This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/6rOwkiiwPMSDxttw83Oe03eKzrw.roa
File:                     6rOwkiiwPMSDxttw83Oe03eKzrw.roa (raw, json)
Hash identifier:          TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=
Subject key identifier:   EA:B3:B0:92:28:B0:3C:C4:83:C6:DB:70:F3:73:9E:D3:77:8A:CE:BC
Certificate issuer:       /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial:       019B7EA5009C1D04C3E2F58B2FEF63A0ACAE
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/6rOwkiiwPMSDxttw83Oe03eKzrw.roa
Signing time:             Fri 02 Jan 2026 12:18:21 +0000
ROA not before:           Fri 02 Jan 2026 12:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213541
IP address blocks:        89.184.0.0/21 maxlen: 24
                          89.184.8.0/23 maxlen: 23
                          89.184.10.0/23 maxlen: 23
                          89.184.12.0/23 maxlen: 23
                          89.184.14.0/23 maxlen: 23
                          89.184.16.0/21 maxlen: 24
                          89.184.16.0/22 maxlen: 24
                          89.184.24.0/21 maxlen: 24
                          89.184.30.0/24 maxlen: 24
                          89.184.31.0/24 maxlen: 24
                          193.222.251.0/24 maxlen: 24
                          193.223.69.0/24 maxlen: 24
                          193.223.103.0/24 maxlen: 24
                          193.223.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:00:9c:1d:04:c3:e2:f5:8b:2f:ef:63:a0:ac:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
        Validity
            Not Before: Jan  2 12:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eab3b09228b03cc483c6db70f3739ed3778acebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:e1:1d:c5:f7:38:be:14:ff:32:f2:73:3b:
                    5f:47:df:45:b3:5d:b4:55:77:82:01:af:08:17:e2:
                    6a:0a:10:26:fa:1c:2b:89:1d:31:9c:00:a5:69:4a:
                    9a:b0:da:3d:b5:36:dd:4c:fb:fc:4e:39:e7:2f:33:
                    61:d7:43:30:75:5c:8e:42:a2:6f:3e:a9:73:88:ef:
                    e0:60:74:a3:fc:df:5f:1c:53:c3:bd:f7:f1:ec:41:
                    53:cf:50:80:f8:ed:a9:37:3e:2c:ed:97:bf:ee:5b:
                    02:53:5e:eb:82:35:d0:9c:4f:48:93:f2:1e:95:93:
                    27:c1:4e:68:d9:b6:f8:a1:61:9c:b1:4d:cd:43:a4:
                    70:8b:f3:a0:a4:5c:4e:7d:71:04:66:f8:f3:5b:d7:
                    65:a1:a5:f1:ff:7f:ad:4c:08:3f:b7:fe:cf:f8:82:
                    c2:1f:7a:dd:a2:3c:18:f3:31:3b:81:e7:58:4d:80:
                    cf:a3:bb:65:4d:2f:e1:fe:04:40:1d:58:45:f2:b2:
                    81:d0:60:54:e6:de:09:49:fc:b2:26:c5:34:3d:a9:
                    70:31:dd:43:96:23:6b:c1:d5:e2:75:64:69:fb:d0:
                    45:37:12:43:40:47:cb:d3:41:fa:91:9b:0e:15:98:
                    56:64:59:a8:db:ff:57:84:7a:85:15:54:46:b2:14:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B3:B0:92:28:B0:3C:C4:83:C6:DB:70:F3:73:9E:D3:77:8A:CE:BC
            X509v3 Authority Key Identifier:
                keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/6rOwkiiwPMSDxttw83Oe03eKzrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.184.0.0/19
                  193.222.251.0/24
                  193.223.69.0/24
                  193.223.103.0/24
                  193.223.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:46:74:1a:dc:7a:3e:04:4c:d9:44:f8:d4:d8:22:00:ee:
         b9:b4:81:de:7c:bc:69:df:1a:26:39:2d:3f:34:09:0f:11:5a:
         4e:6d:e2:2b:99:c6:c1:07:b6:21:63:98:5a:df:8f:9e:5d:31:
         21:28:fd:bf:4a:02:25:65:ba:51:bc:32:7d:62:ce:eb:8e:31:
         32:d2:72:51:44:89:50:e1:c6:3f:c7:a6:17:a5:01:76:83:ad:
         86:3b:ad:2a:a2:b9:cc:ef:b3:d4:7b:87:87:7f:73:b3:86:5b:
         b3:74:a4:12:f0:dc:72:c9:13:ac:dd:d7:3e:52:b5:c6:5e:51:
         58:8d:2e:ac:73:83:51:65:16:fd:6d:b6:ee:8a:5f:d0:b6:08:
         89:f2:1b:00:83:5c:56:4b:66:73:bd:75:73:a2:8c:00:88:05:
         c0:bb:f3:89:1a:54:30:ed:76:e6:0d:61:97:60:f3:28:8f:6d:
         20:1b:99:94:4f:e3:60:6f:7d:0d:9d:d7:ac:5f:bb:9b:9a:98:
         56:94:55:36:35:9c:52:e2:66:c6:99:18:45:04:d2:2e:a0:00:
         9b:1a:4e:27:44:81:62:14:50:08:69:a0:6c:3a:51:c5:16:6b:
         60:9e:d6:5a:9b:6a:07:d1:2c:25:70:26:8a:26:69:5f:20:bb:
         f2:25:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:40:37 2026 by rpki-client