This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/a6wJTqwIDHlM50wwTIDIENzgNIM.roa
File:                     a6wJTqwIDHlM50wwTIDIENzgNIM.roa (raw, json)
Hash identifier:          RneVlI7D6JXaiIHCL5ERbSVO8w1mvz+y1+DTuG4gy/w=
Subject key identifier:   6B:AC:09:4E:AC:08:0C:79:4C:E7:4C:30:4C:80:C8:10:DC:E0:34:83
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       019B77C76ADA1B766903DF301C8418BF6492
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/a6wJTqwIDHlM50wwTIDIENzgNIM.roa
Signing time:             Thu 01 Jan 2026 04:18:36 +0000
ROA not before:           Thu 01 Jan 2026 04:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43673
IP address blocks:        82.196.67.0/24 maxlen: 24
                          82.196.67.183/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:6a:da:1b:76:69:03:df:30:1c:84:18:bf:64:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan  1 04:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6bac094eac080c794ce74c304c80c810dce03483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:97:48:17:b4:c6:14:99:42:30:25:5c:db:
                    9e:6b:4a:11:30:a3:35:69:8b:da:23:31:e0:72:3b:
                    df:e1:26:28:29:e9:c1:33:b2:2d:89:df:0a:84:aa:
                    b5:03:47:7d:95:42:21:56:5f:4e:bb:e4:73:b6:eb:
                    ec:3c:b2:71:2b:b0:86:b6:29:f6:6e:33:95:03:86:
                    df:55:a5:e0:9d:4d:b7:20:11:f5:06:1e:46:67:7d:
                    7b:b7:75:5b:6a:cf:74:4c:02:22:56:b6:50:e8:d3:
                    6d:85:84:2a:9c:56:73:e7:78:c0:c1:a5:3f:f5:26:
                    76:8e:49:49:4a:81:57:59:62:b9:7f:96:e4:48:ff:
                    98:c7:13:19:6f:c4:75:63:c4:e5:69:2c:1b:0a:e5:
                    1d:be:75:80:33:46:8c:52:ff:24:0c:22:52:3e:27:
                    6e:cd:b8:c5:e7:78:54:15:f9:c1:27:16:bc:7c:67:
                    a2:d7:26:31:91:11:ea:36:1f:04:61:82:3c:f2:cb:
                    0e:29:dd:a5:ce:eb:e0:50:97:50:c0:9a:1b:59:43:
                    8f:bd:8b:3f:f6:a4:b2:d1:4a:b6:0a:50:77:b2:f9:
                    3e:2e:73:08:c8:4e:cf:34:3d:99:fd:02:84:85:4a:
                    81:28:63:c2:47:1f:6e:9e:0a:28:2c:ec:f9:db:52:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AC:09:4E:AC:08:0C:79:4C:E7:4C:30:4C:80:C8:10:DC:E0:34:83
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/a6wJTqwIDHlM50wwTIDIENzgNIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.196.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a0:b2:9f:a7:c9:4e:a1:41:06:92:4a:d9:41:83:9a:ce:9d:
         8c:53:b1:7a:9f:04:d2:25:cb:bd:c4:97:b5:0b:a3:69:c9:d1:
         db:7b:81:fb:e6:b5:04:29:37:05:7b:c6:62:c5:57:cd:24:0e:
         4e:99:a3:49:95:b2:ec:bc:eb:9f:b8:fd:d7:e5:97:21:bd:c3:
         44:33:c9:39:31:7d:69:f9:36:86:13:2b:c5:96:be:9f:f9:71:
         f1:3a:39:a5:89:00:f0:e8:b7:9d:7a:24:a1:6f:a9:e2:b6:b0:
         e0:84:37:4a:be:e9:c1:1a:a4:10:1a:50:2f:83:a5:b8:c7:88:
         7e:d7:e5:9c:0d:c1:12:7c:7b:8f:d4:7a:38:c5:88:93:76:a3:
         9c:b5:35:9c:c4:1d:d5:c2:da:27:1d:c7:45:80:14:71:00:7a:
         11:36:03:a4:b2:0f:da:97:26:c5:3f:7a:aa:fe:1c:9f:32:8c:
         a2:9a:1a:b9:c6:83:9a:f1:61:52:29:b5:64:a4:f4:52:8f:ee:
         50:33:68:7f:4f:a3:f6:ed:36:ad:ad:51:13:4b:a8:6f:c6:d4:
         fa:7f:2e:d3:26:22:dd:09:0e:89:bc:ad:0b:9b:c7:09:74:f6:
         fa:b7:0b:ed:5d:1b:c1:89:fe:19:8d:91:e3:17:04:23:2a:05:
         40:64:28:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:48 2026 by rpki-client