This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/bJkRhr6gxj4949ZR94tCs8QFaYM.roa
File:                     bJkRhr6gxj4949ZR94tCs8QFaYM.roa (raw, json)
Hash identifier:          SWvlln+KgwyaFKe10Mkv+Rqv61r6FeZ4lnSz2eqqGXc=
Subject key identifier:   6C:99:11:86:BE:A0:C6:3E:3D:E3:D6:51:F7:8B:42:B3:C4:05:69:83
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       019B7AC7EEAF758A43A6089A8894F10E521C
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/bJkRhr6gxj4949ZR94tCs8QFaYM.roa
Signing time:             Thu 01 Jan 2026 18:18:01 +0000
ROA not before:           Thu 01 Jan 2026 18:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3918
IP address blocks:        145.30.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:ee:af:75:8a:43:a6:08:9a:88:94:f1:0e:52:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 18:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c991186bea0c63e3de3d651f78b42b3c4056983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:c8:32:b1:43:1b:4e:47:10:b5:76:b9:f3:
                    10:4d:06:41:8e:cf:e5:7b:22:0e:34:90:04:3d:e3:
                    74:5c:38:7a:38:74:76:42:ef:7f:81:70:83:85:c8:
                    b6:bf:63:69:97:d5:0d:b8:bf:4e:1a:bf:4f:9e:3a:
                    87:13:6b:ca:7c:87:fb:02:55:00:76:1e:3a:8b:f3:
                    41:a2:9d:c7:e0:78:fd:b9:06:a9:44:82:8c:7d:be:
                    ad:bd:6a:73:52:ef:88:5c:08:28:1b:83:13:d7:18:
                    1d:e1:91:a2:aa:af:05:99:96:89:cc:3a:66:9d:51:
                    42:ba:99:e6:42:68:13:a1:e3:19:14:60:40:9a:93:
                    ee:66:ed:81:d3:92:2f:ad:dc:29:df:f0:6b:a0:39:
                    ef:6d:35:45:41:2b:22:9b:ab:0c:8a:af:cb:92:a3:
                    1a:ae:e5:72:94:2d:9f:c4:d7:b4:92:74:6a:91:40:
                    e3:e4:4c:e1:db:c2:b1:ea:6c:50:52:20:e3:cc:8a:
                    f6:13:8c:0c:04:bc:08:d2:ea:71:ba:e5:3d:f9:b7:
                    8e:d7:81:93:5e:a6:8b:22:40:15:32:d8:e4:57:41:
                    0b:b4:a2:00:a0:b2:c7:fb:cb:11:46:6f:da:0e:02:
                    c4:2a:07:40:f2:73:6e:08:3d:26:1e:d8:71:8a:fa:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:99:11:86:BE:A0:C6:3E:3D:E3:D6:51:F7:8B:42:B3:C4:05:69:83
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/bJkRhr6gxj4949ZR94tCs8QFaYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.30.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e9:e9:b3:5f:61:49:d1:10:78:6c:18:15:c8:7a:5c:7b:09:
         6d:0d:41:c6:7f:3f:06:62:49:15:65:ff:29:e3:96:25:ba:bd:
         52:65:ca:db:35:6e:17:f8:54:16:71:fa:17:ad:f3:b5:48:b5:
         34:e5:6a:3e:65:a1:3d:9a:5b:78:f5:89:83:f0:f7:f3:95:50:
         f6:8d:06:65:ab:9d:7b:db:31:ef:9f:2c:ef:c7:0d:8c:25:3b:
         f0:cf:74:59:10:05:e5:c6:3f:13:c0:98:d5:0f:51:cd:99:2b:
         54:d7:6f:05:d5:53:62:23:cf:a5:54:a3:eb:6a:d3:18:63:57:
         a3:68:e0:97:ae:88:db:94:01:46:15:5c:bf:72:9c:26:f8:9b:
         8b:ab:f4:a3:13:2e:1c:f5:a0:f4:de:01:c7:5e:94:d1:9a:d4:
         0e:15:f7:80:a7:57:05:15:55:4f:33:f2:0f:8a:3a:b9:12:08:
         9e:d1:d6:40:37:0f:13:4f:53:cc:f5:8c:8c:a0:3f:56:84:46:
         87:37:c7:99:30:7c:55:3c:f5:ed:fa:01:a1:f7:1c:44:83:19:
         78:08:cf:8a:ed:79:d2:fa:87:ee:cb:36:90:89:6c:26:ee:d2:
         32:ff:2c:31:13:03:d9:17:da:d3:d4:20:44:62:62:0b:ef:ed:
         0b:b3:53:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x+6vdYpDpgiaiJTxDlIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk5MTE4NmJlYTBjNjNlM2RlM2Q2NTFmNzhiNDJiM2M0MDU2OTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BDIMrFDG05HELV2ufMQTQZBjs/l
eyIONJAEPeN0XDh6OHR2Qu9/gXCDhci2v2Npl9UNuL9OGr9PnjqHE2vKfIf7AlUA
dh46i/NBop3H4Hj9uQapRIKMfb6tvWpzUu+IXAgoG4MT1xgd4ZGiqq8FmZaJzDpm
nVFCupnmQmgToeMZFGBAmpPuZu2B05Ivrdwp3/BroDnvbTVFQSsim6sMiq/LkqMa
ruVylC2fxNe0knRqkUDj5Ezh28Kx6mxQUiDjzIr2E4wMBLwI0upxuuU9+beO14GT
XqaLIkAVMtjkV0ELtKIAoLLH+8sRRm/aDgLEKgdA8nNuCD0mHthxivpFcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGyZEYa+oMY+PePWUfeLQrPEBWmDMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvYkprUmhyNmd4ajQ5NDlaUjk0dENzOFFGYVlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkR7jMA0G
CSqGSIb3DQEBCwUAA4IBAQBf6emzX2FJ0RB4bBgVyHpcewltDUHGfz8GYkkVZf8p
45Ylur1SZcrbNW4X+FQWcfoXrfO1SLU05Wo+ZaE9mlt49YmD8PfzlVD2jQZlq517
2zHvnyzvxw2MJTvwz3RZEAXlxj8TwJjVD1HNmStU128F1VNiI8+lVKPratMYY1ej
aOCXrojblAFGFVy/cpwm+JuLq/SjEy4c9aD03gHHXpTRmtQOFfeAp1cFFVVPM/IP
ijq5Egie0dZANw8TT1PM9YyMoD9WhEaHN8eZMHxVPPXt+gGh9xxEgxl4CM+K7XnS
+ofuyzaQiWwm7tIy/ywxEwPZF9rT1CBEYmIL7+0Ls1Mn
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:57 2026 by rpki-client