This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/6TZgbHSXqn1GUr9VpreMUiCjeAo.roa
File:                     6TZgbHSXqn1GUr9VpreMUiCjeAo.roa (raw, json)
Hash identifier:          5QPw1C1rjzudryB1KDoJimZbtvG6hJ8o4fA6bszzzdc=
Subject key identifier:   E9:36:60:6C:74:97:AA:7D:46:52:BF:55:A6:B7:8C:52:20:A3:78:0A
Certificate issuer:       /CN=7946647d9d5759a01f8d18668a377c063ff59136
Certificate serial:       019B76EAFD54962456BB8E0810C19C409CA6
Authority key identifier: 79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/6TZgbHSXqn1GUr9VpreMUiCjeAo.roa
Signing time:             Thu 01 Jan 2026 00:17:50 +0000
ROA not before:           Thu 01 Jan 2026 00:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202765
IP address blocks:        185.163.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 03:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:fd:54:96:24:56:bb:8e:08:10:c1:9c:40:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946647d9d5759a01f8d18668a377c063ff59136
        Validity
            Not Before: Jan  1 00:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e936606c7497aa7d4652bf55a6b78c5220a3780a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7c:06:7e:d8:90:22:1a:8e:6c:fb:f6:44:ab:
                    4c:e6:62:70:31:34:3a:18:1a:aa:c0:60:e7:94:52:
                    b7:6e:73:bf:25:ec:55:22:fa:5e:38:29:ca:39:6c:
                    d6:6f:43:30:81:1d:ce:46:41:c7:d5:2c:df:bc:d9:
                    6e:0e:19:82:48:df:a5:51:e1:99:4e:dd:a1:23:2e:
                    ef:b8:17:4c:f6:83:52:df:30:97:99:8a:cc:55:85:
                    de:d9:c6:c3:6d:9a:7b:0a:ad:c0:a9:ba:3a:3a:35:
                    bc:39:f3:91:02:eb:54:6e:56:99:5a:41:8e:83:12:
                    9b:9d:b0:a9:f0:a2:8b:20:34:71:13:fc:7f:ae:a7:
                    11:ea:c4:6e:ab:50:d7:75:03:59:36:60:01:4b:62:
                    2a:e0:b8:be:51:18:e1:28:16:6d:11:24:03:1b:fd:
                    d1:54:9e:35:cc:fd:4f:95:46:46:da:da:34:d9:21:
                    3b:41:30:b3:1b:88:33:5b:f1:49:9c:c4:f2:06:05:
                    f3:41:f0:80:cd:5b:ff:71:e1:ce:01:8c:66:b0:e0:
                    b9:ea:b0:16:b7:e0:0c:e1:6b:c5:18:41:7d:9f:24:
                    0a:f5:0d:c8:e0:04:3f:62:63:e3:c4:93:59:c7:4b:
                    b9:b0:f5:66:57:19:85:61:f2:6a:e0:1a:cc:1f:67:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:36:60:6C:74:97:AA:7D:46:52:BF:55:A6:B7:8C:52:20:A3:78:0A
            X509v3 Authority Key Identifier:
                keyid:79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/6TZgbHSXqn1GUr9VpreMUiCjeAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:84:97:69:f9:34:8d:35:5b:1c:80:03:71:59:7c:29:f8:85:
         8e:4a:9b:27:f0:fc:db:9f:bf:35:5c:3a:c9:32:1b:2d:99:d2:
         c3:cb:af:cb:fb:ef:c8:8f:71:fe:62:82:f7:8c:d8:19:ac:60:
         03:ca:21:09:1e:d9:ec:73:67:80:39:38:8c:f8:0f:31:75:55:
         40:af:d3:34:ea:c6:6a:7c:00:fe:fc:25:79:f3:41:c8:fa:50:
         c4:70:13:5f:6d:ae:5f:cb:a4:91:b2:f6:85:d6:8b:39:d2:58:
         c2:e2:d2:44:40:57:02:01:86:5b:8a:86:51:46:5c:9d:13:58:
         ff:9d:d3:79:e3:e4:53:9a:90:6a:cc:48:21:f7:59:01:67:5e:
         45:31:1c:0c:fc:18:ff:9a:d4:a3:55:ad:5e:8c:05:28:d2:d1:
         4f:81:97:fb:d2:f7:39:2a:92:9b:2f:49:a7:0c:b2:38:f3:c0:
         62:33:94:e5:76:c7:78:e1:d0:64:77:75:b5:87:ae:34:81:25:
         52:32:57:55:f6:20:c3:bf:b2:89:3d:4d:f1:9a:a3:85:0f:6a:
         b7:7d:a3:d3:80:47:e2:b0:3a:af:a8:3f:cb:d2:67:dd:97:b4:
         4f:a3:60:78:fc:1f:4e:05:18:13:03:63:df:f2:42:bd:af:b9:
         3e:3d:2c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:04:02 2026 by rpki-client