This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/1-w6BP38irc8ikwIFmua621R4fsA.roa
File:                     1-w6BP38irc8ikwIFmua621R4fsA.roa (raw, json)
Hash identifier:          04Xau+nR8LEsBKrsIDus90F9cPwGPKiZEygv3ls7WwU=
Subject key identifier:   FB:0E:81:3F:7F:22:AD:CF:22:93:02:05:9A:E6:BA:DB:54:78:7E:C0
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       019B7C7FD1767E82239A1F2AFAE4FD4F0C68
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/1-w6BP38irc8ikwIFmua621R4fsA.roa
Signing time:             Fri 02 Jan 2026 02:18:30 +0000
ROA not before:           Fri 02 Jan 2026 02:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210008
IP address blocks:        94.136.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:d1:76:7e:82:23:9a:1f:2a:fa:e4:fd:4f:0c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Jan  2 02:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fb0e813f7f22adcf229302059ae6badb54787ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:d5:61:b4:14:ad:f8:36:ec:5d:43:4d:ed:
                    ff:72:fd:4e:9d:4c:93:50:ac:2d:dc:2d:4d:93:18:
                    fb:63:3a:82:9d:85:89:ae:e7:81:d7:6d:2e:e3:ad:
                    7c:49:4b:27:57:b5:d7:6d:e2:1f:12:ea:94:65:90:
                    91:d1:2e:84:04:b3:27:35:91:e8:c3:f8:37:8a:cb:
                    49:9e:de:80:5c:37:73:d1:bb:c6:9e:58:ba:48:fc:
                    8b:0e:83:0e:7d:05:f8:2f:80:2a:9b:03:27:e4:f7:
                    57:a3:bd:5b:79:ad:aa:64:b2:43:73:ab:df:ca:a8:
                    c9:96:40:f8:0a:2d:ef:49:93:e4:b0:9c:34:dc:fc:
                    8e:fe:83:b9:20:d8:de:05:21:98:f4:ba:64:3c:12:
                    5a:5d:89:5f:5b:50:ff:26:f0:39:d9:27:c3:dd:9e:
                    56:19:c8:28:d5:1b:44:04:97:65:cc:26:18:3f:02:
                    f5:f6:6e:5e:7f:7c:61:0e:a7:6f:c0:e0:cd:8c:bf:
                    1f:85:73:d5:04:73:47:58:7a:e2:38:18:e9:c2:76:
                    96:ac:33:98:7e:46:7a:1d:02:e0:ce:34:75:bf:91:
                    87:34:90:bc:17:0b:e5:45:41:01:42:71:e4:e1:ba:
                    2b:ac:64:47:44:d9:b1:55:40:3b:d4:f6:f9:0d:aa:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0E:81:3F:7F:22:AD:CF:22:93:02:05:9A:E6:BA:DB:54:78:7E:C0
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/1-w6BP38irc8ikwIFmua621R4fsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.136.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:c6:12:69:0e:8d:0d:ec:34:97:93:20:60:60:75:c6:c1:
         18:5e:db:45:52:99:01:a3:90:b5:19:0e:7a:9c:4d:6a:c6:99:
         2e:44:e0:d9:e4:e6:f2:a9:04:a1:9d:29:d7:f7:e7:c8:b4:79:
         ea:0e:17:e6:d6:df:5e:36:a6:cb:2f:a0:14:24:da:45:4e:9b:
         77:a0:17:44:37:21:6f:24:3a:bb:a4:f8:7a:32:4a:cb:e4:a7:
         97:7c:6c:99:6a:a8:59:31:da:7b:2b:9b:cc:c3:02:1d:7e:c3:
         95:c7:35:2c:50:71:59:dc:6c:79:2b:f3:6c:ee:d2:ee:9d:d1:
         69:50:b7:cb:97:77:9a:76:6b:d1:91:d8:08:ae:f8:53:94:4d:
         06:16:ac:00:11:9d:bd:6a:cd:03:a9:05:21:2f:c2:9c:af:14:
         0b:72:2b:7f:b1:b9:94:21:11:9b:df:b2:13:46:6c:bd:3e:19:
         2e:f7:9c:ff:ed:d3:18:d3:16:1d:1b:fe:29:4a:37:95:cc:79:
         f7:f7:2f:9a:4e:9a:ef:cd:52:97:37:56:2c:12:44:48:84:d9:
         fa:42:07:7c:5c:17:5a:0f:5c:cf:8c:43:82:7d:4d:a8:68:cb:
         ae:c8:97:dc:58:ac:e1:c5:d7:76:ab:34:c1:d6:1a:d2:0f:d9:
         ec:6c:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:46:54 2026 by rpki-client