This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/t6vcjb2H7PuOWUOpwo93r5z0oxI.roa
File:                     t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (raw, json)
Hash identifier:          1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=
Subject key identifier:   B7:AB:DC:8D:BD:87:EC:FB:8E:59:43:A9:C2:8F:77:AF:9C:F4:A3:12
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019B7CEDB859712430E82457AC524DACED3D
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/t6vcjb2H7PuOWUOpwo93r5z0oxI.roa
Signing time:             Fri 02 Jan 2026 04:18:32 +0000
ROA not before:           Fri 02 Jan 2026 04:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209403
IP address blocks:        45.154.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:b8:59:71:24:30:e8:24:57:ac:52:4d:ac:ed:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Jan  2 04:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7abdc8dbd87ecfb8e5943a9c28f77af9cf4a312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:34:8b:e2:8f:0d:40:d3:0f:33:06:05:20:
                    96:81:21:3c:15:58:08:78:63:1b:30:0e:fe:3b:96:
                    35:e1:27:87:3d:4a:08:e9:62:5b:0b:a1:61:88:3b:
                    1a:4a:30:94:66:ac:98:7f:7a:9b:8a:e7:25:4b:21:
                    cf:47:ca:e4:1c:91:01:b6:9f:e5:58:de:8b:b7:61:
                    c1:ce:a5:8c:fc:fe:ef:10:c9:49:0b:9f:08:3d:2f:
                    e6:83:12:ca:30:0d:c4:be:62:ed:03:58:fe:95:93:
                    ac:3d:6c:54:d5:80:0e:79:56:51:08:cd:94:31:ac:
                    1f:c6:4d:65:fe:5f:7f:6f:e0:7c:f2:21:a5:72:eb:
                    78:1f:b9:6d:b0:6c:00:00:5c:19:d5:dc:1b:cb:12:
                    0c:84:74:d2:18:dd:70:22:3c:0b:8d:9b:72:d7:45:
                    05:e2:5f:03:68:3c:6f:f0:4d:01:92:0d:8c:f4:cf:
                    4e:6e:62:f0:fb:48:a6:53:ce:a2:20:63:74:1a:03:
                    cd:e2:5c:95:4d:7d:39:99:2d:f5:00:4c:04:55:9a:
                    39:da:f7:95:39:4a:a5:ec:69:3c:56:47:2b:54:b3:
                    b4:d7:11:dc:1c:9b:4d:a1:20:d4:ab:3b:52:0b:a2:
                    47:1f:0f:46:a8:86:30:3b:d4:7a:cf:83:cb:0d:72:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AB:DC:8D:BD:87:EC:FB:8E:59:43:A9:C2:8F:77:AF:9C:F4:A3:12
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/t6vcjb2H7PuOWUOpwo93r5z0oxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:f2:0e:1d:b6:27:a1:90:d2:9f:75:63:6b:d4:c1:6f:d6:f2:
         a6:46:cd:98:02:76:dc:fa:1a:7d:ba:68:28:cb:5f:4f:59:a8:
         72:0f:80:a5:7a:6d:34:06:97:8f:9e:d4:84:10:df:2a:86:7e:
         78:58:69:dc:00:6d:b3:ad:c4:da:b3:c8:cf:ae:cc:b7:46:02:
         a2:3d:2a:14:92:d1:54:7e:77:e9:12:5b:2c:df:8d:f6:af:00:
         d6:16:5e:7b:7b:f4:ec:43:dd:97:2a:78:be:a2:a8:f2:cd:e7:
         79:6d:e1:05:15:39:87:81:86:e5:d8:ff:46:f2:14:3e:de:d8:
         60:d7:95:f5:c4:c9:99:0b:b4:40:cd:f5:49:b6:29:6a:47:4d:
         2b:48:94:01:73:8a:fb:2b:96:04:65:a5:f7:16:75:d0:5f:5a:
         58:1b:d2:fd:37:23:49:1f:07:17:be:b8:d1:3a:31:c4:54:fe:
         0c:a8:36:b2:8b:86:ba:c0:2c:e3:46:dc:4f:54:76:da:75:62:
         86:34:41:2d:f6:6a:5a:30:57:eb:29:54:b1:09:3f:89:ea:75:
         14:7e:e8:b7:6f:cc:77:c4:b7:61:a9:e7:11:7b:69:8e:34:9a:
         31:27:ff:dd:96:da:0f:dc:61:8f:b9:c6:00:d5:05:c5:06:ec:
         37:31:31:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:58:18 2026 by rpki-client