This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa
File:                     jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa (raw, json)
Hash identifier:          fp8xX6qHENJp/r7Mh6H1TsYEX2pKIdlfsNezIS3fbdA=
Subject key identifier:   8E:D3:33:04:51:39:D4:7B:3B:08:60:23:5D:C5:14:10:8B:07:E6:64
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       019B797F48749DD14CBB51BCDB21FA459A24
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa
Signing time:             Thu 01 Jan 2026 12:19:03 +0000
ROA not before:           Thu 01 Jan 2026 12:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     46887
IP address blocks:        2a06:6540:2001::/48 maxlen: 48
                          2a06:6541:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:48:74:9d:d1:4c:bb:51:bc:db:21:fa:45:9a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Jan  1 12:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ed333045139d47b3b0860235dc514108b07e664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2c:ff:4b:de:c4:5e:56:15:ce:29:1a:71:da:
                    55:fa:62:31:01:90:08:99:b5:98:43:bd:2d:f4:29:
                    5f:b4:32:d1:ed:8e:68:67:dc:08:cb:92:5b:bd:af:
                    50:d8:63:49:8b:98:5d:88:03:ff:52:63:50:4d:34:
                    0e:51:19:fc:71:6f:4d:c4:fa:30:32:02:48:60:81:
                    98:c8:90:33:f1:ad:ad:c4:36:a9:6f:ba:c9:88:34:
                    f3:da:71:d5:8d:97:db:23:1c:c6:17:ea:b9:f5:98:
                    fd:a6:13:30:e4:53:ff:5e:0e:09:db:73:59:cd:6d:
                    c5:67:1a:de:02:a7:42:2f:53:15:e9:35:b2:2c:37:
                    91:af:39:00:b5:ab:05:40:b6:ef:3e:29:83:3d:74:
                    3d:0a:a0:c1:97:fc:44:24:9c:5a:74:0b:36:06:82:
                    ae:cd:32:b7:3b:b8:aa:b9:01:df:60:7d:bc:20:4a:
                    ed:05:f7:da:79:7c:93:66:4b:31:33:6d:11:e4:a1:
                    c7:f3:ec:e7:9d:d2:97:83:82:00:3d:20:e4:ec:4f:
                    46:e9:cb:b8:d5:a6:41:6e:9c:de:86:c4:22:94:18:
                    99:c8:26:fe:cf:13:8d:8d:48:8c:87:48:79:4d:48:
                    6f:f0:9f:ce:d6:5f:cd:63:89:f1:bb:f9:ad:e6:7b:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D3:33:04:51:39:D4:7B:3B:08:60:23:5D:C5:14:10:8B:07:E6:64
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:6540:2001::/48
                  2a06:6541:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:76:f7:55:fb:70:b0:78:81:2a:35:c7:4f:c8:df:52:e1:fc:
         78:8d:60:35:0e:5d:35:1b:83:1a:1c:21:12:0c:68:88:de:3e:
         e1:c0:d7:00:0f:7f:07:05:00:dd:0c:d7:78:8f:31:fc:76:32:
         95:86:7d:8e:a7:64:dc:4e:bd:bc:c0:d5:29:b8:95:89:cc:f2:
         6b:1f:42:9f:42:4d:6b:57:1d:b9:73:26:9c:07:50:61:04:01:
         68:77:71:5b:82:56:74:9d:5b:1e:2d:bd:c2:99:e0:cd:8e:01:
         a0:9e:c7:9a:63:87:51:98:ca:08:2c:6e:d5:6e:35:40:e8:c8:
         dd:7b:50:e2:95:d8:dd:5f:26:b4:2e:af:d0:4b:6c:93:8f:59:
         59:32:7d:d7:30:b3:a8:bd:73:da:fb:29:b3:a6:dc:45:39:3c:
         bb:31:de:95:f6:93:40:7f:66:86:19:ad:f1:2a:f8:1c:00:99:
         c8:f2:f0:fc:e9:19:72:6e:26:93:b3:9f:94:ac:15:12:43:1b:
         0c:e0:44:40:89:b3:8c:6a:65:7f:6d:b8:66:22:93:26:c6:23:
         c8:79:1a:ea:e4:f9:26:91:1d:d6:94:14:e1:0d:7a:0a:88:69:
         ab:2d:d9:d4:31:cc:80:6c:8e:18:2d:95:c7:68:67:87:c2:16:
         2a:60:48:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt5f0h0ndFMu1G82yH6RZokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi
MjI1NDcwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQzMzMwNDUxMzlkNDdiM2IwODYwMjM1ZGM1MTQxMDhiMDdlNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cz/S97EXlYVzikacdpV+mIxAZAI
mbWYQ70t9ClftDLR7Y5oZ9wIy5Jbva9Q2GNJi5hdiAP/UmNQTTQOURn8cW9NxPow
MgJIYIGYyJAz8a2txDapb7rJiDTz2nHVjZfbIxzGF+q59Zj9phMw5FP/Xg4J23NZ
zW3FZxreAqdCL1MV6TWyLDeRrzkAtasFQLbvPimDPXQ9CqDBl/xEJJxadAs2BoKu
zTK3O7iquQHfYH28IErtBffaeXyTZksxM20R5KHH8+znndKXg4IAPSDk7E9G6cu4
1aZBbpzehsQilBiZyCb+zxONjUiMh0h5TUhv8J/O1l/NY4nxu/mt5nu0DQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI7TMwRROdR7OwhgI13FFBCLB+ZkMB8GA1UdIwQY
MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt
OWFiZDFhYTY0YmUxLzEvanRNekJGRTUxSHM3Q0dBalhjVVVFSXNINW1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx
LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgZlQCAB
AwcAKgZlQSABMA0GCSqGSIb3DQEBCwUAA4IBAQApdvdV+3CweIEqNcdPyN9S4fx4
jWA1Dl01G4MaHCESDGiI3j7hwNcAD38HBQDdDNd4jzH8djKVhn2Op2TcTr28wNUp
uJWJzPJrH0KfQk1rVx25cyacB1BhBAFod3FbglZ0nVseLb3CmeDNjgGgnseaY4dR
mMoILG7VbjVA6Mjde1DildjdXya0Lq/QS2yTj1lZMn3XMLOovXPa+ymzptxFOTy7
Md6V9pNAf2aGGa3xKvgcAJnI8vD86RlybiaTs5+UrBUSQxsM4ERAibOMamV/bbhm
IpMmxiPIeRrq5PkmkR3WlBThDXoKiGmrLdnUMcyAbI4YLZXHaGeHwhYqYEjq
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:49 2026 by rpki-client