This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/6zmwp0Ty38xOLaz9dzA80B6hzAM.roa
File:                     6zmwp0Ty38xOLaz9dzA80B6hzAM.roa (raw, json)
Hash identifier:          OlOuB/7WZRu3jgahb4J4hkXzTMRNqdoXbJ2s7Ooyi+Q=
Subject key identifier:   EB:39:B0:A7:44:F2:DF:CC:4E:2D:AC:FD:77:30:3C:D0:1E:A1:CC:03
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       019B77C683AC9D20866614B5EF95E1814F99
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/6zmwp0Ty38xOLaz9dzA80B6hzAM.roa
Signing time:             Thu 01 Jan 2026 04:17:37 +0000
ROA not before:           Thu 01 Jan 2026 04:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5413
IP address blocks:        185.57.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:83:ac:9d:20:86:66:14:b5:ef:95:e1:81:4f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Jan  1 04:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb39b0a744f2dfcc4e2dacfd77303cd01ea1cc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:13:1a:f2:64:fe:aa:12:71:47:4b:65:fa:
                    a1:9c:78:94:6d:2c:c2:ad:80:90:d7:d9:ed:2b:2a:
                    bb:c7:3e:36:d3:8f:06:f4:87:2d:e7:47:66:56:78:
                    8a:4e:26:e0:14:b0:d6:35:03:1a:3a:16:be:ad:4f:
                    c9:b7:9c:c1:99:66:fc:69:49:53:a4:41:06:f5:fb:
                    75:9a:2e:f5:27:15:98:bd:2d:0f:5e:11:1b:ee:42:
                    37:2b:f4:6d:5b:f1:f5:c8:b9:d9:1a:7b:a2:89:af:
                    33:98:35:ce:e4:e8:f0:b6:b9:e6:ca:42:77:1f:dd:
                    24:a7:31:8b:1c:18:6b:65:1a:91:b6:bd:6c:e2:ea:
                    ee:b7:08:be:42:85:4c:07:bb:7c:4b:56:7a:ab:f8:
                    42:55:17:fd:77:22:ac:5b:89:70:aa:dd:cb:56:29:
                    5f:88:13:40:43:26:8f:db:9b:a9:bd:2f:20:6a:a8:
                    a3:9a:e6:b1:7b:44:9b:cc:1f:2b:bd:90:35:70:09:
                    93:57:9c:e1:ec:b7:d3:56:fd:9a:51:85:52:9f:76:
                    36:c1:b5:41:65:c8:4a:f8:65:f3:67:2c:d1:57:d6:
                    38:c8:c5:96:1e:5e:bb:51:66:f4:16:13:51:58:5e:
                    67:ef:41:fa:37:c1:d6:4f:e7:ab:d9:3f:78:fc:82:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:B0:A7:44:F2:DF:CC:4E:2D:AC:FD:77:30:3C:D0:1E:A1:CC:03
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/6zmwp0Ty38xOLaz9dzA80B6hzAM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:c0:7f:27:69:07:e0:fc:f6:81:a6:2d:80:27:cf:f7:b4:f2:
         84:f0:ea:fe:e2:5f:85:92:f1:4c:c9:db:6f:e3:f1:c3:5d:9c:
         cb:ad:dd:58:1b:22:6b:e0:6a:b8:78:2d:f7:dc:3e:f2:14:bf:
         7d:c9:88:7d:a3:04:03:c0:2c:fb:1a:b6:a3:cf:c5:f7:b3:31:
         8d:56:2f:66:5a:4b:23:bf:aa:07:13:ab:02:77:79:f8:42:09:
         95:e2:79:4b:4a:59:17:09:c5:e0:62:53:db:5e:7b:58:28:a2:
         5d:06:13:1f:fb:b6:bd:83:84:77:80:f0:e4:6e:87:d0:80:c1:
         a4:2f:a6:2b:cf:2a:e5:07:1b:b4:e2:aa:ac:5a:06:0e:b1:02:
         14:c5:d1:35:1a:41:1b:98:c5:34:da:c7:6e:f5:87:09:ca:e8:
         9a:85:2b:45:f9:2f:2a:39:d2:ce:3a:65:7c:00:37:6c:2a:09:
         27:cb:f7:40:aa:ab:00:33:4d:a2:6f:d8:f5:46:3e:b3:44:e5:
         57:8e:e0:b2:7f:4f:c5:b7:8c:73:ba:a6:37:d1:8b:a5:b4:bb:
         c1:c3:45:ad:20:56:2f:d5:56:f9:5e:31:19:5d:ba:32:86:1b:
         35:bf:13:73:a6:01:c0:31:8b:d7:0b:bc:64:1d:5d:7c:2b:1d:
         4d:e8:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:56 2026 by rpki-client