This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/b05E_Vve2D3HEly9RuClmeKIrnc.roa
File:                     b05E_Vve2D3HEly9RuClmeKIrnc.roa (raw, json)
Hash identifier:          jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=
Subject key identifier:   6F:4E:44:FD:5B:DE:D8:3D:C7:12:5C:BD:46:E0:A5:99:E2:88:AE:77
Certificate issuer:       /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial:       019B7910CA562B9112EF61BC494A4220D554
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/b05E_Vve2D3HEly9RuClmeKIrnc.roa
Signing time:             Thu 01 Jan 2026 10:18:22 +0000
ROA not before:           Thu 01 Jan 2026 10:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21449
IP address blocks:        2a07:2911::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:ca:56:2b:91:12:ef:61:bc:49:4a:42:20:d5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
        Validity
            Not Before: Jan  1 10:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f4e44fd5bded83dc7125cbd46e0a599e288ae77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:52:65:5c:be:04:ec:2e:f3:02:a2:56:3a:8f:
                    c3:8e:27:e1:e0:47:c4:f1:cb:31:86:e7:0a:bc:00:
                    54:84:d9:00:f0:c4:0c:5d:ac:78:fd:5c:2a:dd:01:
                    dc:4d:0e:43:a5:f2:4c:80:1a:a2:04:84:7a:48:be:
                    d4:e1:ac:17:9e:4d:7d:ae:55:30:5a:3e:b1:7d:ba:
                    7e:f7:50:54:96:ea:0f:4a:1d:d8:86:01:3a:ee:50:
                    93:d5:c9:3d:11:63:a7:90:f9:3d:aa:dc:45:53:52:
                    bd:e8:d0:42:8e:79:a6:f1:3c:3e:9c:38:ba:de:a6:
                    bd:8d:e0:fd:00:c7:b8:7a:46:db:94:dc:47:44:3b:
                    29:2f:b3:ab:5a:d5:a4:d4:97:e5:31:e6:a3:87:e3:
                    36:6b:5d:f8:22:61:e4:0d:da:2b:a9:46:da:7c:28:
                    d8:64:f5:03:7f:1f:24:9d:c0:7e:76:48:3e:59:6b:
                    fe:a1:bf:40:46:78:e9:ae:ea:ca:c4:a3:70:14:41:
                    de:4e:cc:88:0e:b4:b6:e5:1a:e9:45:a7:29:ef:29:
                    24:bf:4e:7c:81:d8:47:05:99:ba:7e:ee:9d:a3:64:
                    d5:c3:b7:f4:35:f9:7b:55:12:58:95:c9:9c:33:59:
                    ee:7b:27:e8:ea:ce:b6:dd:18:28:81:cd:b2:04:0a:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4E:44:FD:5B:DE:D8:3D:C7:12:5C:BD:46:E0:A5:99:E2:88:AE:77
            X509v3 Authority Key Identifier:
                keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/b05E_Vve2D3HEly9RuClmeKIrnc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2911::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:ac:de:2a:6e:e9:c0:34:69:56:72:5f:ee:b3:0b:c9:06:fa:
         80:6e:8a:44:5c:50:86:c8:96:65:d9:6e:a3:fc:38:b4:2b:e9:
         36:3e:bf:9f:65:b9:59:39:ef:9f:e4:80:80:93:23:09:97:10:
         ef:f4:81:d9:1c:7b:38:d2:4a:d9:ff:bd:ec:2c:61:30:5d:d2:
         72:b0:86:e9:5a:04:94:48:1d:07:34:39:f0:c3:19:aa:e5:1e:
         9b:a1:83:6b:6d:2c:b6:99:9f:d6:78:c6:98:70:cc:7b:82:8a:
         29:b3:20:09:33:b4:f3:79:c0:70:6a:44:72:11:fc:ea:84:bf:
         0a:ba:5d:36:78:ca:c3:49:02:c4:dc:cf:ef:f1:22:f6:14:62:
         c9:32:a3:00:cd:fc:c0:63:fc:62:f0:f5:30:cb:3f:5c:13:a8:
         a8:62:29:33:da:e4:98:a8:66:0a:45:23:f8:26:c3:e4:a0:2c:
         9e:ea:bb:9f:46:16:0c:3a:a5:93:08:b2:9e:18:ec:12:e9:2b:
         a1:63:2f:8e:26:1d:54:7c:98:b8:4b:d8:4a:d4:a7:5d:07:94:
         4a:52:aa:be:11:d3:4d:9c:33:ac:14:82:da:ca:23:53:a3:b1:
         21:1d:3f:77:74:4a:ec:75:ab:f6:ac:f5:e8:bb:c0:da:ac:4c:
         56:c6:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:55 2026 by rpki-client