This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/t_pc6qQa8K2tDxdFfeGgwrDyUf8.roa
File:                     t_pc6qQa8K2tDxdFfeGgwrDyUf8.roa (raw, json)
Hash identifier:          RtyojsCYCmGYhvaa3k5EfOp+wTpMhnVWsqgU2sLOGWc=
Subject key identifier:   B7:FA:5C:EA:A4:1A:F0:AD:AD:0F:17:45:7D:E1:A0:C2:B0:F2:51:FF
Certificate issuer:       /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial:       019B7C800E82729BFE43E0ED596FA1E50E8D
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/t_pc6qQa8K2tDxdFfeGgwrDyUf8.roa
Signing time:             Fri 02 Jan 2026 02:18:45 +0000
ROA not before:           Fri 02 Jan 2026 02:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15436
IP address blocks:        193.251.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:0e:82:72:9b:fe:43:e0:ed:59:6f:a1:e5:0e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
        Validity
            Not Before: Jan  2 02:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7fa5ceaa41af0adad0f17457de1a0c2b0f251ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:21:56:09:4a:63:d9:5d:5b:ae:6b:a8:86:
                    31:1a:86:2e:d6:c7:51:d2:91:18:3f:2e:45:f8:b7:
                    0b:8d:fe:02:fd:d6:50:a5:c0:3a:2e:b6:67:d9:e9:
                    50:5c:53:9d:2c:e8:0d:a7:bc:80:87:e9:f8:b1:24:
                    99:96:20:97:58:4b:3d:df:37:5d:28:79:a2:46:61:
                    ba:55:a4:7b:3a:5b:1a:69:a9:b2:c0:e6:4b:72:7e:
                    64:7d:85:9e:73:fa:ad:84:36:80:a2:d7:3a:31:a7:
                    d6:8f:c5:be:1b:b6:57:99:0e:c6:58:de:73:c0:a6:
                    18:96:b0:85:86:6f:dc:45:93:b5:41:a9:96:c5:c6:
                    b8:2a:b2:60:e0:ff:ec:9b:50:4e:f6:d8:e4:39:16:
                    89:e8:f2:8a:b3:68:e0:00:bf:6b:0e:73:4b:72:8b:
                    35:4f:ca:36:65:7a:2e:11:89:e6:7d:17:6b:7f:7d:
                    84:db:7b:5c:18:52:c4:65:bc:ae:50:2b:7d:72:17:
                    cf:4c:b2:3d:fc:5d:68:64:d0:a9:0d:54:c5:cc:e9:
                    c8:dc:f6:cb:db:7d:5c:f7:c6:5a:d4:31:17:9a:88:
                    ac:a8:91:41:c3:1c:31:70:86:9e:2e:67:70:e6:f8:
                    f8:a4:5d:f1:cb:50:09:03:f7:49:bb:97:f8:75:12:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FA:5C:EA:A4:1A:F0:AD:AD:0F:17:45:7D:E1:A0:C2:B0:F2:51:FF
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/t_pc6qQa8K2tDxdFfeGgwrDyUf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.251.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:74:2b:74:92:af:58:18:8b:cd:2d:54:3a:14:d0:f1:54:d9:
         27:9e:f3:96:1b:dc:6e:66:e5:4a:33:9d:03:ed:4d:0f:73:b6:
         c1:39:c1:0a:8b:38:71:db:11:ac:da:61:fe:c8:34:20:84:7a:
         a2:11:25:76:c5:33:9f:4a:fc:41:54:6c:29:73:4f:42:65:92:
         5f:77:24:9c:0e:82:10:e7:82:09:66:cb:91:1c:3b:61:55:f0:
         32:25:84:88:78:e2:67:77:2b:4a:71:f9:79:78:13:dd:7d:a8:
         d5:9c:94:5d:62:55:ff:a7:bb:a0:12:31:5a:da:fd:23:59:f4:
         20:dd:58:8d:14:26:53:2f:be:58:dc:1e:71:da:af:36:fd:68:
         5c:88:a9:89:91:da:86:9e:f1:40:21:63:22:55:c1:5c:ee:f2:
         ff:0a:51:5b:06:12:45:5f:e2:68:59:28:81:2a:69:53:17:f3:
         d5:de:f7:4b:c2:d0:19:99:e4:60:1f:ab:fc:54:e8:1d:14:2d:
         2d:6d:e1:98:ca:cc:ed:a3:2e:00:c6:7f:5c:84:6c:53:19:3a:
         5b:be:33:09:75:2f:3f:7c:6b:ee:b2:2c:4c:f7:5e:ca:c4:7b:
         59:7d:cc:b3:2a:22:df:e8:31:07:7c:75:64:cf:c8:b1:1c:b2:
         b8:28:49:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:02:19 2026 by rpki-client