This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/6mzFB1254QH_scGmAESdwoJirew.roa
File:                     6mzFB1254QH_scGmAESdwoJirew.roa (raw, json)
Hash identifier:          ZqsDszUXMXErK5gprgiRcwaopoCcJJcjnl51ncaMD10=
Subject key identifier:   EA:6C:C5:07:5D:B9:E1:01:FF:B1:C1:A6:00:44:9D:C2:82:62:AD:EC
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       019B79EBB27F0511582DB8A4C6FDA7B25912
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/6mzFB1254QH_scGmAESdwoJirew.roa
Signing time:             Thu 01 Jan 2026 14:17:28 +0000
ROA not before:           Thu 01 Jan 2026 14:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35120
IP address blocks:        81.3.194.0/24 maxlen: 24
                          81.3.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:b2:7f:05:11:58:2d:b8:a4:c6:fd:a7:b2:59:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: Jan  1 14:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea6cc5075db9e101ffb1c1a600449dc28262adec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:24:58:1e:a1:0c:a4:bb:59:dc:6d:38:7f:
                    a4:10:80:b6:c3:d5:70:79:b8:c9:72:0c:fa:dc:64:
                    b7:f5:6a:c1:0a:c9:df:b9:6b:46:ab:cd:64:a6:05:
                    ab:64:53:d5:0f:ee:80:ac:bd:1b:e9:9b:20:35:65:
                    81:12:4a:6e:c0:1b:59:ca:f9:0f:fc:80:33:65:b5:
                    e6:7c:3b:ef:a5:f8:93:81:c4:92:eb:4f:81:49:22:
                    d1:7d:22:3e:5a:62:f6:86:91:cf:66:13:a7:ae:76:
                    33:a1:6c:07:e9:b6:59:2b:d9:0b:73:f0:7a:b3:7b:
                    ac:f8:3a:f0:3c:c0:12:a9:66:93:28:3d:d4:9a:4a:
                    41:2f:ca:13:82:98:b2:34:4d:89:12:9c:3f:63:98:
                    c4:df:57:93:10:bf:d5:87:02:f4:39:86:d0:c8:1e:
                    8c:09:2b:ca:5f:b8:65:c6:69:8e:38:ca:45:df:4e:
                    90:6b:37:53:e5:6d:07:17:04:f5:e7:a7:58:3a:1a:
                    63:6b:47:18:b1:ec:d4:ef:2b:71:9a:0a:04:bc:50:
                    bf:a2:99:66:e5:fc:05:8c:22:ad:6d:bf:fd:68:ce:
                    cc:0a:30:1c:24:9d:24:9c:39:36:5e:7a:53:46:ad:
                    5f:0e:d9:12:25:90:d8:44:20:fd:b3:b2:91:21:dd:
                    2f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:C5:07:5D:B9:E1:01:FF:B1:C1:A6:00:44:9D:C2:82:62:AD:EC
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/6mzFB1254QH_scGmAESdwoJirew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.3.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:0f:40:22:a2:e7:01:37:2a:1e:38:b8:c6:b0:de:28:d5:a7:
         07:cf:00:81:7b:8b:03:bd:da:cb:41:bd:42:fe:96:f0:b2:8b:
         a4:f7:a2:ee:18:e1:9d:ab:d7:06:f8:08:7e:42:fc:52:06:dc:
         d6:10:e9:30:a3:a4:b0:b4:df:e8:83:57:86:76:9a:77:ce:00:
         b8:d2:a3:59:64:db:38:89:d9:7d:69:fd:f3:23:2e:04:69:24:
         88:cc:52:62:77:27:e1:c3:95:fb:ed:dc:88:6f:90:46:47:06:
         af:ad:b9:36:c6:8b:29:41:7d:2a:f6:06:09:84:e8:65:53:39:
         ba:e9:6c:6d:7c:df:a1:64:ef:72:c5:16:c4:b5:cc:bb:db:24:
         b2:a3:5c:54:5f:5e:fb:e3:36:a2:64:c6:67:28:2e:c4:17:c5:
         81:d9:6c:25:c7:db:91:98:3d:be:13:03:f7:09:78:68:99:53:
         78:fa:23:a3:4d:32:38:fd:6d:7c:b1:f5:60:1e:d0:c9:79:68:
         8a:6c:a7:19:6c:63:d6:1c:0d:81:b5:26:6f:e0:f0:1e:52:8b:
         40:90:51:67:ba:fa:e7:4d:d0:42:7b:71:ff:14:3a:89:7f:92:
         e3:4d:7c:db:bb:2d:e9:e7:a0:f6:31:89:af:e8:2c:16:77:48:
         ec:a1:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:49:39 2026 by rpki-client