This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6x1dm_XzZFjjlDVQnCBspsA7qfk.roa
File:                     6x1dm_XzZFjjlDVQnCBspsA7qfk.roa (raw, json)
Hash identifier:          5TMUJcmhLxe3Ckt/pq6zQyrmxY2jZ7/FSHxgcV8UaUI=
Subject key identifier:   EB:1D:5D:9B:F5:F3:64:58:E3:94:35:50:9C:20:6C:A6:C0:3B:A9:F9
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       019B797F2E82513C9448258331E79F28A8B4
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6x1dm_XzZFjjlDVQnCBspsA7qfk.roa
Signing time:             Thu 01 Jan 2026 12:18:56 +0000
ROA not before:           Thu 01 Jan 2026 12:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61048
IP address blocks:        213.178.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:2e:82:51:3c:94:48:25:83:31:e7:9f:28:a8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Jan  1 12:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb1d5d9bf5f36458e39435509c206ca6c03ba9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:92:6b:26:76:b1:b1:66:d5:11:eb:cd:f3:
                    65:67:62:ae:c1:65:23:68:25:12:16:f4:ef:5f:2d:
                    cd:cd:95:51:83:9e:df:d3:4f:50:c7:18:c8:54:76:
                    61:68:7d:66:7c:e6:55:65:a3:a4:1f:23:db:9a:eb:
                    2f:05:ae:71:51:4b:f7:78:c4:40:02:86:e1:11:a1:
                    e3:eb:b0:2a:1f:68:91:04:98:b6:08:c8:95:c6:ae:
                    f2:6d:78:04:1a:20:df:0e:f6:05:ca:00:5d:7b:b4:
                    34:97:db:8b:b5:ea:92:09:5e:0c:90:99:5f:e6:dc:
                    18:64:d9:d6:9e:f9:9a:2f:34:6f:3d:78:b1:e7:f3:
                    32:ec:58:d2:5d:3a:63:f1:95:08:76:f2:2b:71:ba:
                    98:1f:de:1c:e7:04:80:0b:8a:e9:03:61:45:ba:b4:
                    da:e9:d9:fc:41:5c:f1:d7:e9:1c:94:16:c0:81:0b:
                    be:75:83:c2:38:43:30:38:a7:6f:08:88:a4:33:79:
                    fb:48:2f:37:0e:36:93:f3:ea:7b:6f:31:bb:2a:63:
                    aa:34:e1:47:66:44:8e:82:03:f2:26:4c:ab:16:8a:
                    b7:be:3c:8a:86:f0:e4:77:3f:60:ea:70:21:83:5f:
                    8f:27:f1:a1:95:6c:bd:c2:72:88:0a:8d:44:18:c0:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1D:5D:9B:F5:F3:64:58:E3:94:35:50:9C:20:6C:A6:C0:3B:A9:F9
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6x1dm_XzZFjjlDVQnCBspsA7qfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.178.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:13:20:6f:ad:8a:9c:32:07:6a:c8:15:65:3e:58:5e:46:bd:
         0b:2f:7b:6a:d4:ff:c1:db:20:e2:64:89:81:bd:29:d7:c8:fb:
         13:1b:84:4a:32:03:39:86:78:c5:8c:7f:35:09:4e:f1:fa:fa:
         32:71:ba:40:e9:92:4c:71:68:70:4a:e4:9d:c8:c1:bb:53:db:
         97:c4:a0:90:6c:4b:34:d1:66:a3:f1:e6:af:c9:76:73:9e:4f:
         10:c5:72:26:32:a1:76:84:35:7f:b1:f0:aa:87:bc:c7:4b:23:
         15:0b:d4:c3:8f:65:28:88:51:15:cb:37:16:01:64:bf:88:39:
         2d:14:b0:bb:32:3b:07:ed:b7:e0:c0:9a:dd:e2:45:09:ee:81:
         0b:50:6e:96:f3:26:65:bb:99:de:53:e5:e4:a6:9c:59:2a:39:
         d1:1e:74:a2:6f:8b:de:53:c4:b9:20:be:8a:5f:b6:92:ec:15:
         1c:f7:8b:a9:80:79:48:7b:9e:b5:c3:34:2b:ac:2b:63:74:37:
         37:c5:02:2e:4d:6e:85:07:4c:3a:5d:2e:2c:06:95:b5:c9:9e:
         ea:bd:81:22:fb:13:a3:0e:42:5f:26:89:37:b6:e0:15:1e:56:
         05:31:33:0f:22:33:63:d3:a3:d9:c2:0a:bb:3c:da:c6:71:a8:
         c4:b0:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:21:00 2026 by rpki-client