This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/anGxWMSUn73gHU-izVJ7bqSGfMo.roa
File:                     anGxWMSUn73gHU-izVJ7bqSGfMo.roa (raw, json)
Hash identifier:          G4GGNJNUk06E63rYAbq/LrxWoJIIP19IG8uRCyb/ifU=
Subject key identifier:   6A:71:B1:58:C4:94:9F:BD:E0:1D:4F:A2:CD:52:7B:6E:A4:86:7C:CA
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       019B7CEDFA47AA7F3043DA4CDCE29DBF4A0E
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/anGxWMSUn73gHU-izVJ7bqSGfMo.roa
Signing time:             Fri 02 Jan 2026 04:18:49 +0000
ROA not before:           Fri 02 Jan 2026 04:18:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216361
IP address blocks:        185.244.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:fa:47:aa:7f:30:43:da:4c:dc:e2:9d:bf:4a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  2 04:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a71b158c4949fbde01d4fa2cd527b6ea4867cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:15:39:7d:4d:1d:b8:65:27:d2:7d:12:d9:ff:
                    91:4a:14:3c:c1:9e:36:58:fc:9f:89:37:06:98:a0:
                    f9:44:81:7f:67:5f:05:f8:31:5f:12:c4:9e:ae:95:
                    50:18:44:1c:67:e5:fe:10:37:49:92:86:6e:15:ae:
                    1e:6b:ef:44:36:43:05:8a:18:8d:15:7d:60:53:e5:
                    5a:0f:a9:fe:8f:86:24:91:3b:cd:9e:48:c2:2d:08:
                    3a:bb:8b:9d:88:ec:a1:4a:00:14:ff:50:33:b4:6d:
                    14:51:a8:05:e0:20:e6:20:cf:29:d5:e8:00:ea:cc:
                    93:b7:a3:4a:7f:1e:73:70:04:b9:01:00:d6:1c:a9:
                    74:f3:3a:fd:bb:50:d1:a4:ee:e8:c4:f0:e6:c1:52:
                    02:7c:0d:e4:ea:cc:34:da:80:ab:e5:7c:6b:71:bf:
                    aa:66:19:7c:a4:ea:c4:30:9b:27:94:b5:25:00:db:
                    42:92:eb:88:a5:bb:e1:4e:18:f3:35:30:18:09:9f:
                    57:21:9b:b8:7a:8a:9c:fb:e7:e1:1e:fa:6c:4a:8a:
                    bb:fc:68:21:97:a9:3f:ef:f8:43:2e:dc:33:a3:0e:
                    8c:54:15:52:0f:ad:81:70:6e:45:2a:fb:34:e3:cf:
                    0e:79:c1:84:17:64:f9:e2:0f:1f:8b:3c:d3:59:8d:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:71:B1:58:C4:94:9F:BD:E0:1D:4F:A2:CD:52:7B:6E:A4:86:7C:CA
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/anGxWMSUn73gHU-izVJ7bqSGfMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:90:b0:f1:18:90:1f:48:70:56:0b:ce:13:ac:d8:c5:87:
         39:e5:61:a2:39:27:69:0f:51:02:76:57:3a:24:ab:60:e7:18:
         2b:6f:26:68:80:23:b7:d4:23:1c:3f:75:f8:54:19:e0:9e:fe:
         b9:2e:0d:98:36:2e:0b:42:e0:c3:3f:de:fb:16:ca:fe:f9:c5:
         9a:26:eb:d6:ef:ce:92:4b:38:96:35:fa:0f:76:0d:47:7d:20:
         94:c5:42:26:91:ab:5c:25:c4:01:d6:14:22:4e:8c:43:85:17:
         1d:bd:3f:6f:8d:65:52:13:31:b2:38:2d:5e:1a:d2:d7:6a:b7:
         34:f6:f4:49:df:8c:9b:42:07:1c:8a:10:97:09:24:e5:b2:1f:
         30:91:b2:f1:80:65:be:10:01:20:ad:eb:0b:bf:32:f2:5c:06:
         d9:db:af:3a:0d:f1:d8:4d:8e:ec:1a:3c:5c:45:a3:67:d7:cc:
         4f:c7:0b:65:92:b8:92:47:8b:21:56:39:36:83:c0:4c:62:cd:
         8b:33:59:e1:da:32:7c:45:66:5d:9d:0d:a2:32:aa:51:09:f1:
         5f:b1:3e:fb:70:3b:35:8b:7f:6d:99:b7:1a:82:59:0e:5a:e2:
         73:5e:3e:3b:4a:3d:2f:7e:51:37:22:f2:8d:5b:d6:4e:97:9c:
         06:46:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:45 2026 by rpki-client