This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/6Xmtyg5P-y4wV96F2qIH5_od3vI.roa
File:                     6Xmtyg5P-y4wV96F2qIH5_od3vI.roa (raw, json)
Hash identifier:          FpEP5yjI6RbBxylkXzB5ZO3HMetFO1ZWwfG0Nv3ejyU=
Subject key identifier:   E9:79:AD:CA:0E:4F:FB:2E:30:57:DE:85:DA:A2:07:E7:FA:1D:DE:F2
Certificate issuer:       /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial:       019B7C12A6C5DC3C3FCD01A664CA00AE4DF0
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/6Xmtyg5P-y4wV96F2qIH5_od3vI.roa
Signing time:             Fri 02 Jan 2026 00:19:15 +0000
ROA not before:           Fri 02 Jan 2026 00:19:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57167
IP address blocks:        80.78.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:a6:c5:dc:3c:3f:cd:01:a6:64:ca:00:ae:4d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
        Validity
            Not Before: Jan  2 00:19:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e979adca0e4ffb2e3057de85daa207e7fa1ddef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:78:54:30:e8:30:e3:53:bb:42:86:9d:9c:
                    ec:47:d8:74:a7:1b:75:f2:d4:d9:13:a6:94:04:2d:
                    f6:fb:07:d2:50:d4:49:60:88:b3:41:a4:2f:8c:6e:
                    f6:a8:54:c2:57:a8:d9:d4:1d:fc:4a:42:16:69:29:
                    97:a9:9d:93:93:89:85:da:d7:c5:53:5c:5f:22:e4:
                    19:6d:b0:2f:d8:da:d1:f2:9d:a5:b6:41:0f:f6:46:
                    ea:1a:b9:a4:64:73:6e:69:9b:e4:26:ba:a1:ea:e7:
                    c4:11:55:2d:f5:af:5f:69:43:14:82:cd:6e:5c:35:
                    24:be:c3:5d:45:46:0c:c8:fb:52:37:d3:43:4d:19:
                    69:dc:c4:9c:fa:78:a7:9c:9d:56:93:49:cf:9f:4e:
                    2f:7b:a2:d2:3b:f1:ee:df:d3:17:a1:e5:ea:b5:ad:
                    79:d2:c6:1f:f1:0e:e7:98:62:3e:46:06:86:af:cb:
                    cf:db:df:8b:77:c1:26:7a:f3:6b:85:ad:62:c5:eb:
                    fd:61:c0:20:48:df:3b:d5:c6:31:79:29:04:5a:f3:
                    a6:ce:32:74:e2:e6:da:ef:e5:8e:11:e6:9a:e1:80:
                    ec:b2:69:eb:c1:96:e8:2f:db:04:b8:e9:88:dc:37:
                    4e:11:3c:77:c4:ad:e4:51:2f:82:b8:36:8b:f0:0b:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:79:AD:CA:0E:4F:FB:2E:30:57:DE:85:DA:A2:07:E7:FA:1D:DE:F2
            X509v3 Authority Key Identifier:
                keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/6Xmtyg5P-y4wV96F2qIH5_od3vI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.78.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:e2:d0:94:62:b1:47:c0:6f:78:3e:86:82:f0:5c:2d:b6:
         c9:ea:3f:9c:e7:88:49:6a:a6:38:46:f1:f7:f1:de:7a:8a:d8:
         ae:c4:74:df:49:12:d7:0c:52:db:b0:fa:bf:83:7d:88:a3:0a:
         50:e0:f5:36:f4:2d:58:65:16:b2:46:de:07:43:8b:18:17:46:
         7a:9d:6c:51:b0:14:60:a0:74:61:8a:26:29:54:c7:e5:d2:fb:
         75:19:9a:7d:f6:9a:b2:28:1a:7a:1a:a2:87:b6:75:98:ea:6b:
         d1:37:d4:a1:b9:2d:c7:2e:4d:70:d2:96:3b:5c:a7:f9:78:08:
         6e:fe:31:1c:ba:b1:9e:66:9b:17:69:de:9f:d6:7d:3b:75:31:
         e8:c0:94:6b:f1:77:e8:4b:0c:e0:a8:ed:a4:89:00:50:36:6d:
         c1:a3:f4:50:bf:fe:04:3d:a9:cc:f3:6e:e4:52:8b:6b:3e:73:
         15:25:41:79:52:94:eb:b5:ec:40:f3:c8:32:7f:d2:f0:19:a9:
         3f:9c:3d:d4:33:33:be:dc:c8:0b:48:91:82:be:e3:63:81:f1:
         75:f3:30:8d:3a:e6:4b:88:42:20:cf:27:ca:2a:0e:eb:cd:ee:
         14:40:89:5a:10:e8:bf:0a:c5:be:da:b8:07:2a:bf:3e:71:22:
         69:02:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:03:23 2026 by rpki-client