This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/6JbNABeVsOKFNCbnqqLsOAO6iMI.roa
File:                     6JbNABeVsOKFNCbnqqLsOAO6iMI.roa (raw, json)
Hash identifier:          VdcNh4sy41V5jivfWDOrD3oeEaJzk9/cuPwCt/IQMgw=
Subject key identifier:   E8:96:CD:00:17:95:B0:E2:85:34:26:E7:AA:A2:EC:38:03:BA:88:C2
Certificate issuer:       /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial:       019B76EB23F63768594323A80472DE355E63
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/6JbNABeVsOKFNCbnqqLsOAO6iMI.roa
Signing time:             Thu 01 Jan 2026 00:18:00 +0000
ROA not before:           Thu 01 Jan 2026 00:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149522
IP address blocks:        192.94.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:23:f6:37:68:59:43:23:a8:04:72:de:35:5e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
        Validity
            Not Before: Jan  1 00:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e896cd001795b0e2853426e7aaa2ec3803ba88c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:be:a7:c8:d2:ba:83:07:29:ae:74:9b:9b:
                    e0:77:19:39:8b:b7:33:94:de:39:f4:c8:96:48:13:
                    d3:f1:42:91:27:51:70:ad:c4:df:b0:9f:ba:37:bc:
                    bf:f8:d5:f8:db:de:ed:87:43:38:1c:2f:4c:0d:2c:
                    70:87:08:b0:62:55:7b:c6:11:1a:42:89:5c:c3:40:
                    8f:81:5a:97:07:01:35:78:dd:50:11:23:97:0f:0c:
                    5a:a1:70:1c:98:37:a6:dc:c1:93:8e:e4:7d:97:d1:
                    de:5f:fb:8b:1d:9c:f2:b4:d8:9a:64:df:56:e3:74:
                    06:11:a8:39:61:dd:12:80:0b:e6:e1:11:15:c8:ff:
                    1e:ce:d9:a1:3b:30:19:b4:76:d9:38:6e:9c:a9:f2:
                    f3:af:0e:2b:0f:84:72:b7:71:c1:34:c1:38:6f:c5:
                    4b:c5:d6:63:74:15:15:da:2f:70:7b:b0:ee:47:fb:
                    1d:bc:44:a7:35:d8:0e:99:30:e1:1d:09:86:fc:34:
                    d4:3f:69:eb:d9:4e:e1:8f:b6:4a:41:e2:8c:cd:30:
                    e6:6e:11:14:9d:1c:7f:39:28:f7:2d:29:ea:98:06:
                    53:8e:6b:a3:6b:9b:97:c1:fe:ba:2f:4d:00:50:db:
                    2f:1b:2e:f6:96:9e:15:8b:7b:81:35:18:c9:50:2e:
                    f4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:96:CD:00:17:95:B0:E2:85:34:26:E7:AA:A2:EC:38:03:BA:88:C2
            X509v3 Authority Key Identifier:
                keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/6JbNABeVsOKFNCbnqqLsOAO6iMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:28:0a:1d:3c:c9:06:28:e4:bb:9a:1d:93:bb:61:86:a1:3a:
         e0:e5:18:76:7e:b5:ad:3e:14:6e:7d:5f:ff:5d:a8:4a:f6:17:
         c7:f8:9c:97:e0:c8:15:c2:40:e5:d4:54:b2:1f:15:3b:93:59:
         90:10:45:50:de:d4:5a:15:59:11:f3:63:e7:68:b1:99:e7:6f:
         16:4a:f3:69:49:8c:e4:c0:b4:e8:db:42:b3:dc:f8:ed:77:81:
         ed:d6:8e:c5:60:ef:09:a3:13:5b:ac:c4:f4:01:df:d3:9b:d6:
         4c:50:19:b9:92:21:9d:a1:e3:58:65:c0:3b:35:8a:eb:72:9d:
         62:6d:8c:bd:f1:4a:91:5d:59:a5:77:05:62:55:65:e8:0a:31:
         5d:ce:1b:e3:84:51:1f:d7:d8:03:28:98:0d:c6:37:ba:29:6d:
         1a:bd:a1:22:b8:3f:1c:d4:14:f3:a5:27:75:17:fc:69:52:00:
         43:ca:55:83:0d:19:d7:f9:db:60:63:ef:5c:91:ba:b6:f6:29:
         49:58:ef:bc:99:6c:88:16:5e:66:34:68:fa:bf:f0:b3:6d:c7:
         7a:47:dc:8e:c1:15:66:da:28:6f:19:92:dc:49:87:e3:a3:22:
         d2:30:e5:e5:e8:98:bc:4f:a2:09:f5:0d:aa:82:36:47:de:d0:
         af:e6:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:12:47 2026 by rpki-client