This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/6MlxoV-asBHiGksnX5lFDncVeWA.roa
File:                     6MlxoV-asBHiGksnX5lFDncVeWA.roa (raw, json)
Hash identifier:          qK+f09eYC4V3D6iCsXNB5SC9DsNYYR44YaLV6kpwvqk=
Subject key identifier:   E8:C9:71:A1:5F:9A:B0:11:E2:1A:4B:27:5F:99:45:0E:77:15:79:60
Certificate issuer:       /CN=ac5d4cea41585a0a368401699280ac1b6bb73223
Certificate serial:       019AC54BD6F60F8060FE2E97372154BC76BF
Authority key identifier: AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/6MlxoV-asBHiGksnX5lFDncVeWA.roa
Signing time:             Thu 27 Nov 2025 12:31:12 +0000
ROA not before:           Thu 27 Nov 2025 12:31:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31634
IP address blocks:        83.166.8.0/21 maxlen: 21
                          83.166.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c5:4b:d6:f6:0f:80:60:fe:2e:97:37:21:54:bc:76:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5d4cea41585a0a368401699280ac1b6bb73223
        Validity
            Not Before: Nov 27 12:31:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e8c971a15f9ab011e21a4b275f99450e77157960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:b2:b0:37:06:8c:e2:06:8a:49:2d:e4:54:
                    5f:da:fe:88:4e:52:b3:03:b1:21:80:3f:61:8b:b4:
                    63:46:6f:13:1b:ea:87:e4:e4:93:7c:90:9a:b8:5d:
                    42:41:35:f1:8f:0a:55:c3:e5:b3:3f:16:d6:3c:4a:
                    8a:13:2a:ef:a0:66:98:d9:bb:6b:c8:58:bb:04:28:
                    6f:13:6f:53:aa:dc:bd:02:09:10:4a:42:11:43:b1:
                    91:cc:7c:53:ca:c8:80:15:b9:85:dc:be:19:b4:d2:
                    aa:c7:ba:25:bf:01:32:b7:3c:51:31:81:b1:1c:72:
                    65:34:1e:51:3a:13:ba:4a:b6:2a:bd:7a:61:e0:92:
                    b1:45:6d:5e:22:c5:60:54:4d:63:c7:a8:8a:b2:a2:
                    c9:14:ac:0f:f1:78:ee:3d:77:22:46:18:fb:a4:45:
                    8e:76:81:57:71:fa:17:d0:23:37:a0:28:72:f7:81:
                    6a:41:f1:f4:d4:82:5b:84:5e:b8:3c:88:ef:fa:96:
                    74:f6:38:c1:46:ad:cb:0a:d9:6e:4a:7b:ee:e6:5f:
                    df:40:3a:38:14:88:4f:f7:73:87:18:27:a1:e5:62:
                    a4:f1:77:0e:4d:80:03:4b:8b:13:9d:35:4e:a2:01:
                    9a:ee:82:ae:46:4b:a5:e4:fc:92:02:60:62:6f:1d:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C9:71:A1:5F:9A:B0:11:E2:1A:4B:27:5F:99:45:0E:77:15:79:60
            X509v3 Authority Key Identifier:
                keyid:AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/6MlxoV-asBHiGksnX5lFDncVeWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.166.8.0-83.166.23.255

    Signature Algorithm: sha256WithRSAEncryption
         59:46:07:2f:6a:6f:fe:0a:09:30:96:d1:9a:36:da:f8:f2:7f:
         80:9d:a3:73:95:50:0f:9a:b5:ae:51:56:d5:c4:6a:1f:87:7f:
         dc:4b:e3:66:73:70:5b:44:f0:4d:00:4e:ee:e0:6b:a4:f5:3e:
         7b:a8:a7:b5:79:bb:4f:fd:52:a8:d1:45:c7:4e:97:02:2d:bb:
         63:d7:d7:91:56:64:65:5f:8b:e0:24:fa:f3:a6:8c:ad:46:3e:
         75:33:2d:52:c2:4e:ae:6b:d6:d0:1e:ac:99:eb:bb:8c:22:3f:
         e2:76:2e:4e:cc:d5:36:57:b7:58:ea:c5:d8:34:69:e6:d3:d0:
         e8:d7:1a:ad:73:6e:24:ad:f5:b0:d3:4d:22:c3:f2:9f:d8:26:
         d9:04:34:a9:3f:31:31:bf:33:bd:d2:41:07:a6:61:dd:a0:7d:
         cc:65:9f:8e:a6:09:d4:46:e8:5b:88:e2:d7:73:59:f2:45:5c:
         a3:7f:55:d7:8a:92:9e:7d:9e:18:6e:ee:83:1e:f6:89:dd:dc:
         08:60:28:4c:92:e1:bc:a7:6c:9c:0e:43:37:e5:b8:c9:2f:2a:
         51:a0:2c:27:bf:1e:53:5e:71:cb:6b:1c:2e:8c:39:0f:7f:c3:
         e9:63:24:1a:ee:18:c2:a1:6b:07:9a:83:bf:3d:39:10:28:cd:
         75:cc:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:23 2025 by rpki-client