This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/burJ78lKaBi9GwpclBHxJ1tt3J8.roa
File:                     burJ78lKaBi9GwpclBHxJ1tt3J8.roa (raw, json)
Hash identifier:          7zKgA0U3yskpNhBj2DmX/6y6Luj79ABkwPUXMuxefqU=
Subject key identifier:   6E:EA:C9:EF:C9:4A:68:18:BD:1B:0A:5C:94:11:F1:27:5B:6D:DC:9F
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       019B76EB0DF458A5C849D3F8B5425BBFC067
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/burJ78lKaBi9GwpclBHxJ1tt3J8.roa
Signing time:             Thu 01 Jan 2026 00:17:54 +0000
ROA not before:           Thu 01 Jan 2026 00:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203080
IP address blocks:        193.200.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:0d:f4:58:a5:c8:49:d3:f8:b5:42:5b:bf:c0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: Jan  1 00:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6eeac9efc94a6818bd1b0a5c9411f1275b6ddc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:36:87:7c:b9:4d:9e:68:b9:92:57:f7:0f:51:
                    01:f1:c5:b9:7b:0e:06:5d:0e:f4:fe:05:17:63:a3:
                    dc:3b:e7:9d:ff:d7:ba:2e:60:66:f3:a8:33:47:04:
                    93:f6:0f:8f:f1:06:cc:94:7c:e8:1b:75:eb:97:33:
                    53:21:b5:0d:cf:97:96:e8:8a:9e:10:1b:18:5f:05:
                    22:eb:22:d3:7a:be:22:32:28:35:d5:f5:7f:cd:78:
                    e6:8e:9a:10:63:e3:33:e7:7e:9e:80:f6:88:3f:7a:
                    7e:b3:05:81:dd:19:e6:3a:ae:68:14:b9:c9:88:97:
                    9f:78:bc:45:ba:76:3b:e5:5d:9a:2c:cc:45:ac:d0:
                    32:79:80:b4:49:44:4b:0e:72:ec:96:b0:3e:35:14:
                    21:a2:bc:67:cb:e4:4c:10:03:9b:f6:d9:b1:a3:91:
                    94:69:69:90:65:a3:52:ff:c1:3c:e2:06:9e:d5:5b:
                    04:3a:1a:08:0c:b2:d7:ca:52:53:ad:76:f3:80:64:
                    71:c8:64:6b:a8:9d:1d:16:10:47:2a:9c:d9:44:f4:
                    66:96:24:ac:46:72:4b:bc:08:ca:d3:cd:b7:67:29:
                    95:b4:1a:20:f9:29:f7:46:fa:ee:62:dd:21:91:10:
                    72:81:41:22:be:77:6b:5a:bc:76:bc:c5:77:23:c5:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EA:C9:EF:C9:4A:68:18:BD:1B:0A:5C:94:11:F1:27:5B:6D:DC:9F
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/burJ78lKaBi9GwpclBHxJ1tt3J8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:91:99:54:73:0a:cf:a2:dc:2c:27:33:5b:b0:e3:f8:6e:
         e2:04:a7:c2:fd:0c:25:f0:23:85:66:42:15:03:b2:ee:bd:c8:
         03:c6:dd:ae:71:17:7a:de:97:20:d9:6d:0b:7b:d1:a2:63:28:
         5f:73:ed:c8:f8:a7:a7:f9:81:45:02:c8:54:77:1d:7b:7e:06:
         86:08:24:82:23:df:11:b4:3d:27:09:9c:1c:bd:05:37:f1:2c:
         9b:0b:05:5a:35:af:c2:8c:cd:a4:ef:6c:01:22:1e:b9:e7:b4:
         70:2b:bd:c0:fa:d8:95:31:4f:41:74:f5:b5:55:73:46:72:9a:
         b8:47:ad:a4:9b:5d:71:a1:93:77:2e:3c:10:85:d0:80:f2:b3:
         1f:f1:8a:27:86:14:bc:8d:b6:da:14:56:36:de:9e:78:96:a3:
         8d:82:9b:41:34:17:5f:8f:da:cd:f7:75:56:ea:1f:6b:24:87:
         84:e1:64:6c:c8:cc:05:f5:fa:1c:ca:7f:00:d8:c7:2f:c3:3b:
         af:ab:65:bc:9d:d8:ad:8c:91:9b:91:92:96:ff:7f:91:ab:bb:
         47:71:59:09:b4:2f:c7:ee:26:26:9a:fa:da:59:47:eb:e6:45:
         da:d8:e1:0f:1d:5e:47:c4:50:79:c4:ae:cc:0c:c4:0f:a4:73:
         f9:4b:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:32 2026 by rpki-client