This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6BBNtRHTWC2Y_hucbJkx-oz7aZ4.roa
File:                     6BBNtRHTWC2Y_hucbJkx-oz7aZ4.roa (raw, json)
Hash identifier:          nhprerIWJiNMITVQq7gPUpC7hGJuIUYcLkQkSTJvRog=
Subject key identifier:   E8:10:4D:B5:11:D3:58:2D:98:FE:1B:9C:6C:99:31:FA:8C:FB:69:9E
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       019B7758E9F7C0E01C43911D45D53BF47359
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6BBNtRHTWC2Y_hucbJkx-oz7aZ4.roa
Signing time:             Thu 01 Jan 2026 02:17:54 +0000
ROA not before:           Thu 01 Jan 2026 02:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208814
IP address blocks:        2a0f:5707:aa10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:e9:f7:c0:e0:1c:43:91:1d:45:d5:3b:f4:73:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  1 02:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8104db511d3582d98fe1b9c6c9931fa8cfb699e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:4c:80:2b:22:f9:2e:22:7f:a4:64:c7:f6:
                    8e:52:2a:05:60:31:2a:97:cb:05:8a:38:3f:b4:44:
                    f3:b6:5b:cb:b3:a9:ab:19:54:9a:e6:68:4f:9c:fb:
                    25:19:f0:78:91:4d:09:92:2f:57:aa:dc:f0:0e:c1:
                    1b:e2:ac:a0:1d:0c:03:f1:e0:18:43:72:50:34:95:
                    40:00:51:a2:21:3a:e4:6c:4d:4b:ca:b1:da:23:44:
                    e0:3c:c6:ef:32:49:63:7a:94:4f:f8:a2:6b:27:b3:
                    dc:7d:74:09:a6:d4:97:be:b6:68:1d:ef:f0:0d:06:
                    58:65:c0:8f:63:39:e5:27:ca:60:3f:ed:68:d4:ac:
                    e4:19:50:fa:16:7c:1c:52:43:5d:03:39:17:24:45:
                    e7:e8:68:82:9e:16:0a:f1:e4:74:33:50:55:00:87:
                    97:2a:fe:d1:b5:21:2b:6e:a6:55:86:1c:a5:b9:78:
                    a8:8e:51:8b:79:f7:6e:de:90:66:96:1a:27:19:5d:
                    6d:0d:a4:85:12:96:5e:d3:51:ee:f5:bc:fa:bc:b3:
                    70:e5:37:02:86:5e:86:82:01:78:1c:ac:c9:a4:bd:
                    d1:3f:4a:04:dc:ea:cd:17:af:dc:94:5e:f7:7d:0b:
                    a8:cd:7c:34:fb:ce:9b:c4:26:f0:fd:d6:da:5e:47:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:10:4D:B5:11:D3:58:2D:98:FE:1B:9C:6C:99:31:FA:8C:FB:69:9E
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6BBNtRHTWC2Y_hucbJkx-oz7aZ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:aa10::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:41:b9:36:1d:b4:10:9c:8e:8e:df:a4:3f:5c:4c:0d:24:00:
         a4:6e:ab:af:81:aa:42:04:c7:6a:43:02:ca:22:c4:26:1c:9e:
         99:fb:c6:02:6f:74:07:f3:cb:41:3e:e9:48:d5:6b:a7:a2:df:
         57:7c:d4:b1:69:c6:cf:da:2d:70:1f:5e:cb:15:a8:ca:d6:e5:
         ac:69:bc:87:de:7f:9f:7a:72:f3:f6:99:14:21:19:6e:1c:bc:
         58:36:a4:e8:a3:ad:df:98:3d:c2:2c:d2:95:97:98:a9:db:5a:
         6f:1d:4e:88:72:ad:d8:10:84:0e:b4:81:42:90:90:e1:48:1f:
         d7:51:db:5a:02:a6:92:20:79:60:d9:ce:c1:7a:2f:f5:4c:8a:
         a1:46:24:86:7c:6e:eb:2b:b6:3d:e5:7d:3d:a7:a0:00:76:fe:
         c7:8c:7c:31:00:fb:59:9c:9b:1c:18:df:56:dc:39:58:a8:ee:
         07:32:be:da:9e:0d:89:2f:38:cc:9a:4f:38:a9:02:f6:28:78:
         8e:04:ea:4e:91:88:89:e1:8e:3a:d6:79:50:16:49:05:3f:91:
         8f:d2:8e:c2:77:65:78:99:a0:2f:79:a8:1f:a9:38:53:d5:e3:
         15:12:8b:74:b9:4f:67:1e:29:c5:7c:83:27:aa:d8:c9:db:f8:
         d4:bb:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:40:37 2026 by rpki-client