This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/jsanitEq0EQzEoP-koTj7RMMQyI.roa
File:                     jsanitEq0EQzEoP-koTj7RMMQyI.roa (raw, json)
Hash identifier:          CH0iu1++iAldc7IvIKXIHNPTTc8uHt4Xf+q2a+oCLdQ=
Subject key identifier:   8E:C6:A7:8A:D1:2A:D0:44:33:12:83:FE:92:84:E3:ED:13:0C:43:22
Certificate issuer:       /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial:       019B7758B1491DE26E3ECDA2035CFF38C559
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/jsanitEq0EQzEoP-koTj7RMMQyI.roa
Signing time:             Thu 01 Jan 2026 02:17:39 +0000
ROA not before:           Thu 01 Jan 2026 02:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44575
IP address blocks:        92.63.80.0/24 maxlen: 24
                          92.63.81.0/24 maxlen: 24
                          92.63.82.0/24 maxlen: 24
                          92.63.83.0/24 maxlen: 24
                          92.63.84.0/24 maxlen: 24
                          92.63.86.0/24 maxlen: 24
                          92.63.88.0/24 maxlen: 24
                          92.63.92.0/24 maxlen: 24
                          92.63.93.0/24 maxlen: 24
                          193.110.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:b1:49:1d:e2:6e:3e:cd:a2:03:5c:ff:38:c5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
        Validity
            Not Before: Jan  1 02:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ec6a78ad12ad044331283fe9284e3ed130c4322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0c:13:68:c1:7e:80:20:ff:d3:80:b3:f5:cb:
                    30:7f:00:cf:86:2d:00:fd:24:04:c3:d5:fb:53:54:
                    e1:d8:14:c9:00:bd:58:56:f0:de:ac:89:c4:11:05:
                    37:fc:a7:b8:d8:21:7d:1c:88:18:ae:41:ef:ef:7c:
                    46:b9:d3:ce:5f:4b:9e:98:58:48:fd:4e:02:34:de:
                    9c:f8:d8:72:52:48:b4:6f:e5:03:fc:d5:fa:0c:d3:
                    f0:f1:e9:12:7b:a3:ae:ea:8b:2a:5f:43:73:7d:2a:
                    c2:cf:af:99:3e:98:40:b6:57:ef:a3:5a:2f:4b:47:
                    9c:00:f4:51:3f:6a:1b:ba:28:86:af:ad:1a:33:29:
                    bf:04:38:5b:3d:dd:b6:4c:43:68:95:ab:c0:22:8e:
                    07:0d:63:58:a7:ad:30:12:fb:db:47:e3:e4:73:0f:
                    54:09:b1:f3:92:98:d9:52:7a:44:28:22:6b:8c:3a:
                    22:c5:f4:24:a1:34:84:d1:48:ec:a2:ff:d7:6a:05:
                    d1:96:bb:6a:0c:b2:ab:e0:80:61:be:41:aa:df:4e:
                    03:2e:d8:26:3b:5b:ca:09:d4:fe:a0:48:43:d9:2e:
                    90:98:1a:01:63:cc:53:a9:aa:1b:79:53:dc:07:cb:
                    5c:f8:b7:17:4a:e6:93:ec:fb:ec:ae:40:3e:82:6b:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C6:A7:8A:D1:2A:D0:44:33:12:83:FE:92:84:E3:ED:13:0C:43:22
            X509v3 Authority Key Identifier:
                keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/jsanitEq0EQzEoP-koTj7RMMQyI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.80.0-92.63.84.255
                  92.63.86.0/24
                  92.63.88.0/24
                  92.63.92.0/23
                  193.110.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:e6:db:f1:31:2a:13:97:2f:06:c7:47:a4:d3:1f:c6:06:d0:
         94:21:d9:09:75:45:b5:5c:ca:ec:90:d0:c1:a5:5c:c5:47:f5:
         95:79:22:05:d4:3f:5a:78:3d:05:46:65:41:82:fa:15:59:51:
         24:9f:04:2f:db:50:3d:e5:6e:84:75:fa:ba:0c:55:92:2b:f1:
         9b:08:a4:c8:d2:1e:ee:63:71:85:d7:e5:9e:36:d1:87:e6:35:
         29:e0:44:4e:e9:69:a7:25:70:3c:51:cb:94:e6:19:f0:ce:67:
         8f:3e:e2:55:e3:18:91:02:17:c4:ce:fb:64:54:b9:95:d9:c0:
         09:15:59:8b:f5:b5:05:eb:36:66:59:8d:94:9c:cf:fb:30:e5:
         6f:ef:52:04:8f:de:d9:7b:9c:fc:49:29:d1:4e:f8:20:8e:42:
         a8:8a:fc:d7:f7:0b:20:be:f2:d6:d5:81:89:08:ec:10:3d:4a:
         21:fc:61:41:89:88:86:cf:f8:a7:b1:e2:fe:fb:d8:d5:0f:64:
         31:ff:40:e1:bd:48:14:1d:4a:e1:79:6e:6a:02:d7:dc:a5:3e:
         c9:23:a5:b7:ec:b1:94:d0:4c:12:97:94:aa:9c:fd:56:fa:d4:
         a5:cd:c4:84:8c:60:5e:b9:25:a1:5d:a2:2e:c5:de:d4:99:af:
         59:d8:6a:d4
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZt3WLFJHeJuPs2iA1z/OMVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTA0ZTRmN2Q5ZjM4ZDhlMjJhMmQzMmJlMDE5MDMxOTMw
YzFhNDcwHhcNMjYwMTAxMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWM2YTc4YWQxMmFkMDQ0MzMxMjgzZmU5Mjg0ZTNlZDEzMGM0MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QwTaMF+gCD/04Cz9cswfwDPhi0A
/SQEw9X7U1Th2BTJAL1YVvDerInEEQU3/Ke42CF9HIgYrkHv73xGudPOX0uemFhI
/U4CNN6c+NhyUki0b+UD/NX6DNPw8ekSe6Ou6osqX0NzfSrCz6+ZPphAtlfvo1ov
S0ecAPRRP2obuiiGr60aMym/BDhbPd22TENolavAIo4HDWNYp60wEvvbR+Pkcw9U
CbHzkpjZUnpEKCJrjDoixfQkoTSE0Ujsov/XagXRlrtqDLKr4IBhvkGq304DLtgm
O1vKCdT+oEhD2S6QmBoBY8xTqaobeVPcB8tc+LcXSuaT7PvsrkA+gmtpGQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFI7Gp4rRKtBEMxKD/pKE4+0TDEMiMB8GA1UdIwQY
MBaAFGYQTk99nzjY4iotMr4BkDGTDBpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQt
NDc0NzJlZDNiZWNiLzEvanNhbml0RXEwRVF6RW9QLWtvVGo3Uk1NUXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQtNDc0NzJlZDNiZWNi
LzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBARcP1AD
BABcP1QDBABcP1YDBABcP1gDBAFcP1wDBAHBbqQwDQYJKoZIhvcNAQELBQADggEB
ADTm2/ExKhOXLwbHR6TTH8YG0JQh2Ql1RbVcyuyQ0MGlXMVH9ZV5IgXUP1p4PQVG
ZUGC+hVZUSSfBC/bUD3lboR1+roMVZIr8ZsIpMjSHu5jcYXX5Z420YfmNSngRE7p
aaclcDxRy5TmGfDOZ48+4lXjGJECF8TO+2RUuZXZwAkVWYv1tQXrNmZZjZScz/sw
5W/vUgSP3tl7nPxJKdFO+CCOQqiK/Nf3CyC+8tbVgYkI7BA9SiH8YUGJiIbP+Kex
4v772NUPZDH/QOG9SBQdSuF5bmoC19ylPskjpbfssZTQTBKXlKqc/Vb61KXNxISM
YF65JaFdoi7F3tSZr1nYatQ=
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:42 2026 by rpki-client