This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/6vOB_0kXFWOVeiswTba6ofOe3mU.roa
File:                     6vOB_0kXFWOVeiswTba6ofOe3mU.roa (raw, json)
Hash identifier:          G//GVAi7wgZlWL5aVcz26sd32lr8++Cd1gJc7XKITXk=
Subject key identifier:   EA:F3:81:FF:49:17:15:63:95:7A:2B:30:4D:B6:BA:A1:F3:9E:DE:65
Certificate issuer:       /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial:       019B7C1215AF65EC75FB150D1DA3434E8B44
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/6vOB_0kXFWOVeiswTba6ofOe3mU.roa
Signing time:             Fri 02 Jan 2026 00:18:38 +0000
ROA not before:           Fri 02 Jan 2026 00:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43962
IP address blocks:        185.123.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:15:af:65:ec:75:fb:15:0d:1d:a3:43:4e:8b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
        Validity
            Not Before: Jan  2 00:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eaf381ff49171563957a2b304db6baa1f39ede65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f3:c8:92:d8:70:47:87:60:6c:f0:62:fe:d7:
                    0c:a3:16:cd:7b:aa:db:4c:63:ef:15:e5:13:1c:ea:
                    f4:c0:54:35:56:76:de:20:a9:68:ea:67:47:53:e0:
                    40:05:3b:63:5e:c0:55:b7:aa:9c:e5:04:0d:9b:6e:
                    15:0d:25:a7:4c:15:01:09:22:3c:90:52:e8:69:37:
                    ba:10:3f:9b:69:c8:23:0c:b2:d7:ff:a0:c2:22:28:
                    48:72:4f:e2:ef:fc:a3:ff:6d:ba:5b:7a:a3:99:d8:
                    2e:cd:dd:b1:08:8f:84:10:35:6a:29:bb:27:9f:3d:
                    28:aa:90:55:8b:8e:97:9b:61:e8:95:cf:8f:50:8c:
                    30:c3:c4:db:94:1c:2e:e3:de:f6:28:46:cb:95:8f:
                    cb:94:bf:dd:6f:2a:0d:5d:40:b6:34:c5:39:74:2a:
                    ac:9d:ce:a1:4d:93:9d:f0:d6:56:45:ac:11:7a:dc:
                    da:29:0a:51:47:46:86:85:47:13:0d:5e:ab:65:73:
                    8c:24:d4:19:79:28:80:e7:57:c7:50:fc:e4:46:a8:
                    d7:8e:9c:1c:52:ec:4a:f2:ab:98:32:9f:3b:46:df:
                    0e:87:67:dd:22:e9:43:e2:f4:fb:61:4c:be:34:1b:
                    eb:6e:06:96:28:57:15:40:49:20:29:dc:b7:a5:b8:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:81:FF:49:17:15:63:95:7A:2B:30:4D:B6:BA:A1:F3:9E:DE:65
            X509v3 Authority Key Identifier:
                keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/6vOB_0kXFWOVeiswTba6ofOe3mU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:b4:98:ac:f5:85:66:2c:d4:b7:d9:fb:94:30:01:be:c5:fb:
         f8:f6:73:57:67:86:15:c1:45:50:a2:c6:22:46:63:f8:91:93:
         ec:f7:10:43:85:d8:47:90:43:e5:39:77:70:38:03:c0:6d:bf:
         57:cf:4d:37:29:a6:88:d5:f8:69:a9:2a:e8:89:02:8a:83:51:
         46:ab:23:32:70:ff:07:68:df:aa:c1:75:91:10:2d:74:53:31:
         27:5a:9f:71:ae:2d:a0:f6:44:95:13:56:81:23:34:45:99:f7:
         54:8d:8f:67:c0:9b:fe:c0:32:40:9d:5d:a9:72:21:a6:1b:7e:
         78:3e:1e:52:0e:80:8f:e2:ee:cf:bc:34:4a:15:cd:c1:75:37:
         42:24:c4:93:50:c1:2c:78:42:d9:cb:af:e7:b7:fa:94:47:b3:
         24:56:f5:65:00:06:0d:15:6a:03:16:19:33:32:0a:9a:ab:14:
         e3:0b:61:fe:da:58:a4:1a:50:aa:87:b9:a1:21:07:12:b5:9f:
         b9:5c:5f:27:01:52:0e:ab:96:69:d0:3a:b1:c2:5d:d2:7c:b7:
         2a:e8:e9:76:a9:cc:88:0a:52:c5:b1:fa:a5:43:b5:71:ef:fa:
         dc:ce:fa:d8:a7:ff:8d:00:e8:67:27:a4:fc:4d:23:0f:b2:44:
         0e:b7:eb:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EhWvZex1+xUNHaNDTotEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw
N2IzNDMwHhcNMjYwMTAyMDAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWYzODFmZjQ5MTcxNTYzOTU3YTJiMzA0ZGI2YmFhMWYzOWVkZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fPIkthwR4dgbPBi/tcMoxbNe6rb
TGPvFeUTHOr0wFQ1VnbeIKlo6mdHU+BABTtjXsBVt6qc5QQNm24VDSWnTBUBCSI8
kFLoaTe6ED+bacgjDLLX/6DCIihIck/i7/yj/226W3qjmdguzd2xCI+EEDVqKbsn
nz0oqpBVi46Xm2Holc+PUIwww8TblBwu4972KEbLlY/LlL/dbyoNXUC2NMU5dCqs
nc6hTZOd8NZWRawRetzaKQpRR0aGhUcTDV6rZXOMJNQZeSiA51fHUPzkRqjXjpwc
UuxK8quYMp87Rt8Oh2fdIulD4vT7YUy+NBvrbgaWKFcVQEkgKdy3pbjniwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrzgf9JFxVjlXorME22uqHznt5lMB8GA1UdIwQY
MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt
Mjk3ZTI4MmQ2NmE4LzEvNnZPQl8wa1hGV09WZWlzd1RiYTZvZk9lM21VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4
LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXuiMA0G
CSqGSIb3DQEBCwUAA4IBAQBftJis9YVmLNS32fuUMAG+xfv49nNXZ4YVwUVQosYi
RmP4kZPs9xBDhdhHkEPlOXdwOAPAbb9Xz003KaaI1fhpqSroiQKKg1FGqyMycP8H
aN+qwXWREC10UzEnWp9xri2g9kSVE1aBIzRFmfdUjY9nwJv+wDJAnV2pciGmG354
Ph5SDoCP4u7PvDRKFc3BdTdCJMSTUMEseELZy6/nt/qUR7MkVvVlAAYNFWoDFhkz
MgqaqxTjC2H+2likGlCqh7mhIQcStZ+5XF8nAVIOq5Zp0Dqxwl3SfLcq6Ol2qcyI
ClLFsfqlQ7Vx7/rczvrYp/+NAOhnJ6T8TSMPskQOt+s5
-----END CERTIFICATE-----
Generated at Mon Jan 26 12:38:35 2026 by rpki-client