This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/8bt9cYMzZg1dDKygP-KGgoxWo28.roa
File:                     8bt9cYMzZg1dDKygP-KGgoxWo28.roa (raw, json)
Hash identifier:          VD9f7yAgGBnI+i2ExDasoXpcEMGiS4J+ud75AVisTxs=
Subject key identifier:   F1:BB:7D:71:83:33:66:0D:5D:0C:AC:A0:3F:E2:86:82:8C:56:A3:6F
Certificate issuer:       /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial:       019B7D5CE8683577D9A37DE636FA803271AB
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/8bt9cYMzZg1dDKygP-KGgoxWo28.roa
Signing time:             Fri 02 Jan 2026 06:19:59 +0000
ROA not before:           Fri 02 Jan 2026 06:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50376
IP address blocks:        212.6.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:e8:68:35:77:d9:a3:7d:e6:36:fa:80:32:71:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
        Validity
            Not Before: Jan  2 06:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f1bb7d718333660d5d0caca03fe286828c56a36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3b:48:56:6d:aa:5b:7b:4b:8b:6a:d8:80:0a:
                    00:e2:ec:39:df:8a:8a:b5:49:8e:f2:57:d9:1d:cb:
                    02:5a:19:96:10:85:98:bd:2a:f1:e7:40:53:2d:2f:
                    38:69:2b:ce:e4:ab:4a:30:dc:f7:a8:66:98:26:7c:
                    7f:6d:2b:97:43:ef:f7:ba:ed:eb:68:fb:2f:1b:23:
                    3a:b5:07:24:9a:23:68:3a:63:a6:ad:3a:fb:81:f8:
                    cd:05:7b:7f:21:2b:c5:c2:b7:2a:9e:a9:1f:45:7f:
                    4f:79:c0:66:2f:20:1a:62:c1:6f:3c:65:ef:ad:6c:
                    f0:92:f0:3d:4f:4b:16:68:2c:81:ba:90:8c:a6:c3:
                    75:32:ce:7c:3d:86:5a:78:55:dd:70:93:35:16:24:
                    e7:b4:33:f8:a9:eb:0a:7b:05:b7:0b:3d:45:de:aa:
                    b1:34:d4:57:7d:71:87:94:ee:ee:86:45:54:41:9e:
                    6f:1e:90:86:11:ae:46:fe:c7:f6:04:79:ab:0d:f8:
                    45:ad:56:a2:62:89:97:b8:46:e3:f2:c2:b1:0e:1e:
                    58:cd:ce:9b:07:72:16:d1:d6:1a:bb:1f:20:9e:46:
                    60:df:4c:3e:e0:ae:d6:76:dc:02:ef:26:66:aa:7a:
                    52:d2:18:bf:2f:c2:d6:2e:d9:8d:c1:a2:d8:70:27:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:7D:71:83:33:66:0D:5D:0C:AC:A0:3F:E2:86:82:8C:56:A3:6F
            X509v3 Authority Key Identifier:
                keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/8bt9cYMzZg1dDKygP-KGgoxWo28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:67:76:79:a9:63:5a:40:46:0b:c8:38:35:19:07:05:8d:17:
         c2:f2:49:d9:a4:97:72:95:7f:cb:27:5b:ae:c8:f4:76:a6:14:
         a3:a0:af:46:70:e1:42:e0:34:72:66:34:7f:2a:7a:e1:36:31:
         be:30:24:f7:a9:f4:f3:aa:29:94:52:c4:ba:23:b1:15:05:2b:
         87:72:ac:eb:a6:e6:7c:9c:92:b3:03:05:27:43:a3:e2:23:a0:
         33:20:07:55:5a:c6:19:e7:df:0f:a5:99:62:f8:02:00:af:0f:
         c5:76:b6:73:44:cf:51:28:a3:61:f6:b9:61:80:b9:08:29:18:
         0e:77:cb:2f:f5:b6:4a:69:b9:e6:00:73:fd:ce:3b:4c:11:b0:
         76:e5:2f:cb:46:1d:2f:69:95:12:30:38:e0:52:64:86:ed:f8:
         cb:69:0f:63:2b:73:74:45:56:62:de:77:be:7f:24:bb:f7:66:
         12:79:c9:2e:64:74:b5:39:7e:bc:a3:84:f1:ab:d4:8f:a0:c5:
         83:f1:e9:22:eb:cb:17:f5:53:ea:b5:93:15:ef:b5:20:c7:53:
         b6:d6:ef:bb:2c:6d:24:25:c8:52:fc:e3:ec:8e:63:53:2e:97:
         4b:69:4e:51:9e:04:f6:be:13:5b:a3:e4:32:81:03:9b:c9:ad:
         47:d9:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:24:47 2026 by rpki-client