This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/6DYQyU1SL1LMvaa65DMCw3z4hO8.roa
File:                     6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (raw, json)
Hash identifier:          JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=
Subject key identifier:   E8:36:10:C9:4D:52:2F:52:CC:BD:A6:BA:E4:33:02:C3:7C:F8:84:EF
Certificate issuer:       /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial:       019B76EB2A190B997D3B6F69121003116B8F
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/6DYQyU1SL1LMvaa65DMCw3z4hO8.roa
Signing time:             Thu 01 Jan 2026 00:18:01 +0000
ROA not before:           Thu 01 Jan 2026 00:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210075
IP address blocks:        185.62.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:2a:19:0b:99:7d:3b:6f:69:12:10:03:11:6b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
        Validity
            Not Before: Jan  1 00:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e83610c94d522f52ccbda6bae43302c37cf884ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:54:a8:ff:8d:ec:9d:74:5f:0e:af:36:f6:
                    04:5e:f7:94:7b:05:4c:fc:2e:11:1f:7f:ff:b0:a5:
                    19:0b:88:7b:42:a5:a5:43:ef:4f:85:6a:8c:b8:a5:
                    d8:20:2e:52:33:fb:97:0b:45:ab:c7:f9:40:6d:3e:
                    12:0a:5b:87:db:42:ea:29:da:ca:09:fb:e7:91:8c:
                    10:c6:86:04:0a:9f:b9:b3:40:ed:ac:69:88:6f:5f:
                    f2:97:fe:3e:a7:e5:87:eb:40:af:1f:35:3a:db:7e:
                    d1:4d:91:8a:03:29:73:cd:f0:8a:e2:1c:7d:0d:53:
                    42:2d:7d:3a:63:ea:5b:c6:5a:11:6d:7c:1a:72:01:
                    ca:82:b2:5a:83:8b:3c:25:26:78:29:ce:6e:f7:1f:
                    85:7e:3e:0e:ed:a5:31:db:03:20:01:24:cd:95:05:
                    f1:c5:a6:4b:11:07:6c:71:15:79:98:de:94:ff:37:
                    57:d3:21:d3:d9:45:0b:4c:8f:7b:fb:1a:a0:12:8a:
                    cf:7a:7f:73:b3:e8:ae:ac:40:41:c4:76:6d:2e:b9:
                    f5:12:1c:ca:0e:21:68:dd:60:1f:e0:64:32:07:a4:
                    aa:ef:ac:d7:14:fa:ff:ff:f7:f6:7d:6f:a3:32:5d:
                    80:27:08:fa:f6:47:cf:48:83:db:dc:65:48:dd:6b:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:36:10:C9:4D:52:2F:52:CC:BD:A6:BA:E4:33:02:C3:7C:F8:84:EF
            X509v3 Authority Key Identifier:
                keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/6DYQyU1SL1LMvaa65DMCw3z4hO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:93:96:e4:a9:05:80:f7:ce:31:c9:3b:f4:83:ab:3e:4b:
         49:07:1d:95:19:25:da:5f:a9:c8:5a:79:d6:b4:d0:8e:2b:82:
         86:32:ba:6d:8d:bc:96:59:f7:a4:3b:c2:0b:e4:58:a3:5f:8e:
         0a:17:4d:7d:92:56:05:4b:75:e8:d9:86:e8:a2:59:9f:6b:02:
         b6:a0:a0:a8:81:d3:90:9f:b4:92:28:07:67:ec:2f:95:5a:34:
         9a:4a:dd:5f:36:89:96:88:0c:0e:92:a1:d7:03:44:b4:f9:1d:
         84:fc:87:e0:96:ae:6a:c3:84:75:85:42:1f:8a:f3:8b:f9:8f:
         e3:5e:08:e6:a1:15:17:a7:3f:9c:61:6b:c0:5f:ff:4c:1e:9f:
         c9:06:d1:57:ea:6c:3e:fe:22:c2:98:b5:d8:49:fa:69:9d:61:
         6a:fb:03:00:4a:aa:57:76:83:7d:7e:cb:58:5a:f3:b5:fb:b0:
         9d:aa:5b:94:57:91:1f:33:91:56:6c:2a:1f:c2:02:ca:7d:bd:
         49:1d:03:74:fd:ce:7b:21:50:53:70:f5:f9:26:4a:aa:b8:90:
         3a:60:bb:ba:ce:7e:b3:ac:f0:02:2d:1d:a9:1b:e4:00:e7:fb:
         bd:de:0c:fb:af:94:50:52:63:3f:55:fd:d3:b1:e5:3b:dc:98:
         3f:fc:ef:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:54:20 2026 by rpki-client