This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/9V6-AqA_4zEech3d9e-zrslLlYg.roa
File:                     9V6-AqA_4zEech3d9e-zrslLlYg.roa (raw, json)
Hash identifier:          2ZWDpKA0ocbpi4aN6axitNn05JRLFs0cLkW8mMIC92U=
Subject key identifier:   F5:5E:BE:02:A0:3F:E3:31:1E:72:1D:DD:F5:EF:B3:AE:C9:4B:95:88
Certificate issuer:       /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial:       019B79ED276B18A9BB1074ABBBC3446C4DF8
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/9V6-AqA_4zEech3d9e-zrslLlYg.roa
Signing time:             Thu 01 Jan 2026 14:19:03 +0000
ROA not before:           Thu 01 Jan 2026 14:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51088
IP address blocks:        185.181.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:27:6b:18:a9:bb:10:74:ab:bb:c3:44:6c:4d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
        Validity
            Not Before: Jan  1 14:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f55ebe02a03fe3311e721dddf5efb3aec94b9588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:a1:98:f4:a9:e4:c6:2b:b0:ba:a9:28:85:
                    65:d6:e8:72:e5:4d:d0:84:ee:53:73:b8:13:6b:0a:
                    9b:46:53:de:d7:a2:ab:d2:14:fc:ae:98:0d:34:9f:
                    af:65:b6:b4:c0:59:23:ae:fe:ed:2b:75:fe:f8:50:
                    44:f7:7f:24:5b:f4:32:18:a7:57:c1:8c:c6:36:b2:
                    fa:7a:dd:e3:46:2e:4b:cb:ce:ac:f6:8d:ad:89:ac:
                    60:8c:f6:41:94:23:5d:3f:95:f3:70:29:72:85:d9:
                    e2:1a:ea:3f:70:16:b2:56:95:87:25:86:81:3f:46:
                    2c:4d:8f:13:10:78:94:69:70:17:81:87:97:c7:09:
                    f1:f0:e4:0a:64:49:11:5e:03:98:59:f6:07:e9:d7:
                    85:bb:69:69:86:3e:66:06:49:61:37:07:5d:95:82:
                    7d:43:91:e1:8f:5d:c8:e8:ba:ef:97:67:6b:17:09:
                    b2:20:17:d5:3a:2e:b1:7d:e0:82:d8:e1:ae:a5:24:
                    ed:9e:59:5b:57:bb:1f:e0:14:96:55:ab:6b:2f:9c:
                    9b:b0:5d:ec:f9:a8:6c:d2:d5:4d:f1:c0:36:fb:5d:
                    8c:8d:27:5d:ba:62:dd:06:bd:32:58:c9:8e:29:a1:
                    ee:07:b4:b7:ab:fb:53:14:44:7e:86:46:82:1c:2d:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5E:BE:02:A0:3F:E3:31:1E:72:1D:DD:F5:EF:B3:AE:C9:4B:95:88
            X509v3 Authority Key Identifier:
                keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/9V6-AqA_4zEech3d9e-zrslLlYg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:46:ab:e7:11:fa:d3:87:3a:94:30:4f:a0:a4:a3:14:2e:70:
         06:19:6d:fb:ce:4d:a2:8f:99:ab:fc:6d:ba:5d:56:8e:75:c5:
         d0:c3:5a:ca:1a:16:67:96:65:48:2a:8f:f4:fc:a1:e3:ac:9d:
         a1:28:a2:08:9d:f0:f8:6c:10:ba:9f:0e:7f:ff:fc:1d:49:fd:
         47:d4:10:be:30:5b:20:1b:97:df:29:18:6f:95:14:41:b4:7a:
         9d:ae:1f:32:2d:01:f1:05:2f:10:87:bc:ef:0f:32:09:a4:b9:
         e9:d5:26:75:a6:9d:ec:96:8b:db:5c:96:9e:0e:96:06:ea:50:
         f5:e8:47:16:e6:f5:3c:3f:23:c8:76:cc:29:72:52:a7:a9:00:
         40:ad:fc:47:2c:e0:65:ac:4a:01:4c:44:aa:99:7a:d4:4f:9d:
         ca:6b:18:06:94:c7:cf:fb:38:8e:1d:dd:b1:36:4b:0e:16:72:
         ca:04:00:8e:ba:55:31:99:24:ff:f4:c7:ac:a7:5e:6d:3d:f1:
         f9:10:e9:a5:15:e4:b4:b8:f7:d7:7a:a2:89:01:7c:ba:9e:53:
         65:df:fc:99:e0:f7:2a:c6:9a:94:88:70:0a:71:7f:ae:c5:7c:
         55:50:ea:78:9e:bb:45:8d:a3:3c:d7:67:d6:0e:e4:72:cf:e5:
         f3:ef:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:37:46 2026 by rpki-client