This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/akEqogxtHAqVR03zkYCOm-aG_GM.roa
File:                     akEqogxtHAqVR03zkYCOm-aG_GM.roa (raw, json)
Hash identifier:          a88/5df+rGTUXCIfyDlTTxx5c8A4SWmUb88YUmpaNBQ=
Subject key identifier:   6A:41:2A:A2:0C:6D:1C:0A:95:47:4D:F3:91:80:8E:9B:E6:86:FC:63
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       019B783497795F871A9546CFEEBB830D4D5A
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/akEqogxtHAqVR03zkYCOm-aG_GM.roa
Signing time:             Thu 01 Jan 2026 06:17:51 +0000
ROA not before:           Thu 01 Jan 2026 06:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1273
IP address blocks:        5.28.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:97:79:5f:87:1a:95:46:cf:ee:bb:83:0d:4d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Jan  1 06:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a412aa20c6d1c0a95474df391808e9be686fc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:a6:df:1e:4d:84:b6:44:dd:0c:71:39:fb:
                    04:5d:23:96:bb:35:dc:eb:db:d9:83:db:47:80:6f:
                    fc:01:65:14:6e:25:7e:c6:1f:e0:70:cc:e7:f7:3f:
                    a2:8a:ee:f6:c6:17:da:54:7f:01:1c:88:3a:20:57:
                    27:24:b2:63:fe:08:01:f2:67:57:1f:fc:91:63:46:
                    86:68:54:08:ee:e2:9a:5c:a4:49:d7:a6:2b:2a:d1:
                    62:09:90:4c:87:01:a3:70:18:89:49:cc:3f:a1:a7:
                    e7:98:d4:66:c6:1d:33:d9:ac:70:ba:03:52:be:f0:
                    34:1d:11:5a:b1:e9:9a:32:6b:ae:83:e6:ae:3a:b2:
                    89:c0:71:2b:3c:21:ed:e6:08:38:61:14:c0:6b:c1:
                    f2:3e:ca:b5:39:f2:13:f6:9c:1f:37:34:18:4a:0a:
                    d2:ae:9d:f6:da:b9:a1:f4:84:5e:8a:0e:9c:a7:65:
                    ed:21:0c:3f:ee:f8:28:8f:3a:b9:c0:c2:8d:e7:25:
                    2c:9d:4e:b6:2d:18:f1:37:f6:fb:91:0f:86:fd:ec:
                    fe:e2:c0:41:ba:c4:3a:5e:17:a5:a6:56:fc:e5:2b:
                    1d:e1:41:b2:53:41:4e:a7:d9:16:33:26:a3:fa:df:
                    3a:47:41:8b:6a:c6:5c:da:67:2b:9a:ae:5b:c5:cd:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:41:2A:A2:0C:6D:1C:0A:95:47:4D:F3:91:80:8E:9B:E6:86:FC:63
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/akEqogxtHAqVR03zkYCOm-aG_GM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.28.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:b8:42:86:45:1a:5a:bb:81:ec:d1:52:fc:e5:d6:a4:44:4a:
         c2:d6:52:e8:7b:08:bb:11:4f:53:27:a8:fe:a2:2e:6f:ca:53:
         8d:aa:ca:c2:f0:4f:70:c3:db:93:64:4b:78:c4:f1:55:c5:43:
         af:72:a1:d4:2e:72:95:a0:cc:f7:ee:03:5a:3d:7b:45:ea:a9:
         c3:9b:7c:17:c6:52:d8:1f:1e:35:3b:c6:90:78:5d:ae:1c:2a:
         d3:77:fb:12:93:a4:54:4d:07:f3:80:54:6f:59:a8:ec:1a:c3:
         d4:8f:51:30:48:96:c4:6e:d0:a6:fd:3b:4b:61:4e:1d:d7:79:
         85:d4:7c:33:00:5e:d7:6a:c6:b5:6f:82:58:f2:10:eb:40:b6:
         56:2a:2e:b9:fa:10:eb:35:ce:9b:47:a3:58:26:2b:04:2e:5c:
         de:a5:98:07:7d:69:47:98:d4:52:d2:26:ae:68:f8:b7:e8:af:
         e0:23:7a:31:19:38:36:93:1d:9b:4b:0e:3f:9f:68:cd:18:0f:
         53:8f:c7:24:d9:51:33:cf:55:da:99:af:60:81:77:a5:34:f6:
         7d:81:bc:1a:7f:a7:ac:97:6b:cb:2d:53:ff:ad:ed:1c:b7:87:
         0b:d2:ea:71:a7:83:bb:cc:71:ab:f8:f3:7b:f8:bc:cd:3b:cd:
         cd:af:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:08 2026 by rpki-client