This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/6dxV01X9vg2jPotO5hv9PQEuxwo.roa
File:                     6dxV01X9vg2jPotO5hv9PQEuxwo.roa (raw, json)
Hash identifier:          +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=
Subject key identifier:   E9:DC:55:D3:55:FD:BE:0D:A3:3E:8B:4E:E6:1B:FD:3D:01:2E:C7:0A
Certificate issuer:       /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial:       019B797F2EBCE1AC259430F6C2FA44C4815B
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/6dxV01X9vg2jPotO5hv9PQEuxwo.roa
Signing time:             Thu 01 Jan 2026 12:18:56 +0000
ROA not before:           Thu 01 Jan 2026 12:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205766
IP address blocks:        185.26.156.0/24 maxlen: 24
                          2a00:d0c0:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:2e:bc:e1:ac:25:94:30:f6:c2:fa:44:c4:81:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
        Validity
            Not Before: Jan  1 12:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e9dc55d355fdbe0da33e8b4ee61bfd3d012ec70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:70:12:f4:ab:a4:a8:9f:74:c2:17:a1:9e:
                    29:1c:91:db:92:5e:3c:9d:bd:64:c1:49:89:3d:7d:
                    53:e9:74:19:a6:92:10:31:00:48:01:5e:e5:df:cf:
                    22:49:58:66:30:d2:65:2f:64:06:8c:6a:2d:af:ed:
                    87:37:7f:7e:78:64:7f:92:86:72:ac:37:7e:19:da:
                    47:b7:8e:f8:41:28:83:df:08:0c:89:2f:7b:62:f0:
                    e8:ee:8b:9d:84:c9:be:d6:f7:2c:91:8a:0a:a8:c3:
                    ca:fc:34:f7:df:66:db:7a:ff:3e:c1:71:bf:1c:ce:
                    29:0c:63:a1:bc:d3:4f:d6:8c:dd:4b:31:7a:ad:0c:
                    91:24:50:56:a1:fd:35:04:29:ab:69:eb:3d:4f:7a:
                    71:1a:89:de:24:59:0c:b9:77:2c:d6:c3:d1:9e:ce:
                    76:1c:e1:0d:8d:6a:a7:63:96:3c:47:21:e9:c4:b5:
                    1e:ea:9d:2c:83:e6:2c:b4:27:f4:b7:6a:a0:59:1b:
                    2b:ab:18:de:91:92:bd:af:3d:ea:a1:09:09:c6:95:
                    b6:1c:b8:cb:6f:ee:44:07:3a:2c:c0:40:2a:2a:1f:
                    45:8b:d8:85:f6:53:32:aa:36:b4:19:27:12:9f:3e:
                    8c:f2:4e:b0:58:f8:cc:f4:2b:a5:e9:98:11:79:38:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DC:55:D3:55:FD:BE:0D:A3:3E:8B:4E:E6:1B:FD:3D:01:2E:C7:0A
            X509v3 Authority Key Identifier:
                keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/6dxV01X9vg2jPotO5hv9PQEuxwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.156.0/24
                IPv6:
                  2a00:d0c0:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:64:37:4b:71:55:13:1a:9b:7a:92:38:99:a2:75:6b:e7:b8:
         d3:fc:eb:bb:d1:75:e6:1e:d2:00:f4:76:65:16:cb:7b:f7:67:
         b8:01:02:1b:b4:fb:f1:dd:9f:28:c6:99:ea:fd:7c:48:5b:28:
         f8:51:8e:ea:0d:41:4c:ba:1e:f2:f1:12:23:7c:da:de:64:57:
         85:e0:8f:14:e0:df:07:95:da:c1:96:90:94:d9:4d:4f:58:7c:
         e3:58:97:a8:63:52:4b:8a:c1:3f:f7:af:d4:12:21:48:02:b7:
         e5:0e:72:5a:2a:ad:8f:2a:7a:ea:94:db:fe:79:80:01:2c:6b:
         4d:39:eb:a7:75:09:71:6a:3e:99:62:e8:18:68:a6:5b:49:64:
         d6:2c:ee:90:e0:0e:7d:dd:3a:ec:5c:9a:7f:ee:f0:60:7d:31:
         85:78:f9:1f:12:6b:73:cc:80:c1:9a:4d:2a:45:d1:80:b4:06:
         02:fb:43:90:17:78:aa:4d:36:97:75:2d:cf:ed:00:7e:d4:9f:
         99:da:89:4b:35:af:fd:eb:36:ff:fc:6e:2e:a0:12:11:f7:e4:
         e2:a2:fc:17:c9:e5:99:e0:08:72:83:7c:39:2e:85:38:f6:4f:
         8b:61:68:b9:51:3e:3f:c4:09:2c:fe:ae:03:06:44:1e:63:fe:
         59:bd:65:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:33 2026 by rpki-client