This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/RC6auerhl88_6riv7dybqchIS5U.roa
File:                     RC6auerhl88_6riv7dybqchIS5U.roa (raw, json)
Hash identifier:          SeZbnHyJbUAAlR1IcpsGOJobNmygz8xGZkv6xW1FK8g=
Subject key identifier:   44:2E:9A:B9:EA:E1:97:CF:3F:EA:B8:AF:ED:DC:9B:A9:C8:48:4B:95
Certificate issuer:       /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial:       019B7C80D574A3F3A1D3B8C80A43132A253F
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/RC6auerhl88_6riv7dybqchIS5U.roa
Signing time:             Fri 02 Jan 2026 02:19:36 +0000
ROA not before:           Fri 02 Jan 2026 02:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49805
IP address blocks:        185.118.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:d5:74:a3:f3:a1:d3:b8:c8:0a:43:13:2a:25:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
        Validity
            Not Before: Jan  2 02:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=442e9ab9eae197cf3feab8afeddc9ba9c8484b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:28:2c:83:47:d7:98:3f:e0:98:1d:06:a6:
                    1b:e7:b6:97:48:f0:58:8d:b9:81:48:4c:a3:f9:b3:
                    6a:45:c8:01:07:24:49:3c:e2:bb:14:69:ce:55:d3:
                    45:48:ca:df:a7:94:c3:1a:2e:ad:0c:ce:2c:8b:42:
                    ed:5a:cd:7d:28:12:e0:6d:f7:e8:85:46:38:92:cc:
                    ed:96:75:15:cc:e0:f1:cd:cf:4f:82:e0:26:45:51:
                    82:70:56:bd:10:a5:73:f0:51:2a:a2:2e:8d:d0:f7:
                    3f:fe:57:65:8f:17:4d:31:32:bd:b1:62:30:79:8c:
                    58:19:03:75:2a:29:76:78:6a:d3:09:cd:60:91:39:
                    40:06:34:6f:c6:ff:f8:cf:60:b2:80:6e:e4:1d:5f:
                    54:52:6b:f7:82:e6:71:1a:28:c7:0e:36:67:69:53:
                    38:9c:fe:ca:77:9d:5b:6c:c8:23:f1:d9:de:b1:d3:
                    bd:64:22:3a:22:ab:bd:0c:af:c2:84:f7:95:34:ea:
                    f9:8d:30:47:d1:b2:e7:69:d9:45:5f:40:be:c9:e8:
                    e8:e5:56:b7:ae:14:a3:30:b1:e4:05:4e:ec:c4:a7:
                    8d:a8:4a:96:cb:b5:18:7e:35:53:c9:31:38:b2:e1:
                    25:9d:fa:6c:8a:68:99:a3:3e:05:60:e2:a0:e9:6b:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2E:9A:B9:EA:E1:97:CF:3F:EA:B8:AF:ED:DC:9B:A9:C8:48:4B:95
            X509v3 Authority Key Identifier:
                keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/RC6auerhl88_6riv7dybqchIS5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.118.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:5b:40:20:3d:ca:1c:04:77:92:f7:9d:1a:7b:bd:fb:2f:9d:
         f9:b2:68:51:0c:8b:09:b2:f4:08:ca:49:43:73:16:55:ec:c5:
         d8:e3:60:1f:13:57:b3:fe:1a:13:8b:2e:8e:83:fe:b9:ba:49:
         1a:ee:ae:80:e6:7a:31:c7:62:f4:dd:44:29:e5:9f:1d:00:1e:
         7d:19:c0:b7:8f:12:b9:43:37:1b:9a:df:87:0e:19:e2:34:72:
         99:44:da:02:a3:bf:dc:8b:27:55:07:cb:53:c4:4c:9e:2a:0d:
         2d:1d:78:17:e3:c6:ef:4e:60:a3:80:91:16:4c:74:58:c5:66:
         14:cc:46:00:7f:01:45:6b:e9:de:e6:d4:1b:ea:a6:f0:8c:3c:
         c2:2c:ce:81:29:df:d8:f3:0d:c1:1a:ed:47:56:0f:0d:d2:8b:
         4e:f9:61:37:29:23:e0:50:44:4c:d2:d4:13:3b:2e:0f:c3:6a:
         41:5e:b1:3d:07:78:79:4f:94:a6:60:b7:02:cd:9b:c3:d5:7f:
         01:b0:98:1d:c1:a4:b1:6a:72:ba:f0:81:9e:71:24:af:ef:40:
         84:f9:a8:fc:05:30:a4:77:e6:70:7f:0a:2a:f9:46:3a:95:f5:
         79:8d:96:53:9d:20:07:4c:fa:78:8e:90:31:d2:ac:12:a7:2a:
         f5:cc:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:29 2026 by rpki-client