This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/6G_CPthqnbLtnYzdhZufaHjo5F4.roa
File:                     6G_CPthqnbLtnYzdhZufaHjo5F4.roa (raw, json)
Hash identifier:          G1mM29p2kekMY/O2aJXOBqbSptdec4HtSgzeXjTvuJ8=
Subject key identifier:   E8:6F:C2:3E:D8:6A:9D:B2:ED:9D:8C:DD:85:9B:9F:68:78:E8:E4:5E
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       019B7DCB4C726B2582A28765BA0418FC1FEB
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/6G_CPthqnbLtnYzdhZufaHjo5F4.roa
Signing time:             Fri 02 Jan 2026 08:20:33 +0000
ROA not before:           Fri 02 Jan 2026 08:20:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209805
IP address blocks:        185.65.200.0/24 maxlen: 24
                          212.22.70.0/24 maxlen: 24
                          212.22.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:4c:72:6b:25:82:a2:87:65:ba:04:18:fc:1f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jan  2 08:20:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e86fc23ed86a9db2ed9d8cdd859b9f6878e8e45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:b1:62:8a:c6:84:eb:e8:ff:86:e6:db:4c:
                    e6:57:fd:9f:c8:99:b2:63:9a:13:86:d7:69:6c:d0:
                    65:c4:0e:4a:74:fd:3e:41:8d:c5:77:03:4a:d3:c0:
                    7c:ea:06:2e:90:e5:4a:6f:c4:a6:56:3c:b6:47:56:
                    db:23:86:95:db:19:3c:70:86:43:c9:75:b2:09:ee:
                    38:28:9e:9b:96:0d:8e:6c:9f:03:3d:6b:9e:8b:d2:
                    0c:21:5c:a7:82:22:18:b6:0b:58:db:90:fd:c2:a9:
                    b7:71:45:fd:13:e6:b0:47:ff:02:9f:0f:0b:f7:3e:
                    0b:8e:cb:a0:22:a6:76:e2:ee:d2:42:22:2b:35:be:
                    9c:11:a4:bc:1e:ae:20:ef:2e:69:e2:82:fd:07:07:
                    85:90:33:9b:47:3b:f1:f3:11:38:cf:da:f3:5d:9e:
                    8d:f2:bf:aa:69:ed:5c:40:b5:e1:b6:bd:c7:27:0e:
                    0e:20:e3:11:8a:d2:16:5a:ce:28:28:bf:24:19:92:
                    0b:76:ab:e0:d7:eb:07:fe:e4:74:07:c7:8c:ce:96:
                    f3:d8:43:a0:a1:ea:d2:00:37:3a:03:d4:01:17:b6:
                    c1:27:6f:54:e5:4c:92:3a:18:e8:a5:d4:37:86:6f:
                    32:4d:4c:05:6b:ef:7d:d0:fa:97:cf:d5:ed:67:42:
                    4e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:C2:3E:D8:6A:9D:B2:ED:9D:8C:DD:85:9B:9F:68:78:E8:E4:5E
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/6G_CPthqnbLtnYzdhZufaHjo5F4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.65.200.0/24
                  212.22.70.0/24
                  212.22.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:a4:ce:7a:80:71:73:2e:7a:2b:1c:a0:8e:1d:8d:5a:c5:
         19:75:96:20:04:34:37:ba:bd:8e:0f:fa:70:30:45:54:19:72:
         21:6a:eb:9c:64:0f:6c:a8:e8:e5:06:cc:fa:a6:c3:3f:64:96:
         df:bb:1a:65:df:3d:8d:83:d4:5b:59:b6:7e:6c:4e:da:a0:f5:
         70:0a:63:ae:26:92:bd:6c:0c:58:4c:c2:23:8b:fb:83:d8:c5:
         13:c4:82:ca:cb:f2:1b:b0:b8:b8:29:64:e4:c5:51:c9:a9:09:
         db:bc:bb:ac:27:8c:88:5a:1b:f3:1f:2e:73:51:e1:63:94:dc:
         4a:d5:5a:f2:9a:66:35:a5:64:47:61:4a:bc:4c:80:20:ce:24:
         bb:87:14:95:f3:7e:9d:94:ce:da:75:9e:64:9a:b5:06:9f:09:
         41:73:9c:fb:47:43:a7:30:30:81:df:f6:55:a2:bf:b5:f3:61:
         a2:7d:c6:d1:ba:9d:96:73:a2:47:0d:55:79:95:71:bd:b0:52:
         ca:ca:47:9d:c1:2e:fa:12:7a:c2:59:41:88:2b:94:38:2a:33:
         4f:11:8d:ed:e2:29:9f:fe:c8:df:15:7c:87:c6:d5:dd:18:d6:
         a6:81:f3:df:36:c7:fb:15:d3:ac:63:7f:1a:9e:c1:7e:84:a9:
         ae:7d:63:8b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt9y0xyayWCoodlugQY/B/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODZmYzIzZWQ4NmE5ZGIyZWQ5ZDhjZGQ4NTliOWY2ODc4ZThlNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz2xYorGhOvo/4bm20zmV/2fyJmy
Y5oThtdpbNBlxA5KdP0+QY3FdwNK08B86gYukOVKb8SmVjy2R1bbI4aV2xk8cIZD
yXWyCe44KJ6blg2ObJ8DPWuei9IMIVyngiIYtgtY25D9wqm3cUX9E+awR/8Cnw8L
9z4LjsugIqZ24u7SQiIrNb6cEaS8Hq4g7y5p4oL9BweFkDObRzvx8xE4z9rzXZ6N
8r+qae1cQLXhtr3HJw4OIOMRitIWWs4oKL8kGZILdqvg1+sH/uR0B8eMzpbz2EOg
oerSADc6A9QBF7bBJ29U5UySOhjopdQ3hm8yTUwFa+990PqXz9XtZ0JOsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOhvwj7Yap2y7Z2M3YWbn2h46OReMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvNkdfQ1B0aHFuYkx0bll6ZGhadWZhSGpvNUY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuUHIAwQA
1BZGAwQA1BZeMA0GCSqGSIb3DQEBCwUAA4IBAQCqnKTOeoBxcy56Kxygjh2NWsUZ
dZYgBDQ3ur2OD/pwMEVUGXIhauucZA9sqOjlBsz6psM/ZJbfuxpl3z2Ng9RbWbZ+
bE7aoPVwCmOuJpK9bAxYTMIji/uD2MUTxILKy/IbsLi4KWTkxVHJqQnbvLusJ4yI
WhvzHy5zUeFjlNxK1VrymmY1pWRHYUq8TIAgziS7hxSV836dlM7adZ5kmrUGnwlB
c5z7R0OnMDCB3/ZVor+182GifcbRup2Wc6JHDVV5lXG9sFLKykedwS76EnrCWUGI
K5Q4KjNPEY3t4imf/sjfFXyHxtXdGNamgfPfNsf7FdOsY38ansF+hKmufWOL
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:13 2026 by rpki-client