This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/6HtClbDs0yHwDOHcYx_az373ZBc.roa
File:                     6HtClbDs0yHwDOHcYx_az373ZBc.roa (raw, json)
Hash identifier:          v7GeriidONvp7KGIWH57fB+RB6T8vvsb68fAxQuODao=
Subject key identifier:   E8:7B:42:95:B0:EC:D3:21:F0:0C:E1:DC:63:1F:DA:CF:7E:F7:64:17
Certificate issuer:       /CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Certificate serial:       019B77596B1659A0DEC8AE5640BBD15C8FD4
Authority key identifier: C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/6HtClbDs0yHwDOHcYx_az373ZBc.roa
Signing time:             Thu 01 Jan 2026 02:18:27 +0000
ROA not before:           Thu 01 Jan 2026 02:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29014
IP address blocks:        194.59.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:6b:16:59:a0:de:c8:ae:56:40:bb:d1:5c:8f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
        Validity
            Not Before: Jan  1 02:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e87b4295b0ecd321f00ce1dc631fdacf7ef76417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:b7:74:05:d0:55:b2:29:a5:dc:f0:cc:0b:
                    2f:40:97:0a:37:48:70:1a:c1:26:ae:f3:f5:1d:7a:
                    c3:b8:08:f7:f2:04:5c:46:47:57:86:7e:f4:42:af:
                    32:c0:4e:60:ae:b1:fb:63:7d:8b:4a:c7:59:d5:cf:
                    45:42:aa:9b:0b:7d:75:ab:9f:d1:be:b5:7d:07:6a:
                    03:7e:41:e5:d9:70:08:87:13:22:d2:b4:91:a9:5a:
                    f8:d5:3a:57:c7:2a:88:6f:94:33:c9:a8:d8:25:b3:
                    8f:9b:86:a6:84:a5:59:97:f7:ff:9d:48:fa:6b:b1:
                    6c:e1:4d:d4:e4:88:1d:ed:0e:d3:ee:47:3c:94:82:
                    8e:b6:d7:2e:d8:c8:b7:ff:94:0f:1f:68:b1:2d:88:
                    06:95:b6:ac:4c:d2:78:4c:66:8f:5e:3c:6b:31:08:
                    f3:70:ef:7e:5e:19:3c:b1:54:44:74:d5:23:e7:36:
                    bd:91:d0:a2:50:97:dc:b6:54:3f:1a:8a:c0:e1:38:
                    9c:cb:3d:7e:e5:14:45:47:c0:37:78:07:4f:1a:74:
                    86:30:6e:42:48:b8:80:48:2a:f2:d0:2e:93:b0:9c:
                    c3:3f:aa:a7:4b:6f:d4:3c:7b:0c:77:93:40:29:4a:
                    bc:75:6b:22:71:84:b9:14:3a:65:8d:96:f7:e6:88:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7B:42:95:B0:EC:D3:21:F0:0C:E1:DC:63:1F:DA:CF:7E:F7:64:17
            X509v3 Authority Key Identifier:
                keyid:C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/6HtClbDs0yHwDOHcYx_az373ZBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:53:7f:96:8e:b0:ad:bc:b9:2a:77:d7:20:eb:97:fc:5e:52:
         07:d7:24:0b:76:8b:e2:bf:ed:f2:20:a2:62:d1:2e:18:e7:fe:
         48:4f:c8:36:38:fb:41:ef:59:8a:fe:89:b0:53:ac:e9:2a:b9:
         b5:b9:67:77:33:8b:ed:7b:e4:9f:ad:df:b9:e1:49:5d:7a:b2:
         58:e5:d5:bb:4f:54:e1:0e:ca:16:bf:8c:95:4b:4f:0b:46:41:
         2d:68:c3:b8:df:bc:8c:18:f2:c3:d5:06:81:2c:f2:cc:c3:c7:
         f0:ba:47:23:d7:a4:d6:b7:48:fd:5f:27:d4:db:67:b2:72:e2:
         38:75:72:67:dd:5c:d6:eb:84:71:39:1c:af:b7:9e:f0:2f:2d:
         61:7d:61:64:ee:ac:6f:27:93:94:5b:ba:f6:dc:3d:a4:63:83:
         eb:b1:c5:c4:17:c2:85:56:be:8c:af:fa:18:43:9a:4c:b1:4c:
         9d:55:13:aa:79:5e:f2:60:fe:40:22:3c:6e:10:c0:2d:b7:fe:
         f2:34:a4:f9:5a:c4:7b:f6:87:9b:4f:7f:cf:59:ce:94:63:4f:
         02:f4:e7:29:31:98:da:ca:ab:6d:e3:20:59:48:1a:48:aa:5d:
         ce:55:1f:2b:27:80:1a:72:9e:9c:dc:61:d0:b1:87:da:0c:76:
         64:eb:a0:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WWsWWaDeyK5WQLvRXI/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODA3MDgxZDZmYzIyYmRmZjgwZDJiZDdlY2E4ZmVjMGZj
NWZlZjYwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODdiNDI5NWIwZWNkMzIxZjAwY2UxZGM2MzFmZGFjZjdlZjc2NDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCu3dAXQVbIppdzwzAsvQJcKN0hw
GsEmrvP1HXrDuAj38gRcRkdXhn70Qq8ywE5grrH7Y32LSsdZ1c9FQqqbC311q5/R
vrV9B2oDfkHl2XAIhxMi0rSRqVr41TpXxyqIb5QzyajYJbOPm4amhKVZl/f/nUj6
a7Fs4U3U5Igd7Q7T7kc8lIKOttcu2Mi3/5QPH2ixLYgGlbasTNJ4TGaPXjxrMQjz
cO9+Xhk8sVREdNUj5za9kdCiUJfctlQ/GorA4Ticyz1+5RRFR8A3eAdPGnSGMG5C
SLiASCry0C6TsJzDP6qnS2/UPHsMd5NAKUq8dWsicYS5FDpljZb35ojPOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOh7QpWw7NMh8Azh3GMf2s9+92QXMB8GA1UdIwQY
MBaAFMKAcIHW/CK9/4DSvX7Kj+wPxf72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29Cd2dkYjhJcjNfZ05LOWZzcVA3QV9GX3ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80MTRiNDYtZGI1ZS00NDQwLWExZTQt
M2M1NGQxMWY4NzJjLzEvNkh0Q2xiRHMweUh3RE9IY1l4X2F6MzczWkJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80MTRiNDYtZGI1ZS00NDQwLWExZTQtM2M1NGQxMWY4NzJj
LzEvd29Cd2dkYjhJcjNfZ05LOWZzcVA3QV9GX3ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjsKMA0G
CSqGSIb3DQEBCwUAA4IBAQBeU3+WjrCtvLkqd9cg65f8XlIH1yQLdoviv+3yIKJi
0S4Y5/5IT8g2OPtB71mK/omwU6zpKrm1uWd3M4vte+Sfrd+54UlderJY5dW7T1Th
DsoWv4yVS08LRkEtaMO437yMGPLD1QaBLPLMw8fwukcj16TWt0j9XyfU22eycuI4
dXJn3VzW64RxORyvt57wLy1hfWFk7qxvJ5OUW7r23D2kY4PrscXEF8KFVr6Mr/oY
Q5pMsUydVROqeV7yYP5AIjxuEMAtt/7yNKT5WsR79oebT3/PWc6UY08C9OcpMZja
yqtt4yBZSBpIql3OVR8rJ4Aacp6c3GHQsYfaDHZk66A2
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:32 2026 by rpki-client