This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/AL6_iNyYf5_-8MNJEgieEgNDMIY.roa
File:                     AL6_iNyYf5_-8MNJEgieEgNDMIY.roa (raw, json)
Hash identifier:          0+d8aJSNzAigR1rPUuhEaaIGr2KsvOX77RXS9BnQQ0E=
Subject key identifier:   00:BE:BF:88:DC:98:7F:9F:FE:F0:C3:49:12:08:9E:12:03:43:30:86
Certificate issuer:       /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial:       019B7DCA8AFF202D085872D966ACB70EAE1F
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/AL6_iNyYf5_-8MNJEgieEgNDMIY.roa
Signing time:             Fri 02 Jan 2026 08:19:44 +0000
ROA not before:           Fri 02 Jan 2026 08:19:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5089
IP address blocks:        188.92.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:8a:ff:20:2d:08:58:72:d9:66:ac:b7:0e:ae:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d963844f8205d1369434531c998600c15781a1
        Validity
            Not Before: Jan  2 08:19:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=00bebf88dc987f9ffef0c34912089e1203433086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:ef:95:a3:bc:b8:8c:05:1e:86:52:28:81:
                    55:83:73:f9:b5:45:65:6e:be:31:4a:e0:61:81:8e:
                    8a:c9:d0:f0:94:01:77:8f:c7:2d:37:c5:39:d8:7c:
                    6f:48:bb:16:5a:cf:ad:fd:75:77:03:6e:07:e5:02:
                    df:57:cc:8d:91:1a:ad:cb:60:8c:ef:ce:a6:5f:fb:
                    5e:6f:13:14:f9:58:bf:d3:ec:f4:cf:0e:ba:e1:86:
                    6c:f2:a8:db:d5:ed:47:52:5b:9f:0f:85:9f:53:de:
                    4a:02:f3:1d:29:43:32:89:f5:92:d0:a9:88:65:24:
                    10:66:0a:5f:fd:93:aa:2d:ec:e8:62:28:72:d4:8f:
                    b5:4d:3c:a5:0b:d3:ca:1e:3e:fe:04:3d:88:6c:78:
                    4e:ee:36:cc:99:ac:1e:97:be:dc:e0:e4:ef:86:9f:
                    63:4b:c9:af:bc:43:ae:c3:34:4a:8a:af:16:05:12:
                    cd:5b:e6:9e:dc:e0:3b:28:a3:09:10:41:13:ee:9d:
                    3f:04:6a:e0:d9:d8:be:d9:9c:c9:c1:7f:20:83:4a:
                    5b:ec:11:8f:41:4f:9b:28:ac:c3:50:4c:ca:2b:f2:
                    d8:ac:0c:2b:cc:83:15:0a:20:46:7b:7d:50:07:0a:
                    9e:09:11:6c:99:fd:6b:99:ad:8a:20:ed:02:d1:e9:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BE:BF:88:DC:98:7F:9F:FE:F0:C3:49:12:08:9E:12:03:43:30:86
            X509v3 Authority Key Identifier:
                keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/AL6_iNyYf5_-8MNJEgieEgNDMIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.92.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a7:ed:8f:cb:d7:77:b9:7a:96:84:a9:d2:51:c7:11:85:91:
         5d:84:9e:ea:d3:a8:3e:59:f0:b2:5a:2b:a2:8d:91:f7:bf:40:
         af:1c:29:5d:e4:4b:59:e8:8f:15:0c:57:3b:fa:c4:23:29:c0:
         38:72:9f:42:5c:56:39:22:ff:5e:79:dd:91:a4:76:f7:5c:37:
         07:03:c2:e5:15:2c:02:35:cd:a7:68:7c:2d:29:6b:03:b7:9d:
         f2:d0:c3:dc:d7:1b:0f:95:51:6b:6c:5b:39:bb:e6:e9:19:b4:
         86:51:f4:4f:b8:ba:56:4d:e8:61:f8:88:2e:b0:62:1c:fa:1a:
         c5:24:5d:05:0f:98:ed:5d:97:74:3b:ea:f3:ad:bb:90:e6:6b:
         5d:e5:fd:66:c4:33:d9:19:d1:93:34:55:45:d1:63:0c:ae:2f:
         03:5f:6c:b2:0a:db:b1:fd:7b:81:d9:37:00:d2:b0:2c:cd:7a:
         1e:f0:c3:60:c9:5b:ae:5e:be:10:48:b4:63:4c:67:78:d2:cc:
         23:6b:34:42:38:95:c0:b6:eb:71:e9:f9:e7:2b:7c:b1:1f:c9:
         7b:ea:96:8a:d7:d9:81:b6:70:e4:95:cf:8d:ed:00:62:65:b3:
         fd:24:ea:f5:db:f7:d5:6a:0e:9f:90:02:98:56:89:7f:17:0a:
         9d:75:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:08:15 2026 by rpki-client