This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/6WW-5nEcLXyYysohxbswx53KUC4.roa
File:                     6WW-5nEcLXyYysohxbswx53KUC4.roa (raw, json)
Hash identifier:          YGye3VGtaY9dIe257yt+Ywof1sTn+vKBOCXTqKl9UZo=
Subject key identifier:   E9:65:BE:E6:71:1C:2D:7C:98:CA:CA:21:C5:BB:30:C7:9D:CA:50:2E
Certificate issuer:       /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial:       019B78A2FEDB1DCD460B855BB4510ACC06DF
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/6WW-5nEcLXyYysohxbswx53KUC4.roa
Signing time:             Thu 01 Jan 2026 08:18:26 +0000
ROA not before:           Thu 01 Jan 2026 08:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48803
IP address blocks:        31.24.72.0/21 maxlen: 21
                          94.103.192.0/20 maxlen: 21
                          185.27.164.0/22 maxlen: 22
                          2a01:8e00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:fe:db:1d:cd:46:0b:85:5b:b4:51:0a:cc:06:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
        Validity
            Not Before: Jan  1 08:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e965bee6711c2d7c98caca21c5bb30c79dca502e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:8d:3a:90:1c:af:e7:c2:7f:e7:27:54:b1:
                    d4:44:bd:05:f6:20:b0:b6:dd:98:ff:14:62:40:49:
                    b0:70:c1:29:7c:7b:cb:af:d2:75:35:6f:ae:30:af:
                    83:29:1b:a4:e3:a4:6b:f5:b9:a5:22:12:53:b8:b1:
                    63:96:c0:89:e0:81:76:ee:71:52:9c:22:5c:5d:ed:
                    04:93:a4:e7:b2:b9:0d:55:6f:ea:13:bc:52:29:6d:
                    22:16:c0:d5:ce:37:6b:94:c3:c0:03:33:0a:e5:8c:
                    97:f6:fd:ad:f5:da:83:2f:cd:91:13:7a:d2:b4:96:
                    aa:b5:78:5a:f6:33:9a:a4:2f:1a:dc:3e:cd:99:04:
                    d3:f6:68:91:43:03:48:7c:81:bb:9b:ed:12:25:6c:
                    1e:f7:cc:42:ca:54:e1:05:3b:d7:f2:6e:07:f8:80:
                    da:26:b0:e7:92:30:ee:22:1c:9f:1f:fa:c4:5e:7e:
                    56:c8:41:49:27:e3:83:b9:02:fa:bc:64:3d:a7:ed:
                    44:67:33:55:a3:ec:73:06:f3:01:15:e5:f0:ea:59:
                    43:da:b5:08:f2:db:69:24:95:3c:c3:11:1a:00:ff:
                    99:a5:8a:08:0f:ee:4b:bd:67:70:ab:91:a9:2e:cc:
                    50:d1:1c:73:b7:b3:6e:7f:2d:cf:f0:61:f0:3b:f3:
                    41:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:65:BE:E6:71:1C:2D:7C:98:CA:CA:21:C5:BB:30:C7:9D:CA:50:2E
            X509v3 Authority Key Identifier:
                keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/6WW-5nEcLXyYysohxbswx53KUC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.72.0/21
                  94.103.192.0/20
                  185.27.164.0/22
                IPv6:
                  2a01:8e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         06:12:f6:5d:84:51:38:fb:75:f1:48:9f:c0:19:4f:0b:47:7a:
         ed:14:c8:4e:22:d6:68:e6:c5:21:d9:83:87:fa:e1:7e:dd:32:
         9d:ad:27:de:46:e2:21:ef:1e:9c:d3:e0:97:c7:72:0d:ab:96:
         88:90:4e:44:7c:de:9c:15:bb:24:7d:91:da:e5:08:eb:7a:6b:
         af:0e:07:2c:ca:2b:a9:53:d0:95:ef:71:71:8c:3f:21:ec:c6:
         85:43:8b:71:2a:1d:a3:08:b8:38:5f:88:ba:2c:4c:15:1e:f8:
         39:61:76:92:87:b0:8a:6e:95:fb:d2:43:1e:f4:bc:28:02:c7:
         e3:aa:74:ef:54:95:9e:ba:91:d9:3c:3a:ea:ad:41:e2:15:2e:
         c4:e9:01:eb:48:0d:bd:46:d5:86:71:29:36:c6:cb:5e:c2:06:
         7f:1b:7e:ab:37:db:57:f0:a3:75:89:f3:4c:22:5d:99:70:4d:
         02:2e:e8:a1:59:f3:5b:22:30:e6:02:d2:0d:0a:11:de:fa:75:
         c7:94:90:73:4c:52:fa:d0:6c:d0:67:72:89:d7:8a:95:8c:cd:
         92:b2:dd:47:ef:7b:c4:e6:5f:a5:6e:e0:e2:9c:a9:2b:94:a7:
         94:4b:93:6a:10:f0:f0:39:1a:b6:c5:9a:76:c7:65:dd:4d:42:
         ab:bf:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:41:19 2026 by rpki-client