This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/6ay0wHDiAgZDJPmL-UcgJsFPARM.roa
File:                     6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (raw, json)
Hash identifier:          pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=
Subject key identifier:   E9:AC:B4:C0:70:E2:02:06:43:24:F9:8B:F9:47:20:26:C1:4F:01:13
Certificate issuer:       /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial:       019B76EB825C0D30901A9CA2C09F31E007DC
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/6ay0wHDiAgZDJPmL-UcgJsFPARM.roa
Signing time:             Thu 01 Jan 2026 00:18:24 +0000
ROA not before:           Thu 01 Jan 2026 00:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49223
IP address blocks:        92.119.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:82:5c:0d:30:90:1a:9c:a2:c0:9f:31:e0:07:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
        Validity
            Not Before: Jan  1 00:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e9acb4c070e202064324f98bf9472026c14f0113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:fb:e5:91:25:c0:db:9c:f6:9f:07:84:f1:
                    f7:e3:e4:b3:60:c7:80:6d:a2:76:0c:b7:c7:b6:71:
                    2c:14:c4:98:17:a8:31:8b:e5:7e:ad:c1:77:ce:b0:
                    9b:5f:3f:5f:11:ed:2c:9d:50:d6:c3:53:2b:4a:bf:
                    f5:a8:2e:ca:30:1b:9d:af:b5:67:26:eb:9d:fc:6f:
                    5d:26:a8:5c:cd:3e:92:b0:09:ba:b0:61:d0:c1:ba:
                    be:f4:00:42:84:15:52:c8:3f:32:4b:23:61:23:23:
                    c8:04:6e:70:45:61:f1:85:9b:27:0c:e8:35:fe:da:
                    cd:76:da:94:d8:12:d8:76:be:9a:8c:b6:d2:17:fb:
                    f8:24:72:1a:4c:a6:63:f5:7b:12:83:05:fa:5f:df:
                    51:2d:fe:51:14:e0:82:d4:f7:e5:7f:5f:20:cc:a3:
                    01:1c:8d:38:1c:8f:35:4a:21:cd:e5:89:20:19:9f:
                    9e:59:b3:57:f3:ab:dd:0e:16:12:33:9a:39:6d:6d:
                    22:f6:54:29:d2:73:03:24:83:b5:5a:bf:eb:0f:96:
                    68:7e:4b:a6:4e:05:de:b5:b3:82:54:f6:a2:12:32:
                    a3:3e:09:7b:0d:29:bd:18:10:23:29:e1:a0:44:e0:
                    f7:ee:b1:1e:59:17:d7:a0:a5:64:a5:35:fc:2b:cb:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:B4:C0:70:E2:02:06:43:24:F9:8B:F9:47:20:26:C1:4F:01:13
            X509v3 Authority Key Identifier:
                keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/6ay0wHDiAgZDJPmL-UcgJsFPARM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:46:b4:9f:4a:7e:7c:7a:35:da:fa:cd:b9:ec:39:5e:0c:
         3c:2d:46:db:cf:53:23:ed:13:86:54:fc:5a:ab:49:71:c4:c8:
         a2:3d:cf:57:9c:23:e8:89:36:63:da:b6:b1:72:c6:75:4f:2f:
         3b:7f:91:0f:7c:7d:14:8c:14:d8:6e:7c:03:30:c2:f1:83:fe:
         ff:32:e3:6b:eb:c3:ad:86:e5:bb:74:a4:82:dd:b2:95:18:7b:
         6d:3d:63:b9:f5:f6:a5:5d:12:11:fb:b7:cd:b0:7e:5a:f5:e4:
         a6:70:76:38:fd:d1:e2:8a:6f:a8:fa:bb:46:e3:67:50:07:a2:
         09:d9:2e:82:2f:4d:ec:f8:fc:7f:f6:0d:15:56:d9:1b:b0:b1:
         42:45:89:2c:c9:d0:8c:af:d4:d7:be:7b:d3:c2:18:b4:94:61:
         d6:fb:91:64:f3:d3:3c:26:4c:68:b6:3d:97:57:7d:42:9f:8f:
         ee:fb:86:8f:b2:e4:8a:24:9b:30:09:9f:67:19:e6:00:f0:d9:
         47:a2:50:c1:0e:f7:f4:b3:88:8d:4d:2e:01:5c:18:12:86:65:
         d3:6f:6c:af:54:cf:c3:c3:05:c9:f1:35:28:27:78:66:b9:b5:
         9b:4a:de:b6:75:bb:72:61:b4:51:27:de:60:40:e5:b9:e3:6d:
         fc:84:8d:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt264JcDTCQGpyiwJ8x4AfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2IxMjA0NWIxYWYwOWFjZjk2NjJlZTM1YmEyY2Q3ZTFj
ODViYWQwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWFjYjRjMDcwZTIwMjA2NDMyNGY5OGJmOTQ3MjAyNmMxNGYwMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwz75ZElwNuc9p8HhPH34+SzYMeA
baJ2DLfHtnEsFMSYF6gxi+V+rcF3zrCbXz9fEe0snVDWw1MrSr/1qC7KMBudr7Vn
Juud/G9dJqhczT6SsAm6sGHQwbq+9ABChBVSyD8ySyNhIyPIBG5wRWHxhZsnDOg1
/trNdtqU2BLYdr6ajLbSF/v4JHIaTKZj9XsSgwX6X99RLf5RFOCC1Pflf18gzKMB
HI04HI81SiHN5YkgGZ+eWbNX86vdDhYSM5o5bW0i9lQp0nMDJIO1Wr/rD5Zofkum
TgXetbOCVPaiEjKjPgl7DSm9GBAjKeGgROD37rEeWRfXoKVkpTX8K8skmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOmstMBw4gIGQyT5i/lHICbBTwETMB8GA1UdIwQY
MBaAFGt7EgRbGvCaz5Zi7jW6LNfhyFutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjkt
MTg0MDFkYTQzNTYzLzEvNmF5MHdIRGlBZ1pESlBtTC1VY2dKc0ZQQVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjktMTg0MDFkYTQzNTYz
LzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHfwMA0G
CSqGSIb3DQEBCwUAA4IBAQCBt0a0n0p+fHo12vrNuew5Xgw8LUbbz1Mj7ROGVPxa
q0lxxMiiPc9XnCPoiTZj2raxcsZ1Ty87f5EPfH0UjBTYbnwDMMLxg/7/MuNr68Ot
huW7dKSC3bKVGHttPWO59falXRIR+7fNsH5a9eSmcHY4/dHiim+o+rtG42dQB6IJ
2S6CL03s+Px/9g0VVtkbsLFCRYksydCMr9TXvnvTwhi0lGHW+5Fk89M8Jkxotj2X
V31Cn4/u+4aPsuSKJJswCZ9nGeYA8NlHolDBDvf0s4iNTS4BXBgShmXTb2yvVM/D
wwXJ8TUoJ3hmubWbSt62dbtyYbRRJ95gQOW54238hI13
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:05 2026 by rpki-client