This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/6E7-9daevK2MkkP9J_irNaIbJPM.roa
File:                     6E7-9daevK2MkkP9J_irNaIbJPM.roa (raw, json)
Hash identifier:          nqBQWE4qRj5lWqiwp2QfZYIRYl9NsKmCq2MDZGildvE=
Subject key identifier:   E8:4E:FE:F5:D6:9E:BC:AD:8C:92:43:FD:27:F8:AB:35:A2:1B:24:F3
Certificate issuer:       /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial:       019B7AC8C1F341CC96A338189F6E1571F8CF
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/6E7-9daevK2MkkP9J_irNaIbJPM.roa
Signing time:             Thu 01 Jan 2026 18:18:55 +0000
ROA not before:           Thu 01 Jan 2026 18:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58580
IP address blocks:        185.254.56.0/22 maxlen: 22
                          185.254.56.0/23 maxlen: 23
                          185.254.56.0/24 maxlen: 24
                          185.254.57.0/24 maxlen: 24
                          185.254.58.0/24 maxlen: 24
                          185.254.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:c1:f3:41:cc:96:a3:38:18:9f:6e:15:71:f8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
        Validity
            Not Before: Jan  1 18:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e84efef5d69ebcad8c9243fd27f8ab35a21b24f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:1f:53:0a:4c:60:f5:0e:52:67:99:0b:f0:
                    c9:fa:07:0d:70:f0:d1:2a:cd:a0:ee:ba:e1:bf:ba:
                    40:4b:fb:90:c0:80:02:6b:a6:fc:93:f1:2a:d8:70:
                    1c:0a:36:7a:b0:7a:51:f0:ca:de:91:be:a3:c6:32:
                    4b:8b:2c:31:77:94:26:65:57:ba:42:7d:60:df:b6:
                    ad:52:cc:c0:56:8b:9e:81:37:74:0c:01:ff:62:59:
                    f6:28:6c:2c:b4:5a:1b:ae:6b:c8:53:2a:2c:61:f2:
                    6c:a3:5a:cb:31:2a:08:2c:9a:c2:da:4a:d4:a8:b2:
                    6d:a9:4b:79:f1:b0:da:c9:b4:fe:ea:f5:42:b0:70:
                    dc:c8:8c:e9:d1:f7:1e:a2:10:81:8f:6c:96:5f:53:
                    73:a3:11:19:02:bf:b2:48:14:78:59:85:f9:b4:0a:
                    39:94:70:23:32:b6:22:a6:91:f4:2b:80:91:dd:53:
                    19:a2:56:27:2c:87:f4:17:45:9c:e0:3d:d5:f9:cb:
                    78:b5:ac:9d:a4:0d:32:fa:ea:a4:16:55:e4:06:2d:
                    79:4d:b7:e9:f8:5f:a5:09:6d:79:73:f5:eb:2c:ae:
                    ac:66:0d:4b:25:46:5f:99:e4:9b:9b:e8:f5:1f:88:
                    09:3f:16:67:89:9b:62:7b:7e:3e:f9:c3:e3:81:2e:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:FE:F5:D6:9E:BC:AD:8C:92:43:FD:27:F8:AB:35:A2:1B:24:F3
            X509v3 Authority Key Identifier:
                keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/6E7-9daevK2MkkP9J_irNaIbJPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:fa:c2:45:c7:e2:df:89:5d:02:3d:82:bf:ef:db:5b:77:9c:
         45:e8:7f:ad:0c:82:42:52:6f:c2:f8:72:d1:64:d6:db:82:84:
         4a:36:96:04:9c:9e:68:d6:fe:ae:82:c6:b2:7a:1e:a9:5b:95:
         8a:5e:ea:77:f3:63:ca:02:85:19:bd:bb:ee:d4:a9:66:ba:50:
         83:c0:30:0f:c5:57:59:59:24:c4:cf:92:55:49:18:4e:7b:3d:
         1e:ff:f2:66:64:71:9e:1a:c8:9e:d6:06:57:93:97:36:77:0c:
         af:46:b6:ab:0b:b0:f6:0e:e5:80:d7:e7:7a:77:49:76:ee:37:
         b7:52:44:95:83:83:4a:87:39:89:ee:43:2c:b3:77:b4:9f:ef:
         ef:3c:2c:5e:ad:74:f5:03:5b:12:6a:df:a2:51:d8:de:4e:9f:
         23:a5:6d:82:5a:a7:97:e0:73:12:78:07:cc:11:24:e8:5e:91:
         56:ad:67:e8:90:64:29:37:1d:5c:da:51:9f:0e:2d:62:6c:91:
         fa:dd:c1:ea:40:7c:eb:11:2a:01:52:69:27:fb:3f:a8:4d:e9:
         1a:75:2a:1a:5d:4f:8b:0a:86:45:93:10:f9:50:08:e9:5a:65:
         05:36:6f:9f:85:2f:01:d9:18:7f:75:e3:2d:24:51:9b:81:06:
         2e:5d:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:02 2026 by rpki-client