This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/k6TxJNl-4d3uAB5GHa624xMLWD8.roa
File:                     k6TxJNl-4d3uAB5GHa624xMLWD8.roa (raw, json)
Hash identifier:          Axx/xqRDpHojXkziQu6/Gdba+tEmqjnHlVBGZAaIEnM=
Subject key identifier:   93:A4:F1:24:D9:7E:E1:DD:EE:00:1E:46:1D:AE:B6:E3:13:0B:58:3F
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       019BE24327602D7B7DFFAE63E24A18325159
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/k6TxJNl-4d3uAB5GHa624xMLWD8.roa
Signing time:             Wed 21 Jan 2026 20:33:30 +0000
ROA not before:           Wed 21 Jan 2026 20:33:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7018
IP address blocks:        193.109.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e2:43:27:60:2d:7b:7d:ff:ae:63:e2:4a:18:32:51:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Jan 21 20:33:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=93a4f124d97ee1ddee001e461daeb6e3130b583f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1d:d5:f7:ec:7d:9d:e9:bd:a1:83:7b:f1:e0:
                    b6:8b:f0:2d:ff:a4:b5:43:34:cc:a3:90:e0:3d:83:
                    29:a2:03:8c:96:bc:24:29:c5:1b:ab:21:f2:5f:4e:
                    e1:55:f4:b8:53:3a:fe:65:d0:ee:9d:dc:09:b3:3e:
                    af:5b:07:d5:10:2b:66:c9:60:1d:72:18:4f:8f:02:
                    5d:f6:30:dd:d9:92:0c:e2:2d:0a:9d:8d:86:3a:b0:
                    15:e8:75:a9:6b:f8:bd:bb:70:61:41:8a:2d:8d:f8:
                    6d:72:08:74:2e:b7:3f:df:c3:f7:5c:f4:2a:4d:95:
                    fd:f8:98:7d:67:4b:e0:27:3e:c9:5d:73:5d:91:93:
                    33:c3:87:1f:3f:82:c7:61:d2:6a:83:fc:83:16:94:
                    99:9c:3f:df:ad:1f:4f:2f:02:d2:85:fa:3d:b3:f4:
                    b6:13:32:38:36:71:32:ad:dd:05:75:d4:37:fd:4a:
                    db:f7:22:d5:a3:46:bc:1d:6e:00:ee:aa:66:eb:0d:
                    31:3e:f5:f5:8b:02:7e:2f:38:f3:52:c0:65:13:da:
                    a0:ae:cf:dc:11:5a:23:62:d6:71:1a:98:37:c5:dc:
                    cf:53:ea:c6:f2:dc:26:c6:b9:87:1c:3a:50:d4:32:
                    82:9e:b7:0d:ef:c0:e1:ff:56:7c:65:3c:46:97:f7:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A4:F1:24:D9:7E:E1:DD:EE:00:1E:46:1D:AE:B6:E3:13:0B:58:3F
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/k6TxJNl-4d3uAB5GHa624xMLWD8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:9c:d7:ba:c0:ab:53:4d:21:ae:d9:c2:a9:0e:0f:1a:6a:ef:
         4b:0c:29:b1:9d:b3:39:d9:c8:91:ad:c2:ce:f8:bf:6f:9a:a6:
         eb:7b:46:cb:10:61:eb:2b:d3:1b:9b:6d:0a:0b:cb:06:f2:e0:
         13:0b:8c:62:1f:30:d8:e5:f9:7d:a2:61:de:7f:5c:0e:09:e7:
         4d:3b:03:c9:56:54:d3:35:fa:f1:a2:e2:6d:0b:e0:fd:11:67:
         7d:fb:8a:e5:f3:cb:fc:e6:5d:c8:f5:6b:52:e0:3b:c7:fe:00:
         88:b1:ee:16:1d:2f:83:c4:6b:3d:36:6c:a9:af:2b:0b:01:32:
         a8:a7:b5:c7:ed:ab:bc:8f:f1:57:eb:32:37:05:1b:73:5e:10:
         53:a2:58:ff:e6:e5:37:84:bf:5e:6b:f3:94:79:02:90:3c:da:
         63:f9:59:53:eb:fa:bb:3a:65:97:89:c8:26:b1:26:a8:f3:cc:
         82:9c:ef:ea:68:11:69:2e:11:72:2c:e6:f0:fb:01:53:d6:c7:
         9c:c4:96:8c:f1:57:2f:4e:84:86:d6:d4:6b:0b:8f:37:cc:fd:
         54:93:65:6b:9f:53:99:b1:2c:8b:64:94:b4:f1:8e:eb:ec:a0:
         ee:a5:36:8e:89:96:cf:d5:97:b7:bd:1d:cd:1f:e1:3c:d6:5b:
         a8:c2:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:04 2026 by rpki-client