This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa
File:                     b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (raw, json)
Hash identifier:          HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=
Subject key identifier:   6F:A4:AB:1E:DE:51:A3:1E:C6:CF:49:85:22:50:A0:38:6C:58:D3:E7
Certificate issuer:       /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial:       019B79ECA2868A75600E5C4071F1B43E6979
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa
Signing time:             Thu 01 Jan 2026 14:18:29 +0000
ROA not before:           Thu 01 Jan 2026 14:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57712
IP address blocks:        176.106.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:a2:86:8a:75:60:0e:5c:40:71:f1:b4:3e:69:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
        Validity
            Not Before: Jan  1 14:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6fa4ab1ede51a31ec6cf49852250a0386c58d3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:9a:84:01:f7:54:91:98:4f:ed:c8:4a:46:
                    28:14:31:22:6b:32:76:a5:5f:05:b2:a5:b0:f2:9e:
                    42:c4:0b:7b:1c:c2:0b:21:4c:72:a9:1a:bb:7e:ec:
                    a6:91:1e:0a:f5:b9:57:31:99:8e:a8:2d:75:f3:6c:
                    a5:76:d7:b7:fa:d6:5d:a0:ae:43:c1:c7:12:94:56:
                    b7:b5:59:4a:e0:40:d6:e7:cf:0c:a2:53:eb:2b:44:
                    93:65:64:73:0c:e7:c5:bd:36:07:b8:99:62:8f:ba:
                    02:2f:03:f9:21:10:01:43:7d:48:bf:f1:e3:6d:a7:
                    94:ea:25:ff:77:cf:7d:c5:65:37:3e:04:1a:db:40:
                    3f:d8:ba:24:12:3c:45:5d:a5:6c:43:af:05:78:e8:
                    9f:4b:48:23:ec:30:25:13:8c:31:00:d1:f5:9f:52:
                    c5:50:71:5f:e0:84:3a:99:d8:92:01:dc:e7:12:5d:
                    81:51:67:5a:4f:1b:fa:0b:16:f7:9c:b4:d0:ef:0b:
                    87:72:96:99:81:6e:95:24:39:1c:e0:b3:90:24:d7:
                    99:d9:db:37:db:bd:6b:71:a3:54:8b:b3:42:03:95:
                    b5:b6:be:12:0a:49:54:4a:49:4d:04:4d:e4:6b:56:
                    0b:5c:35:af:52:ee:df:9d:fa:da:72:3b:c6:16:ca:
                    7e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:AB:1E:DE:51:A3:1E:C6:CF:49:85:22:50:A0:38:6C:58:D3:E7
            X509v3 Authority Key Identifier:
                keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.106.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:83:15:a0:4b:5a:7b:e5:6b:e5:76:6f:b3:a1:5c:ba:e6:
         df:2c:c2:35:a8:94:63:6b:0d:a2:16:99:56:39:fb:69:6e:88:
         e8:4b:64:93:10:a7:16:60:e5:72:97:b1:43:99:3e:06:3f:b6:
         cb:ec:bb:86:55:e3:42:e2:30:83:45:d8:68:9d:3d:bb:2c:b2:
         6a:23:5b:18:ce:3c:ae:cf:ef:90:7e:1b:52:fb:09:39:58:6d:
         03:3a:16:dc:cd:ac:ae:08:10:b9:60:96:87:67:4f:64:80:f7:
         ca:00:75:8f:e2:0c:88:15:56:b4:2d:99:b4:12:d6:ef:77:92:
         b6:d4:75:0f:ca:75:02:a8:f3:66:9a:04:3a:b3:95:a9:0f:df:
         7a:fb:13:68:bf:68:6d:21:03:7a:db:d1:f2:09:c1:82:e6:2e:
         1f:ce:d3:59:f1:24:bf:c5:e7:d0:e4:1a:9b:89:88:19:2d:de:
         5b:08:7d:05:aa:3d:2b:fd:d8:82:b1:3a:a1:77:07:4d:62:6d:
         11:72:b0:9a:3e:e4:fc:8f:6d:f6:81:2c:79:37:20:78:4f:97:
         b0:19:f2:67:32:e3:65:9d:e9:ce:b6:82:05:0b:17:6b:4d:ba:
         a9:99:93:44:7a:b9:3a:ce:17:21:64:11:57:02:58:11:a8:ff:
         a2:4f:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:22 2026 by rpki-client