This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/b-ZrxIt6D0a4g3ULVdCEItyOpZM.roa
File:                     b-ZrxIt6D0a4g3ULVdCEItyOpZM.roa (raw, json)
Hash identifier:          VDng1uCTJGN5zS/D2Ww5fMBkjxBVpzoQf6gFfDENzfQ=
Subject key identifier:   6F:E6:6B:C4:8B:7A:0F:46:B8:83:75:0B:55:D0:84:22:DC:8E:A5:93
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       019B7834BCB6F66939E2DDCB0960BB71DB0B
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/b-ZrxIt6D0a4g3ULVdCEItyOpZM.roa
Signing time:             Thu 01 Jan 2026 06:18:00 +0000
ROA not before:           Thu 01 Jan 2026 06:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206375
IP address blocks:        45.135.204.0/24 maxlen: 32
                          45.135.205.0/24 maxlen: 32
                          45.135.206.0/24 maxlen: 32
                          45.135.207.0/24 maxlen: 32
                          139.28.104.0/24 maxlen: 32
                          139.28.105.0/24 maxlen: 32
                          139.28.106.0/24 maxlen: 32
                          139.28.107.0/24 maxlen: 32
                          185.188.128.0/24 maxlen: 32
                          185.188.129.0/24 maxlen: 32
                          185.188.130.0/24 maxlen: 32
                          185.188.131.0/24 maxlen: 32
                          185.219.176.0/24 maxlen: 32
                          185.219.177.0/24 maxlen: 32
                          185.219.178.0/24 maxlen: 32
                          185.219.179.0/24 maxlen: 32
                          2a0b:bf40::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:bc:b6:f6:69:39:e2:dd:cb:09:60:bb:71:db:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Jan  1 06:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6fe66bc48b7a0f46b883750b55d08422dc8ea593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:0d:86:95:54:1a:81:15:da:8e:11:7f:52:
                    2d:c3:60:59:e8:e9:41:17:a2:31:a4:96:5f:75:0e:
                    e0:36:69:41:b6:03:1c:7d:02:64:b3:43:66:c5:56:
                    70:2f:48:c2:74:92:ea:a0:f9:11:d7:5f:7b:f6:da:
                    c6:4e:23:8b:11:94:73:cb:34:e4:21:60:b9:cb:0c:
                    9e:7d:c9:52:67:c5:54:f6:fe:7a:6c:ef:39:47:ec:
                    53:55:14:fd:7b:2a:27:9f:d0:6a:f6:0b:f0:38:97:
                    73:73:da:a7:71:ca:6b:b3:84:a2:21:4e:f9:ce:14:
                    48:49:70:e3:c3:65:c6:47:32:c0:09:0a:3d:a3:8f:
                    31:e3:90:1b:85:c6:9b:a6:9a:aa:ed:16:f1:ec:c3:
                    21:2f:92:20:46:86:e6:6a:0a:e0:a2:04:53:b2:1e:
                    80:5a:d5:ca:3d:2b:bf:ac:36:25:8c:46:c9:44:f3:
                    87:d2:07:3b:67:d4:6c:33:1d:40:a2:ca:b9:0d:d9:
                    55:21:dd:d1:7a:8f:58:07:43:d4:1e:70:85:b0:9b:
                    cd:12:5a:bc:32:03:73:cd:1f:aa:64:2b:84:32:e1:
                    5a:15:16:bc:26:c5:20:71:67:ca:f8:6c:db:42:78:
                    dc:6f:86:71:b1:35:e3:89:55:ce:58:eb:20:c1:d2:
                    94:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E6:6B:C4:8B:7A:0F:46:B8:83:75:0B:55:D0:84:22:DC:8E:A5:93
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/b-ZrxIt6D0a4g3ULVdCEItyOpZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.204.0/22
                  139.28.104.0/22
                  185.188.128.0/22
                  185.219.176.0/22
                IPv6:
                  2a0b:bf40::/29

    Signature Algorithm: sha256WithRSAEncryption
         02:64:e5:c9:4c:04:62:0b:23:83:4b:ee:0a:fb:43:d3:95:52:
         0d:16:75:84:9a:3b:87:74:61:22:09:09:e2:aa:16:9b:7e:7b:
         9e:13:62:cd:25:47:26:48:aa:9f:93:32:ee:d9:cb:21:9b:81:
         f4:1a:1a:4f:d5:af:c5:5d:05:50:e6:41:b6:89:e4:4d:9f:d7:
         2c:3e:3e:36:c3:36:05:d8:39:55:30:31:61:48:64:f9:61:f3:
         6b:51:d6:b0:79:22:37:e3:90:07:7a:24:7a:e0:04:95:86:0a:
         69:7b:3e:ba:8e:65:24:50:1f:6a:9f:98:4c:b1:20:50:9a:f5:
         7d:ac:67:81:9f:e1:e7:f8:d7:d9:c0:2f:65:1c:0c:2a:0f:25:
         bb:66:72:78:12:fc:6a:cf:44:e6:bd:92:7a:53:5c:e6:c3:90:
         3a:79:ae:d6:a8:9e:af:d2:0f:ea:57:c8:07:17:41:b3:dd:56:
         94:68:09:27:ed:66:ee:c7:36:f8:92:e2:69:e7:eb:ac:5d:25:
         05:ae:39:c0:5d:f3:75:0d:9d:9a:c4:ac:f4:89:c9:6d:d1:41:
         37:da:08:ae:b3:3c:72:92:c6:49:da:07:cb:7a:7d:0c:3e:29:
         53:fd:56:06:3f:23:9f:0a:f6:21:1b:74:43:64:5a:36:9f:7f:
         b6:6d:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:14 2026 by rpki-client