This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/6SHdnq43Xt7WgizDEr1yylk6Oms.roa
File:                     6SHdnq43Xt7WgizDEr1yylk6Oms.roa (raw, json)
Hash identifier:          lDBBhYljd7JNHkDbAyxd0E30sZXLAd+aPhXDIYIb/cA=
Subject key identifier:   E9:21:DD:9E:AE:37:5E:DE:D6:82:2C:C3:12:BD:72:CA:59:3A:3A:6B
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C77E7064550E0F4648E7E3A386CCE5
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/6SHdnq43Xt7WgizDEr1yylk6Oms.roa
Signing time:             Thu 01 Jan 2026 04:18:41 +0000
ROA not before:           Thu 01 Jan 2026 04:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61256
IP address blocks:        81.15.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:7e:70:64:55:0e:0f:46:48:e7:e3:a3:86:cc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e921dd9eae375eded6822cc312bd72ca593a3a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:45:20:fd:8d:69:94:7b:5c:53:5f:96:44:b0:
                    a0:44:ee:06:36:61:60:43:cb:98:92:28:cd:18:7f:
                    0e:54:ba:38:9d:b5:a0:be:ff:eb:25:34:0c:25:aa:
                    29:50:eb:e3:f6:a1:e1:22:20:3b:2e:3d:2a:07:00:
                    5b:c3:cf:5c:1b:82:47:a1:ee:4d:f7:fe:c4:a6:96:
                    c6:4e:ca:50:a4:f6:fc:81:46:16:d2:71:a7:3d:a3:
                    ea:3c:2d:5d:67:96:96:07:24:90:66:1b:80:3b:eb:
                    2a:33:b4:b8:78:95:bd:b6:6a:8d:16:c5:5f:07:31:
                    eb:f3:c5:c4:fd:33:ac:5c:68:3d:bb:4f:58:57:16:
                    1a:79:2c:b1:50:1b:a6:48:ca:c0:e8:ba:09:93:b5:
                    9a:f4:eb:00:08:3d:da:eb:6a:7d:65:83:e3:01:3d:
                    4b:43:c4:68:dd:ac:03:a7:af:d5:eb:32:00:6b:7b:
                    72:19:5f:1f:50:18:99:3f:db:bd:c0:ce:e4:1f:82:
                    ef:2f:88:04:fe:41:06:87:e6:b3:ba:07:58:a1:ef:
                    98:66:f9:a3:a7:e4:96:38:1e:7a:b4:20:53:36:e7:
                    77:bf:4b:df:09:d4:1d:87:6b:e1:02:7c:a1:02:08:
                    eb:5b:ac:d9:d7:f0:ce:fa:de:3b:f2:04:6f:8f:05:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:21:DD:9E:AE:37:5E:DE:D6:82:2C:C3:12:BD:72:CA:59:3A:3A:6B
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/6SHdnq43Xt7WgizDEr1yylk6Oms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:42:4b:8e:51:5e:36:6f:ae:5b:e6:2c:d2:b0:e4:cb:9b:42:
         f1:2e:ba:b4:c1:87:c5:c0:0d:28:b1:36:24:ec:3e:54:9e:c7:
         26:74:d2:a2:df:5e:80:39:f6:9a:25:dd:a3:1b:6b:da:45:76:
         36:3f:b4:a9:7c:e6:ac:4b:55:84:92:4b:01:53:57:76:0b:19:
         af:5a:30:1e:07:05:f8:aa:9e:e1:ec:7a:cd:ea:29:c3:6c:8a:
         4a:ce:9d:25:53:6f:89:b2:83:df:b1:0b:d6:d1:14:c0:90:62:
         6e:34:23:46:69:cd:1d:81:95:46:d7:d2:b7:3d:85:9c:fe:88:
         71:77:5e:6b:3f:0c:5c:34:0c:74:b0:41:96:24:0a:ca:78:6b:
         78:f2:a3:eb:30:e0:c0:a4:04:85:35:d5:11:3d:46:ad:65:88:
         04:0f:63:4d:87:a8:02:99:61:5c:c2:b2:3f:fa:4c:d8:20:59:
         5e:ce:86:d0:d2:cc:d5:c9:e8:de:c8:c1:46:6f:89:73:76:fd:
         a6:e8:00:f8:3c:80:02:d0:46:0c:18:f9:cd:64:53:b3:cb:9f:
         5e:e8:eb:82:b0:f6:78:de:cf:5f:74:d2:64:ca:70:47:95:cb:
         68:1b:bb:10:72:f0:66:d4:fd:68:de:0c:ce:35:44:88:1e:7a:
         f9:e7:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:16:12 2026 by rpki-client