This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/V6LgfABtzULswIbwgWkk1QCYEfs.roa
File:                     V6LgfABtzULswIbwgWkk1QCYEfs.roa (raw, json)
Hash identifier:          bkqwmyw/v3/xFtzX8+VyDP6uHq9Nb9Kq0ZMb1n78bks=
Subject key identifier:   57:A2:E0:7C:00:6D:CD:42:EC:C0:86:F0:81:69:24:D5:00:98:11:FB
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       019B7D5B53FFC82FE262CADE3341EAC35F4F
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/V6LgfABtzULswIbwgWkk1QCYEfs.roa
Signing time:             Fri 02 Jan 2026 06:18:15 +0000
ROA not before:           Fri 02 Jan 2026 06:18:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199251
IP address blocks:        176.58.44.0/24 maxlen: 24
                          176.58.45.0/24 maxlen: 24
                          176.58.48.0/23 maxlen: 23
                          176.58.51.0/24 maxlen: 24
                          176.58.52.0/24 maxlen: 24
                          176.58.55.0/24 maxlen: 24
                          176.58.57.0/24 maxlen: 24
                          176.58.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:53:ff:c8:2f:e2:62:ca:de:33:41:ea:c3:5f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: Jan  2 06:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57a2e07c006dcd42ecc086f0816924d5009811fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:b7:7d:37:55:0f:b5:d0:d9:57:a9:f3:ce:
                    16:de:e8:82:17:fc:d2:6a:9b:94:f3:f4:d5:fe:42:
                    33:f6:f4:f7:c2:85:a8:e7:d2:37:36:b6:7b:bd:ec:
                    e5:d3:47:4f:6e:63:61:24:21:c2:e7:ae:db:a1:46:
                    c5:f0:02:a8:90:5b:74:0b:3e:e3:32:9c:01:5e:59:
                    fe:5d:a7:0b:a7:c9:ba:55:26:d5:44:b9:3b:be:cd:
                    81:bb:ff:2d:71:17:a5:98:1d:cc:f3:80:6f:48:e0:
                    33:d7:96:c3:00:6d:a1:64:f7:36:19:d6:6b:41:73:
                    c1:c3:7b:b3:e1:b7:7f:4c:60:d5:db:01:cf:1a:82:
                    a1:44:47:61:f4:81:69:ef:84:0b:84:2e:88:25:6b:
                    1b:20:1d:c8:ac:c8:81:ce:59:7e:c3:bf:e7:79:81:
                    8f:e9:ba:95:a9:c0:9c:0f:96:fa:c5:12:f3:6d:34:
                    02:7e:3b:7f:bd:47:c6:4b:bb:7f:ec:76:7d:ea:f4:
                    a4:28:54:db:48:dc:e1:d1:74:f3:25:b4:c9:50:7e:
                    d1:9d:de:a8:52:f3:35:b9:22:d0:a3:c0:26:79:49:
                    f9:81:6e:de:8a:79:dd:fe:cb:28:a5:8e:cf:e2:11:
                    ea:6f:ec:9b:bf:24:73:73:61:99:83:05:74:86:37:
                    5d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A2:E0:7C:00:6D:CD:42:EC:C0:86:F0:81:69:24:D5:00:98:11:FB
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/V6LgfABtzULswIbwgWkk1QCYEfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.58.44.0/23
                  176.58.48.0/23
                  176.58.51.0-176.58.52.255
                  176.58.55.0/24
                  176.58.57.0/24
                  176.58.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:86:41:ed:74:08:d9:ed:2e:8f:2b:d2:d8:7d:1f:2d:47:c6:
         ae:73:7a:99:a0:50:70:05:77:9b:8f:76:1b:79:c5:ee:f5:f5:
         f1:20:8e:e3:b0:2c:66:a5:85:f2:f2:41:38:01:38:c0:87:58:
         af:11:a5:f5:09:64:b2:e3:3e:49:5c:5b:d5:f9:2b:60:2d:31:
         10:55:a2:aa:d8:eb:d8:98:38:10:2f:51:6c:a2:f9:1d:c9:f5:
         2e:55:9e:0a:5b:e8:12:22:f6:df:a9:40:d7:85:cd:2f:0d:02:
         5b:c1:80:34:5f:fc:fe:85:a1:a6:ec:03:9d:9a:83:34:3f:7e:
         ec:cf:6d:25:d9:14:a6:6d:84:c3:33:bc:88:0e:10:d2:de:d5:
         68:69:5e:01:58:d4:05:4a:29:f0:5d:a5:d8:55:5e:ce:64:10:
         51:f6:71:82:56:d9:a6:00:8c:ba:15:50:45:ec:b4:4c:a7:e0:
         8d:90:66:23:3b:2b:c5:bb:e0:ec:b7:c7:09:63:cc:d4:d1:3d:
         43:90:97:f8:eb:36:8f:cc:90:40:f6:75:09:46:56:38:5b:1b:
         7d:ba:68:56:cc:15:eb:5f:a3:21:cf:f7:98:08:21:f5:70:b6:
         d0:65:98:a4:64:3a:ce:11:51:dd:90:1c:df:e0:38:6d:c4:e3:
         29:56:aa:32
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZt9W1P/yC/iYsreM0Hqw19PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj
MjAzMmUwHhcNMjYwMTAyMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2EyZTA3YzAwNmRjZDQyZWNjMDg2ZjA4MTY5MjRkNTAwOTgxMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN63fTdVD7XQ2Vep884W3uiCF/zS
apuU8/TV/kIz9vT3woWo59I3NrZ7vezl00dPbmNhJCHC567boUbF8AKokFt0Cz7j
MpwBXln+XacLp8m6VSbVRLk7vs2Bu/8tcRelmB3M84BvSOAz15bDAG2hZPc2GdZr
QXPBw3uz4bd/TGDV2wHPGoKhREdh9IFp74QLhC6IJWsbIB3IrMiBzll+w7/neYGP
6bqVqcCcD5b6xRLzbTQCfjt/vUfGS7t/7HZ96vSkKFTbSNzh0XTzJbTJUH7Rnd6o
UvM1uSLQo8AmeUn5gW7einnd/ssopY7P4hHqb+ybvyRzc2GZgwV0hjdd0QIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFFei4HwAbc1C7MCG8IFpJNUAmBH7MB8GA1UdIwQY
MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct
OWUyMjBmMDRhOTAxLzEvVjZMZ2ZBQnR6VUxzd0lid2dXa2sxUUNZRWZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx
LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBsDosAwQB
sDowMAwDBACwOjMDBACwOjQDBACwOjcDBACwOjkDBACwOjswDQYJKoZIhvcNAQEL
BQADggEBAECGQe10CNntLo8r0th9Hy1Hxq5zepmgUHAFd5uPdht5xe719fEgjuOw
LGalhfLyQTgBOMCHWK8RpfUJZLLjPklcW9X5K2AtMRBVoqrY69iYOBAvUWyi+R3J
9S5Vngpb6BIi9t+pQNeFzS8NAlvBgDRf/P6FoabsA52agzQ/fuzPbSXZFKZthMMz
vIgOENLe1WhpXgFY1AVKKfBdpdhVXs5kEFH2cYJW2aYAjLoVUEXstEyn4I2QZiM7
K8W74Oy3xwljzNTRPUOQl/jrNo/MkED2dQlGVjhbG326aFbMFetfoyHP95gIIfVw
ttBlmKRkOs4RUd2QHN/gOG3E4ylWqjI=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:43:49 2026 by rpki-client