This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/6Zutd3yonlJj4XwS7GMHxtEUVvc.roa
File:                     6Zutd3yonlJj4XwS7GMHxtEUVvc.roa (raw, json)
Hash identifier:          l/tcenYOtzjDB6YyDN5UG1nnDU+B/4axZA1MsfwOZMc=
Subject key identifier:   E9:9B:AD:77:7C:A8:9E:52:63:E1:7C:12:EC:63:07:C6:D1:14:56:F7
Certificate issuer:       /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial:       019B7C809544B54844EF8F3CCC40FCB73432
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/6Zutd3yonlJj4XwS7GMHxtEUVvc.roa
Signing time:             Fri 02 Jan 2026 02:19:20 +0000
ROA not before:           Fri 02 Jan 2026 02:19:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214088
IP address blocks:        2001:30c0:ffff::/48 maxlen: 48
                          2001:30c1::/48 maxlen: 48
                          2001:30c1:1::/48 maxlen: 48
                          2001:30c1:2::/48 maxlen: 48
                          2001:30c1:3::/48 maxlen: 48
                          2001:30c1:4::/48 maxlen: 48
                          2001:30c1:5::/48 maxlen: 48
                          2001:30c1:6::/48 maxlen: 48
                          2001:30c1:7::/48 maxlen: 48
                          2001:30c1:8::/48 maxlen: 48
                          2001:30c1:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:95:44:b5:48:44:ef:8f:3c:cc:40:fc:b7:34:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
        Validity
            Not Before: Jan  2 02:19:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e99bad777ca89e5263e17c12ec6307c6d11456f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:2f:ba:44:55:eb:3c:67:a1:00:81:cc:bf:
                    be:55:58:76:59:7c:3b:b8:f9:e2:e7:3f:eb:08:c1:
                    fe:1a:8e:ef:c7:ba:44:69:92:3f:18:05:74:d3:53:
                    52:12:eb:34:d3:0c:d8:0f:99:db:46:41:55:8b:a0:
                    0b:d1:ed:1b:a6:27:f8:a1:a8:74:ea:6c:c6:55:db:
                    b8:bf:d8:1b:a0:08:ca:a5:c1:d0:7a:b3:e1:97:0b:
                    26:78:a1:56:4a:44:10:ff:87:37:ec:79:48:5e:f8:
                    0a:80:56:2a:28:06:cd:bf:b5:63:e8:d8:69:28:5a:
                    a8:1c:d5:e8:11:34:2a:5f:1a:ea:02:cb:77:d2:61:
                    33:f6:6d:3c:d6:da:c5:ab:f7:a8:b9:8b:13:9c:8e:
                    a2:cd:55:09:36:3d:f5:e1:1c:22:f2:48:df:74:3d:
                    54:52:dc:ef:31:4d:9e:c3:b9:3a:7c:db:a8:87:4e:
                    18:1b:23:88:15:3d:91:72:8a:31:c6:42:31:56:4f:
                    29:dc:67:af:f5:1d:0d:0e:07:9e:59:7f:68:21:d9:
                    df:e7:d5:68:3e:34:1a:0a:c7:6b:48:20:d0:36:e3:
                    46:c6:d9:1d:03:1a:18:45:ee:e6:a2:a5:e9:c9:88:
                    92:a4:a1:c1:68:8c:c7:e1:ad:d1:d9:5c:e6:5e:a1:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9B:AD:77:7C:A8:9E:52:63:E1:7C:12:EC:63:07:C6:D1:14:56:F7
            X509v3 Authority Key Identifier:
                keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/6Zutd3yonlJj4XwS7GMHxtEUVvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:30c0:ffff::-2001:30c1:9:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:67:3a:94:7b:62:31:c3:d4:38:8a:f7:aa:83:26:2e:80:
         44:88:f6:e5:a0:08:fd:2c:a8:51:05:01:67:ec:82:f9:89:9a:
         4b:3c:df:c2:14:59:f7:a9:73:98:29:dd:bd:25:43:f1:dd:7d:
         39:e3:94:8b:4c:7f:89:31:5a:3d:22:ee:3a:f3:5a:d6:db:67:
         10:ca:48:dc:32:28:ae:12:f2:25:98:4a:ed:fb:20:20:fb:04:
         07:c4:31:1b:59:e2:f3:34:a4:95:73:df:29:2e:d1:36:8c:73:
         01:65:4e:9b:ee:74:4c:38:2c:0c:6d:b6:e3:b7:c2:25:73:8b:
         02:ff:98:99:39:b9:29:b0:3e:f0:f8:0d:40:e6:74:b1:eb:b4:
         29:32:e7:92:db:96:0f:80:a8:d5:d1:b1:fd:de:53:a2:f9:63:
         1b:2a:b2:7d:45:2b:15:a5:ea:4e:40:ac:d3:60:76:46:46:a3:
         7c:ce:f6:ff:64:97:ad:1a:d2:88:ab:9a:06:66:8e:41:24:b0:
         65:1c:f4:7d:8c:f8:18:d7:ee:22:02:9a:94:81:ca:1a:18:c6:
         e7:05:a7:72:93:4a:85:8d:c8:2a:d1:43:b7:c3:3e:c5:36:2d:
         1b:aa:fb:4a:cd:75:0d:90:b5:2a:0f:3b:d3:ed:68:94:78:fd:
         e3:6d:89:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:25:11 2026 by rpki-client