This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/6TdIaoE-7jQiTNh_dWHlpwe6UDo.roa
File:                     6TdIaoE-7jQiTNh_dWHlpwe6UDo.roa (raw, json)
Hash identifier:          j4t4I6cY/9eHSVrCrZ3KgotxYKtqwlRdd6z9B4fKbI4=
Subject key identifier:   E9:37:48:6A:81:3E:EE:34:22:4C:D8:7F:75:61:E5:A7:07:BA:50:3A
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       019B7DCAD3F0B7CF42F7E5F8DDDF08B3C3F2
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/6TdIaoE-7jQiTNh_dWHlpwe6UDo.roa
Signing time:             Fri 02 Jan 2026 08:20:03 +0000
ROA not before:           Fri 02 Jan 2026 08:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5610
IP address blocks:        193.17.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:d3:f0:b7:cf:42:f7:e5:f8:dd:df:08:b3:c3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: Jan  2 08:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e937486a813eee34224cd87f7561e5a707ba503a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d8:94:02:1e:fb:08:09:5d:6b:26:61:c0:e5:
                    e8:5b:17:64:be:c5:ab:55:89:f6:3f:f5:d8:ab:ef:
                    70:0e:95:16:c0:16:02:a9:78:a5:fd:69:c2:9d:c9:
                    95:3c:a4:8c:c4:18:aa:03:c0:c2:d8:31:b5:68:fc:
                    3a:e2:5c:c4:0c:6b:ff:cc:84:80:2c:96:bf:f9:e7:
                    6e:e7:be:97:77:3b:49:03:46:03:51:fc:43:76:6d:
                    c7:84:72:3e:53:20:31:ae:1b:94:23:9b:23:d7:9a:
                    cc:00:c7:91:79:55:05:99:f4:c0:71:cc:67:c7:98:
                    9a:c0:59:65:7d:17:a4:88:22:a3:ee:83:6e:e4:a9:
                    94:88:c0:26:6d:fd:ca:59:ed:84:ff:13:d6:0a:c4:
                    2a:45:fd:22:5e:e7:b7:3f:df:dd:5a:6d:1e:8f:d1:
                    ff:61:2b:03:6c:6f:4a:3b:b4:eb:65:25:e4:bd:0f:
                    d9:f5:ad:f4:2f:56:8e:5f:a8:ce:58:47:36:7b:10:
                    83:bc:44:e2:20:c6:68:c1:a1:e3:54:67:20:91:70:
                    bc:8c:a8:d6:91:21:c1:b4:3d:e2:df:74:0b:a6:7b:
                    41:c7:04:d4:e8:a6:4f:75:c1:fe:3f:10:af:dc:03:
                    18:15:24:81:c9:24:19:e4:95:90:52:22:ce:c4:fe:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:37:48:6A:81:3E:EE:34:22:4C:D8:7F:75:61:E5:A7:07:BA:50:3A
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/6TdIaoE-7jQiTNh_dWHlpwe6UDo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:3a:8a:3c:48:6f:49:7a:b2:4a:d5:9a:61:bd:d4:8c:39:
         29:05:6a:57:cf:c6:95:e5:c4:ed:01:13:95:a3:81:56:56:31:
         11:4c:69:ba:33:3a:43:98:59:d4:e0:c7:87:c0:45:6c:d8:b6:
         0c:52:ba:f5:7e:f6:f3:80:2c:30:f5:f0:97:90:50:5c:68:c0:
         77:dd:82:29:cb:a3:97:07:53:58:3b:92:93:ab:62:a2:b2:bb:
         66:5a:d3:17:f3:a9:aa:7a:2f:8e:21:4d:c8:51:72:80:a9:2e:
         8f:8a:ca:33:34:0a:59:3e:21:07:11:3e:27:f4:db:9b:05:57:
         bf:9a:f4:45:96:8d:88:4e:19:c1:35:91:3f:22:72:2c:ec:45:
         f7:ce:22:24:10:8e:ac:62:75:ef:3e:b0:b6:36:dc:78:cb:a2:
         fa:a5:af:28:6d:77:f6:41:15:d7:e2:d5:79:76:c4:08:19:74:
         01:fa:6a:4d:53:ee:2e:5e:76:80:0a:e2:35:4a:57:be:d2:46:
         44:f9:4a:29:54:a9:2e:8c:18:55:74:03:8c:e4:3d:ef:33:ad:
         a0:a8:31:61:95:74:a6:ff:74:42:a1:62:86:37:12:60:45:f1:
         cc:1f:b2:d6:0d:0f:6d:5e:d1:b4:56:00:22:4b:3d:45:77:df:
         98:9c:80:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:23 2026 by rpki-client