This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/Zopjwe1rzd92yl72g_6NHQcrS2g.roa
File:                     Zopjwe1rzd92yl72g_6NHQcrS2g.roa (raw, json)
Hash identifier:          nDvQP9lRFjKHJxmHIMp23P7uE0RhUeA887SfeMIm2EU=
Subject key identifier:   66:8A:63:C1:ED:6B:CD:DF:76:CA:5E:F6:83:FE:8D:1D:07:2B:4B:68
Certificate issuer:       /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial:       019B79ED4BDE181FE7B2EC34B24B3B8CB1CC
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/Zopjwe1rzd92yl72g_6NHQcrS2g.roa
Signing time:             Thu 01 Jan 2026 14:19:13 +0000
ROA not before:           Thu 01 Jan 2026 14:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202329
IP address blocks:        45.140.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:4b:de:18:1f:e7:b2:ec:34:b2:4b:3b:8c:b1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
        Validity
            Not Before: Jan  1 14:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=668a63c1ed6bcddf76ca5ef683fe8d1d072b4b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:cf:17:f4:9a:ce:f4:83:15:b8:fa:8c:14:
                    98:3f:52:1f:f0:db:b3:05:8d:df:d7:4e:44:20:da:
                    1e:08:c2:19:ef:b1:3e:e3:a7:70:e9:1d:81:91:ba:
                    6a:4b:c2:6b:4f:51:70:48:80:20:e0:17:25:d4:28:
                    76:cb:43:11:87:3d:9a:f1:58:3c:59:9a:a9:5e:38:
                    ce:3b:2e:af:f0:e9:ed:cc:49:0f:77:7c:17:12:9a:
                    21:d8:1e:5c:9c:87:d9:d8:2d:1a:95:77:0b:87:b8:
                    0d:a1:b6:db:d4:fd:1f:d6:21:5e:a3:51:a9:c9:54:
                    1c:59:98:b6:a3:0d:e3:57:ad:b2:af:88:1a:2c:ea:
                    4b:e6:69:5f:50:27:39:74:2a:90:52:ec:cf:6d:74:
                    36:5d:7c:bb:a0:66:c3:85:02:1b:34:e3:27:9f:87:
                    b5:5e:8b:58:ec:78:49:b7:85:fd:fd:91:7b:8f:b1:
                    bd:27:b6:df:0b:41:0b:87:5e:d0:f1:37:a1:a2:93:
                    6b:26:73:77:e8:48:42:4f:b5:1e:f9:f1:c8:a6:c5:
                    74:93:79:9a:22:60:63:e8:0d:95:a8:4a:d4:bf:e4:
                    07:ab:bc:8b:ae:10:68:ac:c7:ef:b5:db:dd:30:25:
                    c8:4c:63:21:75:3c:0c:3e:0f:6d:f6:60:45:aa:74:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8A:63:C1:ED:6B:CD:DF:76:CA:5E:F6:83:FE:8D:1D:07:2B:4B:68
            X509v3 Authority Key Identifier:
                keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/Zopjwe1rzd92yl72g_6NHQcrS2g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:98:9f:cc:cf:36:fa:6c:9d:fa:ea:bb:b7:8d:c4:30:69:b5:
         7b:b4:5d:d0:01:d9:cb:dc:c6:b3:e2:87:9b:c2:97:05:e2:3b:
         f2:ee:fa:58:16:64:21:3a:ab:a4:43:a5:27:b7:ca:5a:fd:0e:
         52:cf:c2:01:34:f1:ea:35:15:f3:3c:81:10:af:1a:2f:44:13:
         3c:4b:78:b3:ad:cf:8c:97:a8:03:aa:09:7e:2e:a7:24:be:05:
         46:2c:53:75:52:6c:0c:a1:54:4d:7a:42:2c:71:68:d2:75:46:
         7e:9f:4c:07:76:a7:95:b0:61:71:3a:68:ef:58:18:88:b7:e6:
         1f:56:d8:ab:50:7b:4b:ec:d1:42:8c:9a:be:e4:bb:34:ef:48:
         6e:55:2b:4b:70:f2:a1:1e:ab:83:5d:69:62:f5:c1:86:d6:61:
         c2:21:57:22:14:c4:f3:51:6d:9b:86:b7:09:e6:1f:ae:86:59:
         26:6e:2b:c6:be:49:a5:a6:d2:19:2b:89:ff:7a:2b:35:8e:d2:
         8b:b7:93:93:ad:99:f2:13:4c:ae:c3:e1:cc:ee:00:10:b1:ce:
         91:32:c1:16:78:08:eb:0e:1b:33:77:66:16:8e:2f:bd:f5:2e:
         58:b6:99:65:01:91:7a:be:90:e0:54:0f:ec:03:30:04:15:d8:
         b4:bb:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:51:34 2026 by rpki-client