This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/06pvda0HGfo4YEYPGpGmXC6pc6Y.roa
File:                     06pvda0HGfo4YEYPGpGmXC6pc6Y.roa (raw, json)
Hash identifier:          EHWs8d7V2Xw60HILi+lG9QLvqYdWqwG17JXDByqVTf4=
Subject key identifier:   D3:AA:6F:75:AD:07:19:FA:38:60:46:0F:1A:91:A6:5C:2E:A9:73:A6
Certificate issuer:       /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial:       019B791051B33A9273693CCA651460A1520E
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/06pvda0HGfo4YEYPGpGmXC6pc6Y.roa
Signing time:             Thu 01 Jan 2026 10:17:51 +0000
ROA not before:           Thu 01 Jan 2026 10:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197648
IP address blocks:        213.169.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:51:b3:3a:92:73:69:3c:ca:65:14:60:a1:52:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
        Validity
            Not Before: Jan  1 10:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d3aa6f75ad0719fa3860460f1a91a65c2ea973a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:87:93:7f:36:68:82:93:b1:4f:c8:12:41:
                    5b:16:b4:7e:2b:ed:85:c8:1c:28:44:0f:84:51:5b:
                    7f:7c:28:5c:a2:80:50:e1:eb:ce:83:aa:04:b4:e4:
                    1e:91:6e:a6:af:03:bc:41:c8:d6:7c:5f:6f:8d:5a:
                    cf:cb:e0:55:70:79:4e:70:8e:a0:4a:f9:98:1b:83:
                    d1:11:a9:ff:37:33:8c:69:ef:71:40:5f:78:ec:ca:
                    19:8d:96:d2:39:2e:12:ff:05:5e:9d:89:3a:67:4c:
                    75:fd:5b:48:b6:af:3f:d2:82:c6:06:87:5f:67:41:
                    e6:e4:7a:75:ac:e9:3c:0c:5c:f3:ff:36:e7:4e:0a:
                    24:36:99:28:a1:fd:b9:4e:20:5c:44:66:82:7f:00:
                    c3:55:55:3f:ec:80:e3:4c:dd:b2:c3:43:83:d3:7d:
                    22:8b:56:99:fb:fd:4f:c6:40:ce:70:cf:3d:94:eb:
                    da:63:08:9a:6f:8c:90:49:9c:6a:d6:40:1f:4a:74:
                    e6:43:0d:ff:92:6d:c4:90:32:9b:c7:ee:4b:77:64:
                    21:48:6d:4e:1f:d6:c5:87:a4:e3:68:c1:d1:99:36:
                    b3:ac:f0:fb:d5:db:f9:b3:bd:54:88:d7:5a:ad:08:
                    2b:f9:42:11:1f:9e:84:50:89:86:09:1f:07:53:18:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AA:6F:75:AD:07:19:FA:38:60:46:0F:1A:91:A6:5C:2E:A9:73:A6
            X509v3 Authority Key Identifier:
                keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/06pvda0HGfo4YEYPGpGmXC6pc6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.169.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:e4:4f:f9:64:ad:dc:f6:ef:79:f5:f9:5c:4f:e7:45:a9:
         9b:99:df:b0:3d:51:45:4c:c9:b3:fb:d9:15:2d:84:b5:6c:0e:
         56:7c:1f:47:74:79:c4:bb:35:ac:8d:7c:df:14:4c:c0:17:fc:
         63:63:c0:db:fd:f5:dd:b6:33:52:fd:2b:e2:f4:4e:c6:30:b1:
         65:52:4d:99:c5:87:39:6a:72:28:a7:c2:38:65:38:c7:7d:75:
         f8:d5:33:2f:6b:c5:00:44:39:fc:ca:da:f1:1c:41:98:4f:cd:
         58:4a:70:97:f9:d1:28:ac:91:1b:10:97:04:5a:30:9b:d6:1f:
         5b:e2:e6:ab:a3:a6:4c:f3:68:21:bc:b5:12:e1:50:48:04:87:
         c5:5e:3a:d5:3c:e3:b5:e3:9c:1a:59:b7:ad:ae:ca:ad:d0:94:
         d6:75:42:1a:b7:84:0b:12:10:88:37:a7:39:25:52:da:d3:f6:
         f9:3d:ad:38:b0:27:8c:ee:1d:fa:c9:0d:f8:1f:1f:e1:80:9c:
         95:b3:e2:92:00:7d:81:c3:a3:a9:9e:97:aa:39:36:4f:37:79:
         4b:44:76:6e:b7:d4:06:c6:5d:be:c8:58:00:db:78:f1:a5:62:
         18:30:a4:8a:0a:00:15:37:e9:74:81:07:37:50:41:a6:08:4d:
         b9:34:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:29:25 2026 by rpki-client