This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6utzV7wpZt-fEs4y66qae83WxkA.roa
File:                     6utzV7wpZt-fEs4y66qae83WxkA.roa (raw, json)
Hash identifier:          9ojB1OszPJeXA9dlL4clT7eYZbslfe7Akh0aMEk8Erg=
Subject key identifier:   EA:EB:73:57:BC:29:66:DF:9F:12:CE:32:EB:AA:9A:7B:CD:D6:C6:40
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       019B7AC7F9A9A95929B49E289C2B131C8885
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6utzV7wpZt-fEs4y66qae83WxkA.roa
Signing time:             Thu 01 Jan 2026 18:18:04 +0000
ROA not before:           Thu 01 Jan 2026 18:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215088
IP address blocks:        145.102.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:f9:a9:a9:59:29:b4:9e:28:9c:2b:13:1c:88:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 18:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eaeb7357bc2966df9f12ce32ebaa9a7bcdd6c640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:0f:9b:a8:9c:d0:d9:c0:9c:7f:01:51:12:
                    6f:e8:ea:83:ea:60:2f:a3:c9:64:92:a6:ba:67:ad:
                    e1:06:a6:92:8c:8f:6f:0b:c0:82:fe:94:b0:5c:40:
                    1f:43:ac:18:97:ec:90:55:a1:39:9b:3c:55:54:4b:
                    58:e1:70:13:0b:52:19:13:4c:0c:f4:65:31:39:66:
                    f6:ab:26:6d:14:a3:79:d7:4a:74:bd:16:b3:07:aa:
                    aa:fb:78:cb:6b:93:02:9e:67:75:5c:31:0d:e8:d5:
                    7f:27:65:59:a3:fd:d0:15:2c:19:1d:fd:1b:ff:13:
                    fc:93:67:eb:bb:3d:0c:f9:ef:c2:26:d9:93:19:c8:
                    4c:3d:52:46:08:64:0b:7c:25:3f:03:6f:2d:cf:ae:
                    a1:f8:9d:2a:4f:02:30:a7:f6:f5:b7:82:fb:ff:1d:
                    30:0d:44:fc:fb:52:a9:76:f5:97:fa:f6:57:39:e2:
                    cb:20:6a:71:3a:6e:fe:40:23:8b:fb:f1:1c:9f:f1:
                    cd:22:13:b7:19:bd:f0:e9:03:17:41:74:47:cd:7b:
                    76:89:71:ab:3b:cc:eb:79:25:ba:3e:82:d3:bb:e0:
                    1c:75:d6:35:e2:e8:7a:62:ee:53:32:d9:c7:05:8a:
                    81:01:82:bf:74:a6:b7:3f:ed:d2:1e:07:6d:8f:21:
                    c5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EB:73:57:BC:29:66:DF:9F:12:CE:32:EB:AA:9A:7B:CD:D6:C6:40
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6utzV7wpZt-fEs4y66qae83WxkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.102.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:71:41:ac:2c:bb:a2:ae:6b:44:b8:0c:62:d0:c0:10:55:ab:
         e2:e5:8d:82:91:22:e7:5e:38:57:87:cc:a0:14:b6:f3:79:80:
         fc:e1:19:72:48:75:28:31:42:77:c0:46:e0:47:7e:12:52:86:
         1e:de:3f:f3:cd:6a:78:34:ae:20:93:98:d1:5c:01:09:69:21:
         8e:ec:5f:fb:9d:10:2c:da:ed:5f:79:46:e8:8e:86:55:9f:39:
         68:26:96:d5:bf:18:5f:94:0b:46:31:ca:d2:cc:bc:8a:97:47:
         4f:f6:41:81:e0:d8:ad:ca:d6:73:5c:1f:bb:16:15:d2:89:6f:
         ba:89:72:c2:4b:f3:cf:36:e1:65:d3:50:7f:ce:09:4b:ca:c3:
         57:6a:64:98:2b:07:c4:32:af:52:7e:d3:10:3c:93:da:59:eb:
         d5:ae:f9:57:0c:38:78:50:8d:94:81:ca:54:c0:3f:a2:f7:4a:
         d3:7f:5b:0d:ea:66:2f:3b:d6:0c:1d:a7:f4:84:64:4f:1c:a9:
         ea:a1:ab:ff:9d:9e:5e:d4:e9:f3:95:26:eb:e2:e5:ec:8f:ea:
         b7:3d:17:b9:6a:2b:14:27:64:ef:07:8f:46:fc:b6:1c:42:ca:
         16:15:43:fe:b1:db:79:70:d9:06:9a:9b:c0:50:60:7c:02:dc:
         d2:ca:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:37:32 2026 by rpki-client