPHg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.102.0/23
                  178.159.93.0/24
                  178.159.95.0/24
                  185.238.88.0/22
                  194.113.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:a5:e2:5e:5b:78:bd:b2:0a:50:b6:97:ef:5b:b5:87:f9:94:
         ec:33:ae:83:49:3c:0e:12:a0:06:b6:a6:54:45:28:87:63:af:
         f3:bc:02:60:b0:3f:38:7d:a5:b3:92:a2:69:1e:d1:a6:06:bf:
         3a:6f:93:89:8b:fe:00:d6:b2:7d:3c:19:f5:e0:e4:b7:96:19:
         17:97:fb:ac:d1:6d:d4:36:57:bb:d9:85:cc:7b:5a:68:ee:b0:
         6b:4c:d3:f6:79:2c:bf:27:78:02:e0:63:10:ff:20:bf:76:66:
         91:41:63:15:32:43:df:f0:8b:01:7c:37:86:72:21:c5:2a:91:
         89:32:e4:f8:c2:9e:5f:dd:c3:e1:a9:fd:97:ba:19:a0:83:51:
         28:7a:04:df:c5:8d:07:0b:ab:e2:ab:99:a9:53:5b:d9:d1:e1:
         16:c6:13:b2:c4:d2:7b:bb:8d:11:eb:c5:27:77:26:20:64:78:
         dd:26:93:2a:84:28:33:fd:c9:48:98:91:a8:de:bd:c1:42:ca:
         8f:ed:95:02:3a:b9:e9:73:24:7d:b4:46:7c:fa:8c:c0:b1:cc:
         1c:27:aa:1c:65:9a:2f:37:1b:16:61:7f:ae:e8:d3:a8:48:07:
         fb:45:30:f5:16:45:e8:d8:8f:2d:d4:81:8d:61:19:ab:92:96:
         87:2f:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:54:05 2025 by rpki-client