This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa
File:                     6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa (raw, json)
Hash identifier:          IggBLq2a8EpveAoDyReWvG833q0pjf83jxc+h1sihOI=
Subject key identifier:   E9:5F:6B:FD:FE:8B:DA:6F:38:29:3D:A1:7E:46:0E:F1:82:A4:E1:0C
Certificate issuer:       /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial:       019B7F13A174754DF7F8FEFB6CAD97F4611C
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa
Signing time:             Fri 02 Jan 2026 14:19:11 +0000
ROA not before:           Fri 02 Jan 2026 14:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212212
IP address blocks:        91.242.48.0/23 maxlen: 23
                          91.242.50.0/23 maxlen: 23
                          151.248.70.0/23 maxlen: 23
                          176.108.224.0/22 maxlen: 22
                          185.76.52.0/23 maxlen: 23
                          185.76.54.0/23 maxlen: 23
                          194.107.122.0/24 maxlen: 24
                          194.213.6.0/24 maxlen: 24
                          195.54.54.0/24 maxlen: 24
                          195.54.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:a1:74:75:4d:f7:f8:fe:fb:6c:ad:97:f4:61:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
        Validity
            Not Before: Jan  2 14:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e95f6bfdfe8bda6f38293da17e460ef182a4e10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:88:18:d4:51:f6:42:0f:0a:96:37:13:e9:
                    79:33:83:9a:f5:16:dd:ae:e0:e2:3e:46:f3:4d:66:
                    9b:70:ed:06:81:94:f5:28:6f:a0:70:25:eb:ee:55:
                    03:54:ee:cf:68:1b:a9:83:8d:20:08:f5:55:78:e9:
                    d6:7a:e0:9b:35:c9:e6:dc:c9:b5:63:27:2c:9a:99:
                    6b:49:9e:87:10:f7:89:7d:c5:c6:12:e8:93:24:6a:
                    df:c9:c3:9b:9f:e0:e3:5a:ae:5d:12:68:98:49:20:
                    89:73:62:5b:8f:1b:84:9e:68:d4:f2:c7:88:57:fe:
                    21:27:9d:3b:f0:d2:fa:4e:68:d6:e2:c0:23:5b:3f:
                    cf:93:69:0f:e9:d0:6b:c7:0b:8d:c3:e4:4a:ef:cf:
                    7c:f9:73:cb:2e:6b:c7:bf:24:de:dc:0f:f1:af:7d:
                    da:78:2b:af:36:4c:4c:ff:a5:b6:c4:9b:54:c6:a7:
                    6d:bc:ae:97:23:54:b3:3b:61:1f:72:67:22:b7:f5:
                    3a:88:e7:32:9b:23:c8:a5:0e:8b:11:2e:7d:48:6f:
                    ca:86:cf:f1:c5:a8:48:ee:f5:45:65:4e:07:ef:8d:
                    bf:43:fa:af:e0:7f:1f:f4:0d:9d:e3:17:fe:89:68:
                    66:7e:4f:b8:7e:5b:ec:2a:32:6a:91:df:fa:bb:66:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:6B:FD:FE:8B:DA:6F:38:29:3D:A1:7E:46:0E:F1:82:A4:E1:0C
            X509v3 Authority Key Identifier:
                keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/6V9r_f6L2m84KT2hfkYO8YKk4Qw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.48.0/22
                  151.248.70.0/23
                  176.108.224.0/22
                  185.76.52.0/22
                  194.107.122.0/24
                  194.213.6.0/24
                  195.54.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:bd:0f:56:7d:a0:5e:35:76:99:72:67:f1:1b:26:74:c8:8a:
         d8:c1:21:15:74:bf:af:03:e6:2e:15:7f:34:05:78:f6:d5:6e:
         6a:80:cf:d8:ea:0d:95:79:79:43:43:b1:1d:4a:f4:2d:76:57:
         00:11:43:a5:89:de:b6:ed:f8:37:d9:e5:5e:08:59:36:e4:5f:
         a1:fb:4a:a3:9e:ce:73:5f:8b:3c:72:34:83:c0:5b:19:5b:74:
         12:bf:00:bd:48:4f:7c:1a:46:11:f6:3f:99:72:b5:c7:77:38:
         6d:6d:99:b9:39:8d:88:70:2e:78:57:fd:fd:b9:82:fe:75:b0:
         2a:f0:40:54:92:b5:5e:f1:d7:fb:e2:03:19:44:fe:9a:ae:a8:
         9b:83:69:a5:ba:eb:be:c0:d7:2a:61:b4:98:bb:85:0d:48:5a:
         15:3d:96:3a:5f:60:a2:5d:da:aa:03:a7:f0:b0:42:48:ce:0f:
         62:75:62:39:c1:e7:6b:5c:df:55:ce:37:d5:81:5b:5a:1e:f9:
         db:fd:78:c7:17:56:91:32:6a:6e:84:83:78:35:6c:12:f5:b0:
         ce:60:34:1a:61:59:95:67:1d:93:37:1c:4f:b7:0b:47:cb:bd:
         e8:f1:87:d7:7c:b4:8e:68:05:ae:47:1f:af:59:08:62:67:a8:
         67:22:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:19:11 2026 by rpki-client