This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/ame8Z_daacjlEpmtE4K5w-dphW4.roa
File:                     ame8Z_daacjlEpmtE4K5w-dphW4.roa (raw, json)
Hash identifier:          +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=
Subject key identifier:   6A:67:BC:67:F7:5A:69:C8:E5:12:99:AD:13:82:B9:C3:E7:69:85:6E
Certificate issuer:       /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial:       019B7CEE18A9E03205D61218DE4372FE1467
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/ame8Z_daacjlEpmtE4K5w-dphW4.roa
Signing time:             Fri 02 Jan 2026 04:18:57 +0000
ROA not before:           Fri 02 Jan 2026 04:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200091
IP address blocks:        81.30.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:18:a9:e0:32:05:d6:12:18:de:43:72:fe:14:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
        Validity
            Not Before: Jan  2 04:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a67bc67f75a69c8e51299ad1382b9c3e769856e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:9b:87:67:37:97:99:73:28:84:6c:98:89:
                    3f:83:00:ed:11:c3:3d:83:1c:be:3d:c9:d5:fb:70:
                    ed:13:75:ad:0d:36:e4:5f:59:0b:39:a5:97:95:c2:
                    ea:d2:b1:f0:67:71:c7:be:55:7e:47:71:8b:93:10:
                    df:1a:ce:9b:e7:b5:07:e5:63:5e:0b:83:a3:f4:a9:
                    e7:48:61:df:7d:68:21:c9:53:c6:bd:f9:f9:08:ff:
                    45:03:a0:2f:27:4c:b1:24:21:d4:1a:1f:cc:9d:7f:
                    e8:d3:8c:0e:18:d9:1a:45:fb:dd:5d:c8:b3:19:4d:
                    94:71:be:b5:93:56:6d:4b:cb:67:f1:bd:79:15:77:
                    90:63:7d:c2:4a:55:f6:d4:ad:47:8e:b2:f7:87:aa:
                    5f:74:97:19:03:af:41:5b:ab:f7:08:6d:e7:1b:d7:
                    99:86:14:56:37:3a:d4:ef:9b:d4:72:8e:64:a1:0b:
                    bf:ec:db:4b:b3:62:fa:80:67:63:b8:81:5d:a2:82:
                    10:04:90:d7:ef:fc:b3:b3:05:36:73:d0:45:8b:48:
                    94:99:24:91:47:3d:5f:96:b6:cd:00:d5:6a:9b:c6:
                    89:89:2c:5a:b9:3d:fb:74:84:90:7c:49:44:a8:74:
                    3c:04:4a:ff:eb:ba:8f:66:d0:4a:e6:e7:9c:3f:d7:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:67:BC:67:F7:5A:69:C8:E5:12:99:AD:13:82:B9:C3:E7:69:85:6E
            X509v3 Authority Key Identifier:
                keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/ame8Z_daacjlEpmtE4K5w-dphW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.30.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:f9:7e:56:ed:64:d0:78:f3:ee:38:d3:4d:5f:f2:9a:bb:
         a1:bb:1a:d4:1b:c2:67:fa:04:2d:22:41:b6:73:6c:b1:41:62:
         3d:b2:c3:a6:78:ac:e7:0b:e5:62:b5:45:ce:9b:18:a7:bc:f5:
         a8:b5:42:30:bc:b6:21:72:8a:cc:23:a1:2a:97:81:b9:a9:02:
         0e:11:e2:e1:17:df:3b:10:18:f9:72:68:53:f9:09:cb:80:f9:
         ba:26:e9:e9:8a:97:da:79:f0:cc:4c:64:66:78:95:a7:08:a8:
         a5:32:23:d2:ac:99:1a:ac:22:0a:ac:96:b7:b8:b3:bc:7c:aa:
         69:ef:a1:31:a6:f0:3d:a8:6d:72:03:a4:22:a4:83:0d:28:5e:
         58:61:81:9a:7f:6b:b0:c2:2b:71:d9:7c:2e:f8:eb:9d:3d:a9:
         b1:41:d7:62:1d:64:7a:3c:c1:ab:8f:a0:b1:4a:fc:76:16:56:
         c9:64:a5:9c:35:1b:b6:5b:31:6c:b6:a1:ba:b8:07:d3:e0:53:
         70:f6:1b:08:7e:28:65:41:d8:cf:b1:8e:22:d7:90:c1:53:33:
         93:dc:c8:ff:42:42:d4:fa:b7:2c:4b:c2:8b:e4:b9:90:bc:b3:
         1c:0d:cd:73:b9:19:ac:65:ac:b6:4d:74:ca:31:10:56:10:d7:
         4a:98:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:25:00 2026 by rpki-client