This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/wAJ_pCMa4TFcgUQnb3-N4NkW88w.roa
File:                     wAJ_pCMa4TFcgUQnb3-N4NkW88w.roa (raw, json)
Hash identifier:          v0hjCO6WeS6ijOFcxvfF0/0VDtvSJkTCMAw63tG6eZk=
Subject key identifier:   C0:02:7F:A4:23:1A:E1:31:5C:81:44:27:6F:7F:8D:E0:D9:16:F3:CC
Certificate issuer:       /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial:       019B77C72406F29EB2169AFB489534CE3328
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/wAJ_pCMa4TFcgUQnb3-N4NkW88w.roa
Signing time:             Thu 01 Jan 2026 04:18:18 +0000
ROA not before:           Thu 01 Jan 2026 04:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31500
IP address blocks:        185.26.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:24:06:f2:9e:b2:16:9a:fb:48:95:34:ce:33:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
        Validity
            Not Before: Jan  1 04:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c0027fa4231ae1315c8144276f7f8de0d916f3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:da:d7:10:5f:b6:c5:e5:37:ae:79:3b:5c:
                    ac:11:ff:54:7a:cd:f6:39:a2:23:b6:ea:52:b5:89:
                    d6:a9:32:41:55:70:fb:66:a4:89:92:70:84:8d:6f:
                    f5:39:65:4e:ce:63:e5:28:6e:74:78:6d:05:09:34:
                    23:f9:31:b7:bd:99:d2:90:47:5f:bf:b3:4b:d8:e9:
                    49:a9:20:fb:77:ab:aa:7b:d2:05:d2:f8:a5:03:8a:
                    27:a2:9d:62:d1:1c:3b:40:47:20:5d:5e:ac:4a:b1:
                    00:98:28:9f:2c:84:7c:54:ba:13:46:f3:36:df:b7:
                    d2:0f:8a:01:05:ca:86:ea:b7:a1:30:89:47:2f:cd:
                    61:8b:60:92:88:5c:cb:76:5f:e1:94:a8:70:e1:d3:
                    cf:db:a2:f4:25:3a:dd:35:43:e6:69:a0:a9:21:cc:
                    54:47:11:51:b1:b0:24:cf:f1:53:58:cb:a5:6e:2f:
                    53:c8:93:45:15:46:79:d6:98:7a:3c:e7:19:90:52:
                    64:1e:7f:de:82:18:90:83:ac:81:d2:2c:21:1f:e6:
                    16:a5:3c:54:0a:24:59:5d:53:70:fd:0e:d5:26:14:
                    c5:c5:c5:e6:d2:17:be:c9:4a:3f:5e:b2:61:a2:72:
                    3b:fc:8d:91:ba:26:f5:5c:5d:a1:00:4b:55:11:5c:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:02:7F:A4:23:1A:E1:31:5C:81:44:27:6F:7F:8D:E0:D9:16:F3:CC
            X509v3 Authority Key Identifier:
                keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/wAJ_pCMa4TFcgUQnb3-N4NkW88w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ec:0b:5a:ed:3b:6e:54:37:3f:f0:e3:f6:0b:ce:25:8f:aa:
         52:68:54:18:6f:37:79:05:50:09:f1:59:1e:02:f8:1b:6e:f9:
         c5:22:e3:4d:03:8d:5f:da:7f:8a:26:c5:9d:aa:a9:6d:8d:0f:
         3f:b5:78:cf:29:c0:d3:2a:1c:aa:7b:77:4e:47:dc:10:1b:02:
         03:be:11:df:3c:88:ae:6b:3e:13:a4:07:4e:67:53:85:d6:30:
         85:5f:1f:08:b9:89:f6:e1:8e:8c:1f:a8:24:16:19:34:0d:9d:
         c9:c7:91:c9:7a:bf:69:85:7c:47:57:ef:06:c8:a7:12:5d:fb:
         b7:5e:2d:6e:76:97:6c:02:9c:69:35:7b:c2:67:26:dc:17:61:
         e3:aa:a6:17:55:b4:9a:fa:13:51:e0:bd:eb:15:95:21:a0:b3:
         74:fb:a0:9f:26:6b:ff:7b:01:c0:30:70:86:cf:2b:66:1d:af:
         ea:f1:f3:22:58:0a:f5:77:5b:e9:62:47:47:f2:91:9a:76:5a:
         9b:2f:cd:8f:7f:14:59:ef:02:2c:89:a2:0d:5f:f7:3b:7f:f0:
         18:3b:d6:91:42:a3:05:12:dd:20:d9:3b:f4:38:06:bf:66:58:
         67:b1:79:c0:5d:86:fb:d1:84:77:ea:d5:42:16:23:42:95:96:
         e4:d4:de:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:20:07 2026 by rpki-client