This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/g2H9xWj1H5AbwMNqiP9AW55oss8.roa
File:                     g2H9xWj1H5AbwMNqiP9AW55oss8.roa (raw, json)
Hash identifier:          9T0jOBQOH9REt/W/f2e2pn8D6B5ZPkyd1uv8j2XXDoI=
Subject key identifier:   83:61:FD:C5:68:F5:1F:90:1B:C0:C3:6A:88:FF:40:5B:9E:68:B2:CF
Certificate issuer:       /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial:       019B7D5B5A6AA9A96312BBC0475FF88B7230
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/g2H9xWj1H5AbwMNqiP9AW55oss8.roa
Signing time:             Fri 02 Jan 2026 06:18:17 +0000
ROA not before:           Fri 02 Jan 2026 06:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200597
IP address blocks:        185.32.77.0/24 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:5a:6a:a9:a9:63:12:bb:c0:47:5f:f8:8b:72:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
        Validity
            Not Before: Jan  2 06:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8361fdc568f51f901bc0c36a88ff405b9e68b2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:b9:88:f8:cb:96:b4:40:91:e0:34:dc:4b:
                    58:1b:47:2a:22:85:03:4c:92:71:73:84:fa:cf:4c:
                    00:72:31:3d:b7:4a:be:31:9e:70:e2:a7:de:a7:99:
                    3c:3d:e3:48:cd:a0:2a:ba:cb:a6:48:8a:df:df:11:
                    ce:de:54:a5:33:44:7c:d5:fe:75:05:5f:c1:9c:bc:
                    74:aa:e6:c0:41:9c:f2:87:a0:bc:f9:36:98:28:69:
                    dc:db:95:45:72:32:37:c6:02:5f:34:c4:43:c9:7d:
                    37:f1:a3:ed:ba:38:92:e8:c7:bb:2a:f2:bd:1e:41:
                    e8:bb:17:24:2c:be:c6:1a:4c:9d:85:c7:0d:50:ae:
                    79:00:12:b9:69:a4:0e:0d:85:9e:de:63:28:26:0d:
                    d7:a0:2a:e7:f4:80:b3:57:bc:db:0c:9c:f8:8b:46:
                    d4:a7:0f:53:df:51:b4:82:e5:b3:91:e8:f5:d7:de:
                    57:d9:a9:1a:41:01:7d:ff:3a:70:de:a3:21:54:9a:
                    10:f0:0b:e5:84:8a:2b:b4:7d:4c:a9:db:d0:96:69:
                    38:21:bd:fe:c5:76:a9:e2:cb:bb:cf:83:47:23:41:
                    b3:11:2a:a8:ff:2b:98:7c:5c:56:10:53:cd:c1:4d:
                    7c:53:93:f7:8b:f1:ab:9a:ec:f1:2e:26:b0:d3:bd:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:61:FD:C5:68:F5:1F:90:1B:C0:C3:6A:88:FF:40:5B:9E:68:B2:CF
            X509v3 Authority Key Identifier:
                keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/g2H9xWj1H5AbwMNqiP9AW55oss8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:d3:3c:bc:b8:ea:fd:fe:c4:ee:63:d8:f2:7a:91:91:99:30:
         58:12:2a:da:fb:ac:8e:4a:ce:dd:d1:5d:f8:60:79:3f:a8:77:
         c6:7f:f2:7a:3a:ad:2b:c6:dd:53:35:b5:55:c1:3a:1d:5b:16:
         2d:6a:0b:62:e3:da:fa:c2:07:56:0d:5c:27:96:9a:58:70:f1:
         76:67:d1:a0:97:e7:87:ce:a3:c7:96:36:77:99:3d:4b:a2:62:
         c1:07:0d:98:42:7e:47:9c:3e:c4:44:d7:80:f1:8c:38:e2:99:
         15:47:87:d1:82:08:a6:7e:f0:97:c2:0d:76:ed:48:66:f9:4d:
         f8:26:1d:ed:a2:10:6b:58:51:ef:6c:c5:69:12:9c:b5:2a:df:
         e6:6b:68:32:c7:10:b0:d8:62:f7:0f:5d:64:fb:13:02:54:14:
         a4:35:eb:3a:78:71:7c:9d:fd:40:29:47:49:f5:94:95:65:99:
         62:8e:dc:82:d4:62:bc:f1:3a:ff:56:d3:9b:b7:6d:4c:95:51:
         66:96:06:c9:8a:d5:a1:1f:0c:89:fb:53:f4:ad:2a:23:9d:12:
         75:74:7f:f9:21:0b:2b:5e:ad:5d:55:06:f7:7f:29:12:21:c9:
         d0:d6:fd:ff:ed:07:f7:c9:33:68:71:a2:7d:11:ff:43:1e:ce:
         a8:f6:70:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:21:44 2026 by rpki-client