This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/B6iysmHDbleRVKIuBhreNxTvPy4.roa
File:                     B6iysmHDbleRVKIuBhreNxTvPy4.roa (raw, json)
Hash identifier:          fb8tZxqx2SdW+lzSZRG1WIbgYJH2tXqvILVLuIwY8Cs=
Subject key identifier:   07:A8:B2:B2:61:C3:6E:57:91:54:A2:2E:06:1A:DE:37:14:EF:3F:2E
Certificate issuer:       /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial:       019B7A5B6705EFC87BC6EB4CEC8BA11D6146
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/B6iysmHDbleRVKIuBhreNxTvPy4.roa
Signing time:             Thu 01 Jan 2026 16:19:28 +0000
ROA not before:           Thu 01 Jan 2026 16:19:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207160
IP address blocks:        185.65.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:67:05:ef:c8:7b:c6:eb:4c:ec:8b:a1:1d:61:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
        Validity
            Not Before: Jan  1 16:19:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07a8b2b261c36e579154a22e061ade3714ef3f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:cc:1a:78:b5:35:a0:cd:3f:4d:2c:4f:2f:
                    d2:fe:57:12:2d:ba:07:81:05:e9:db:d5:5f:cd:b0:
                    1b:1e:8d:22:92:6f:1a:ec:37:76:53:85:ba:54:36:
                    18:85:af:cc:60:37:36:61:bb:e0:aa:3c:df:55:e2:
                    79:59:a8:b5:75:7a:19:35:b3:0e:c7:64:c1:4a:89:
                    88:0e:7e:d9:05:a9:e1:b7:87:a5:25:2a:dd:23:eb:
                    67:ba:60:ef:6f:48:9b:92:5e:85:e6:40:f6:ef:21:
                    2e:25:5d:e0:9f:a7:3a:a6:e4:f2:d3:a5:c2:9a:ec:
                    56:32:5c:a0:d5:a9:00:b9:48:73:cd:9d:47:81:2f:
                    ec:92:4d:2c:dd:06:7b:49:c5:2b:68:3e:1a:fc:c1:
                    0b:80:54:3e:78:09:9e:20:5b:6b:79:de:46:ae:a7:
                    3c:1e:66:b5:a1:db:08:88:e4:af:b7:ec:61:ca:e6:
                    bb:73:f7:c0:3f:6c:86:cd:3f:76:ed:2f:b8:9b:a7:
                    28:eb:2b:bd:4f:75:e1:bf:be:50:0e:bb:5c:bf:73:
                    d2:ce:42:6a:48:47:5a:dc:d0:e3:2a:d4:65:9d:6e:
                    b0:8b:51:d8:14:4d:c7:2c:f6:c6:82:11:e6:c1:61:
                    37:26:f1:dd:b3:57:82:5b:07:3e:a0:52:fd:39:04:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A8:B2:B2:61:C3:6E:57:91:54:A2:2E:06:1A:DE:37:14:EF:3F:2E
            X509v3 Authority Key Identifier:
                keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/B6iysmHDbleRVKIuBhreNxTvPy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.65.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:d6:54:e3:d8:ae:3d:93:d2:4e:8a:47:08:89:4b:d5:8c:5b:
         fd:4a:78:71:63:39:64:37:b9:4a:b4:98:d6:b2:d6:58:d0:28:
         fc:02:74:f3:f9:7e:58:7b:a8:d3:8a:65:cd:e5:08:06:6c:49:
         2c:f9:69:16:81:1c:b0:81:f6:54:92:28:16:fa:18:23:eb:88:
         90:3d:a0:c3:dd:cb:d4:99:5e:07:15:15:56:d2:46:9a:f3:dd:
         b1:bd:39:7d:ed:d0:85:0a:2e:ef:3f:97:28:88:2f:35:97:4b:
         c2:0d:73:c3:18:70:33:a9:f9:92:36:88:a6:0f:6c:82:ce:69:
         d1:32:49:dc:0c:a7:c9:22:38:0e:8c:77:6c:aa:b9:7d:57:85:
         ba:08:75:b1:21:b4:26:46:de:f0:0b:01:f7:c6:19:8e:ea:1b:
         e8:0a:2b:be:98:6f:1d:6e:87:d9:88:19:21:10:27:1a:0d:eb:
         ce:fd:a1:8d:cc:27:64:0d:58:09:d8:d3:f4:63:2e:7e:9f:c2:
         a1:12:76:63:f7:2e:fb:07:3c:85:36:d2:cd:b9:9f:29:4a:54:
         a9:90:7e:aa:8e:3d:35:3d:34:6f:72:e6:47:d5:1d:99:4a:5f:
         a4:88:fa:ff:bc:49:16:14:be:0e:40:e9:2d:c7:b9:71:d2:a2:
         d3:12:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:26:01 2026 by rpki-client