This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/zO3LOujTyQrqgjACwCas72KgoSk.roa
File:                     zO3LOujTyQrqgjACwCas72KgoSk.roa (raw, json)
Hash identifier:          6p5B/dq4WILGBIMaHKd//dbp8ITI+l4IZk/Fi6tJX1A=
Subject key identifier:   CC:ED:CB:3A:E8:D3:C9:0A:EA:82:30:02:C0:26:AC:EF:62:A0:A1:29
Certificate issuer:       /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial:       019C42FB52B8450F712AAC1174324BB6F507
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/zO3LOujTyQrqgjACwCas72KgoSk.roa
Signing time:             Mon 09 Feb 2026 15:18:12 +0000
ROA not before:           Mon 09 Feb 2026 15:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214025
IP address blocks:        194.59.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:fb:52:b8:45:0f:71:2a:ac:11:74:32:4b:b6:f5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
        Validity
            Not Before: Feb  9 15:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ccedcb3ae8d3c90aea823002c026acef62a0a129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:db:75:4b:55:e5:df:2d:8a:e0:e5:a8:78:
                    78:fa:f2:6d:2b:73:67:57:df:56:5f:0e:d9:1b:ea:
                    2a:c3:aa:37:59:a4:c2:0c:49:ef:36:71:ac:5d:32:
                    57:09:7e:54:c3:0b:3e:68:d7:0f:9a:a4:e7:70:27:
                    c0:8d:38:ad:b2:51:c9:69:6b:fb:da:53:b2:db:03:
                    ed:39:b6:6f:77:29:d1:ee:9d:e9:34:d6:7f:0c:87:
                    09:ca:d9:cb:fc:2c:29:e2:70:2e:aa:30:19:47:9f:
                    cd:ec:52:a2:7a:77:bc:c5:8a:cf:c7:26:85:5b:e1:
                    b8:ed:2a:89:5f:c4:17:97:62:1c:a1:3c:35:4e:d8:
                    dc:fe:8a:70:56:76:32:7c:bf:d7:85:0e:82:a9:c5:
                    24:fc:7d:02:75:f2:71:cb:b9:b5:e5:c2:2f:29:4f:
                    c3:d9:07:71:b7:85:26:30:da:f6:03:b8:93:11:13:
                    83:a5:76:ec:fc:4d:c9:3e:95:c4:82:fb:f3:3a:a9:
                    e1:a5:36:65:59:a2:19:28:47:a4:89:67:0b:37:b2:
                    72:9a:22:f2:e6:ef:75:13:fd:f0:18:6a:ee:07:8d:
                    99:39:10:18:a6:51:18:ca:5e:34:03:e7:23:03:51:
                    12:d5:7d:df:57:e2:cd:f3:2a:1f:6e:2e:33:3b:e2:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:ED:CB:3A:E8:D3:C9:0A:EA:82:30:02:C0:26:AC:EF:62:A0:A1:29
            X509v3 Authority Key Identifier:
                keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/zO3LOujTyQrqgjACwCas72KgoSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:7e:c3:7d:a0:5f:ff:8e:a2:30:2f:21:eb:2d:e7:d5:f8:10:
         5e:e4:5e:16:c9:5f:3d:11:69:36:07:80:fb:08:dc:5f:ec:f5:
         f9:58:01:f7:ba:9d:6e:77:c7:c6:4c:2b:68:44:6b:4a:8c:f9:
         71:00:74:dc:09:fe:a5:1f:74:09:8e:00:28:3c:2c:2e:7f:a4:
         65:a2:49:ca:55:e9:a1:3c:bf:1f:b7:03:f0:4a:03:08:9d:23:
         d4:ed:35:47:32:cc:fb:38:e4:9c:1c:4a:58:5a:82:89:10:e2:
         bb:bd:70:22:4d:13:01:bd:a8:fa:cd:b0:b8:56:f8:eb:00:57:
         ac:51:93:e5:11:7f:44:49:bb:04:af:7e:bf:bd:3d:74:4d:90:
         d0:fc:ae:d2:60:16:ec:8e:15:92:0d:ae:f0:0e:71:ea:a0:e2:
         07:bb:3a:6c:cd:7b:65:47:6c:72:8c:4e:50:19:79:57:84:f8:
         15:30:0e:f5:b3:d5:47:79:7a:82:a5:2a:7f:b2:5b:cf:1d:f0:
         8b:80:d2:bf:75:1b:11:6d:02:2b:cf:14:45:90:5b:8f:ed:f5:
         f0:b7:c0:50:b7:ea:2c:2f:6d:ce:8c:5a:b1:6c:54:13:ee:22:
         62:b9:23:07:82:83:48:e0:33:ec:21:bb:c4:1f:e0:e0:61:4e:
         83:6a:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 20:02:13 2026 by rpki-client