This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa
File:                     ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa (raw, json)
Hash identifier:          mbBMJSTyfI2VzBuWzMkS287FyWqD5btpEmqCqBM0tFM=
Subject key identifier:   65:8F:D1:8F:57:DE:A2:4A:9C:1A:2D:C6:F0:BD:16:00:F9:74:90:8E
Certificate issuer:       /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial:       019C06518068D241A54E2EFCA93BA2C38E57
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa
Signing time:             Wed 28 Jan 2026 20:35:30 +0000
ROA not before:           Wed 28 Jan 2026 20:35:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51248
IP address blocks:        135.106.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:06:51:80:68:d2:41:a5:4e:2e:fc:a9:3b:a2:c3:8e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
        Validity
            Not Before: Jan 28 20:35:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=658fd18f57dea24a9c1a2dc6f0bd1600f974908e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:10:83:80:f9:7e:37:f8:c3:25:a8:96:ba:fc:
                    23:b4:90:1a:f4:66:18:a1:24:51:dc:59:34:36:34:
                    84:8e:85:a2:fc:1a:30:03:cf:97:e9:f6:7d:d4:f7:
                    0b:f1:e1:6d:39:e6:0a:6a:ea:17:55:f9:1f:bf:59:
                    48:e4:31:b2:2f:22:47:87:87:c9:81:8f:66:75:ad:
                    f2:cf:ff:75:f5:06:e0:e2:ad:16:b1:4c:f8:45:bb:
                    c3:5c:e1:47:aa:fe:e3:a9:46:b1:d3:9f:52:80:24:
                    06:bf:fe:42:e2:8a:eb:44:d2:fd:5e:23:f0:50:34:
                    77:07:18:83:17:c4:52:ef:ca:f9:a6:af:2f:5f:fd:
                    f0:a7:87:e4:1c:ce:47:6c:e5:49:c0:ee:06:0b:54:
                    b0:56:9f:69:a1:20:eb:b9:88:71:ae:ac:4b:7f:53:
                    4a:9f:c3:2d:5c:37:f0:0a:c5:50:d5:73:17:4d:52:
                    62:d9:0c:ed:7a:c8:73:db:e8:42:ab:1b:fa:63:47:
                    66:74:17:59:ae:2f:b0:94:81:17:96:85:9e:20:e5:
                    38:43:8e:2e:6f:5c:08:42:0a:65:6d:76:a5:4b:3b:
                    dc:e4:39:4f:05:5b:b8:70:19:d6:d6:c2:c9:c2:90:
                    3a:46:f5:ff:3e:34:50:44:61:40:fa:57:27:eb:8a:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:D1:8F:57:DE:A2:4A:9C:1A:2D:C6:F0:BD:16:00:F9:74:90:8E
            X509v3 Authority Key Identifier:
                keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ZY_Rj1feokqcGi3G8L0WAPl0kI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.106.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:40:0c:4a:23:b2:ff:1d:20:cd:fb:47:2c:39:c0:20:75:0b:
         9b:ba:c8:3f:65:e8:2a:d6:67:da:0a:7f:8e:d4:12:69:70:23:
         41:e2:1c:c7:87:20:dc:cc:1e:c5:e1:4a:a2:b9:1f:0b:dd:74:
         db:ab:06:80:86:ac:f2:fa:1c:e5:c5:42:27:02:6d:a7:43:c4:
         9e:58:a4:e4:8f:ae:71:c7:fb:dd:dc:0b:02:1c:1b:cd:16:fc:
         3c:3e:1d:00:bf:a6:ba:8d:fe:ed:bd:02:ec:73:d2:f5:4b:68:
         33:66:e7:6c:1a:cb:b3:64:f5:50:b2:12:65:80:28:bf:07:31:
         f9:81:39:62:9e:0b:f3:1a:84:85:f6:af:95:bc:fb:2c:45:f5:
         5c:28:30:a9:da:71:50:43:0e:11:fe:bf:ae:90:9a:f5:ed:15:
         27:c3:1e:96:b1:89:65:50:10:2a:3b:a6:29:ad:3f:c8:69:f7:
         97:fe:99:ed:e2:90:9f:a8:63:d5:40:19:74:4d:65:59:97:2e:
         05:9a:9e:e2:36:4b:72:b9:4a:eb:de:9b:4a:b9:78:82:2b:43:
         d9:c9:f5:e9:f0:7b:c0:c4:1f:65:de:c4:03:d1:82:99:1b:0e:
         f2:a7:20:83:cf:23:ea:32:ac:97:9e:c7:7a:c6:03:5e:98:96:
         09:9c:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 13:12:54 2026 by rpki-client