This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/H6AvCEiySRywPqnoqPga4bVAQxg.roa
File:                     H6AvCEiySRywPqnoqPga4bVAQxg.roa (raw, json)
Hash identifier:          nQJRt0EmcoJ2XDzeO3DLhVTm+C2u2iMFsb1catI5sW4=
Subject key identifier:   1F:A0:2F:08:48:B2:49:1C:B0:3E:A9:E8:A8:F8:1A:E1:B5:40:43:18
Certificate issuer:       /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial:       019B7CECC322BCCDB057A11E4E8D7A7B1712
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/H6AvCEiySRywPqnoqPga4bVAQxg.roa
Signing time:             Fri 02 Jan 2026 04:17:29 +0000
ROA not before:           Fri 02 Jan 2026 04:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     559
IP address blocks:        193.247.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:c3:22:bc:cd:b0:57:a1:1e:4e:8d:7a:7b:17:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
        Validity
            Not Before: Jan  2 04:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1fa02f0848b2491cb03ea9e8a8f81ae1b5404318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:9f:64:de:53:0f:e2:fc:61:00:12:1d:9b:
                    4e:af:b2:18:36:23:ae:d9:f8:06:9e:71:ce:75:8a:
                    e4:34:1f:3c:ed:28:96:a2:8f:83:86:bd:39:29:38:
                    b5:50:ee:d0:37:49:4d:3f:49:01:64:b0:53:db:27:
                    92:15:b1:8a:d5:c2:32:be:6a:00:64:f5:34:d7:44:
                    21:b4:82:e2:68:b3:21:bc:c2:c5:4c:76:f1:0a:aa:
                    ef:e8:de:5f:58:80:46:6d:6a:67:3c:62:3a:f6:f8:
                    46:e1:57:03:40:44:76:e7:0c:64:b4:1b:e0:06:f4:
                    88:36:14:df:d9:0c:cb:b0:12:2c:68:78:fe:4f:39:
                    c0:af:56:d3:47:ae:cd:51:b7:04:f4:85:da:b3:cf:
                    c1:bf:fa:c7:e8:13:11:c9:e3:ad:ee:ef:81:67:04:
                    8b:db:c4:79:66:48:84:d5:51:7e:48:db:b1:fd:2d:
                    cb:0f:cf:28:40:97:ba:2a:1c:55:5a:8a:7c:1b:d7:
                    79:45:a2:ba:b2:95:3f:d0:17:e3:4c:81:61:1b:45:
                    b0:4d:0b:8e:f7:2e:74:6d:11:c6:43:46:dc:47:0f:
                    8b:51:8a:ce:52:c5:fa:ed:cf:7d:30:10:a8:10:a2:
                    96:c7:8a:2e:2a:df:11:b4:70:f7:82:1c:78:9c:fd:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A0:2F:08:48:B2:49:1C:B0:3E:A9:E8:A8:F8:1A:E1:B5:40:43:18
            X509v3 Authority Key Identifier:
                keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/H6AvCEiySRywPqnoqPga4bVAQxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:d1:31:2e:6b:63:73:c7:c7:a4:5d:d9:2c:56:cf:5d:f6:4e:
         44:56:df:58:20:a0:be:7f:22:4c:73:67:fb:2c:00:ff:3c:94:
         ff:05:56:5d:a7:b4:f6:7d:a5:d0:09:d0:f8:f2:10:b0:c2:d6:
         2d:05:dc:25:36:95:18:51:8a:8e:19:93:5b:cb:70:6d:7b:ca:
         7d:35:49:37:58:96:26:cf:f2:35:e0:f6:01:72:84:86:be:a3:
         f3:b2:80:6c:40:82:1a:3d:26:3e:e2:c0:e6:97:aa:bf:19:f6:
         fb:64:bb:f9:c0:4d:f1:5b:8e:e3:f0:87:33:c9:77:0c:a8:6b:
         2a:21:96:03:b4:f9:77:b5:3a:10:55:b3:a4:5b:95:eb:5b:35:
         85:20:6b:17:b8:d4:ca:bd:a8:4e:e7:08:cc:8b:92:34:45:2f:
         b7:14:a8:8b:92:d3:82:2c:60:92:2f:0c:60:9c:00:55:e4:bd:
         38:38:a2:41:27:af:61:39:c1:24:50:6d:c1:8b:ca:89:04:4f:
         e4:1a:b5:75:83:5e:45:39:9f:fb:5f:e9:4c:6f:a3:d6:4b:19:
         8b:7a:b8:14:96:f9:89:4c:af:a8:0b:84:97:c1:37:58:af:1d:
         06:96:67:af:5e:88:5e:4d:81:a2:c7:d2:97:be:15:55:76:11:
         f4:a8:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:23 2026 by rpki-client