This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/j2N6XHOuJrcF9YKszFUeO9utvU8.roa
File:                     j2N6XHOuJrcF9YKszFUeO9utvU8.roa (raw, json)
Hash identifier:          CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=
Subject key identifier:   8F:63:7A:5C:73:AE:26:B7:05:F5:82:AC:CC:55:1E:3B:DB:AD:BD:4F
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       019B76EB2BBBEF1A3621017A385C89B22832
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/j2N6XHOuJrcF9YKszFUeO9utvU8.roa
Signing time:             Thu 01 Jan 2026 00:18:02 +0000
ROA not before:           Thu 01 Jan 2026 00:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212896
IP address blocks:        185.255.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:2b:bb:ef:1a:36:21:01:7a:38:5c:89:b2:28:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Jan  1 00:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f637a5c73ae26b705f582accc551e3bdbadbd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:07:37:79:c6:82:ac:ac:cf:0b:ee:d2:61:
                    a8:de:81:a9:39:e9:a8:de:a2:68:b1:9f:ac:11:98:
                    0e:12:32:1b:e2:52:7d:b1:ba:ed:cd:49:4f:10:b7:
                    b7:07:f1:51:5e:cd:85:3d:00:df:06:bb:38:57:4b:
                    7a:95:1f:d6:10:3c:f4:c2:42:be:db:6e:8e:b3:c0:
                    cf:5d:0d:f3:6d:50:6b:03:dd:c5:fb:de:40:e1:d9:
                    ab:43:24:c4:04:02:83:cc:05:28:12:4e:62:54:b6:
                    44:e9:50:8d:3c:7e:2b:f9:8f:e8:4a:90:7f:50:48:
                    c0:b0:3f:db:51:18:9d:27:3f:84:b2:11:3d:5e:d4:
                    09:8b:c0:52:e2:2a:51:fa:d9:b6:b5:1a:59:04:04:
                    09:98:e2:34:48:6e:79:ba:03:6a:de:a7:c8:af:94:
                    0f:d4:60:b2:3d:c1:aa:c7:89:8f:ea:5a:97:18:4a:
                    f4:53:98:a2:9c:74:95:22:d7:93:fc:d7:4d:05:c7:
                    a5:f8:59:4b:91:8e:9e:a9:92:ef:a2:70:5e:6c:7a:
                    62:11:77:bd:af:1e:c1:0a:f7:ca:47:11:7d:3d:b6:
                    18:65:3e:b8:dc:3a:d5:ce:5d:ac:ed:96:97:bb:0e:
                    ad:55:4b:94:a5:9e:a8:42:aa:3f:50:14:19:74:04:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:63:7A:5C:73:AE:26:B7:05:F5:82:AC:CC:55:1E:3B:DB:AD:BD:4F
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/j2N6XHOuJrcF9YKszFUeO9utvU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:25:b8:2c:e6:a7:eb:a1:a9:5a:74:8c:f5:09:e6:92:88:41:
         72:87:a0:71:5b:1f:44:54:db:b1:55:fb:2d:ee:90:2d:43:db:
         62:b9:31:be:f5:f6:59:81:c8:15:a3:8e:ac:67:e5:9c:27:40:
         94:4d:10:74:45:87:8f:24:a0:b2:02:ba:cb:53:7b:5d:13:83:
         f0:5e:1f:88:1c:b4:83:2c:32:65:2c:9f:6e:ad:4f:2a:00:39:
         3d:a7:87:b7:e4:74:8d:37:d2:68:4f:43:cd:c6:6a:3c:b2:02:
         58:21:a3:d7:12:ff:dd:da:f9:48:f5:ce:58:f8:80:0c:6a:1b:
         83:f7:e1:25:94:66:75:4c:ce:35:0f:a3:34:04:ca:06:dd:b9:
         f8:72:08:38:a7:73:55:96:8c:b9:89:bb:b4:14:de:4f:a9:9c:
         74:9c:68:c3:84:e3:9a:f6:a6:31:63:b5:cf:0c:1e:b2:45:b9:
         05:1b:85:4b:d4:8d:5e:c5:58:51:7a:39:b5:56:f8:b9:ee:95:
         81:4f:1f:89:5e:a2:36:4c:e5:87:8c:84:66:bd:0c:3f:b3:3c:
         61:7c:e0:28:e9:28:69:b9:d0:04:40:e0:74:fb:4a:45:96:75:
         8d:f0:17:0c:49:1a:f7:3f:b9:96:fb:eb:94:d1:3d:d2:77:23:
         05:90:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:59 2026 by rpki-client