This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa
File:                     Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa (raw, json)
Hash identifier:          cX3SHtsA6en06iCixY5R2bJ4JkNrPHapCKFUbAImPoA=
Subject key identifier:   67:A1:29:B0:F1:47:65:7F:59:A1:3E:E9:6F:BC:29:4D:D4:3E:F0:1E
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019B7D5A9A16C85DACFF8A27621405ED3E61
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa
Signing time:             Fri 02 Jan 2026 06:17:28 +0000
ROA not before:           Fri 02 Jan 2026 06:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55933
IP address blocks:        213.176.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:9a:16:c8:5d:ac:ff:8a:27:62:14:05:ed:3e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan  2 06:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=67a129b0f147657f59a13ee96fbc294dd43ef01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:45:af:b0:d9:18:17:94:dc:09:8b:40:64:0e:
                    c0:5f:60:d3:91:0d:45:e9:7e:e4:e3:4f:10:34:13:
                    c1:b6:95:11:46:61:dc:4b:8a:4f:b7:fd:6a:7c:29:
                    da:8a:22:27:0a:14:f1:57:cb:fd:ee:ad:d8:ff:ae:
                    3a:33:0a:83:ea:97:71:a7:29:7e:8d:3c:88:c5:26:
                    17:ae:04:f4:c6:6e:0c:c2:03:87:99:34:c3:a9:1a:
                    b5:a2:67:ab:0b:aa:e5:8e:37:d6:df:4b:86:69:fd:
                    56:8d:58:88:2c:dd:49:bc:a4:fe:7e:06:dd:49:da:
                    66:d9:7e:e7:6f:7f:85:32:7b:4e:e9:1a:43:20:e3:
                    f5:8b:d7:ec:16:85:d7:b3:bd:20:c4:c3:e5:18:f0:
                    da:93:31:0e:b5:bf:cb:b6:01:11:5a:32:00:af:00:
                    53:b5:59:31:d6:2f:7e:8d:26:b7:0e:bc:46:b9:36:
                    23:e7:67:6a:87:f3:40:d0:a6:3c:91:12:3d:18:fd:
                    25:47:26:d1:38:6d:ba:f8:68:1e:23:69:11:42:84:
                    c2:7a:13:b0:2c:8a:70:b1:ad:46:24:9c:1b:80:60:
                    5f:de:15:2b:56:c0:c5:8c:d2:a9:de:26:95:b6:0f:
                    60:2b:2f:03:95:6a:f8:b0:32:7e:b3:d1:95:a9:f1:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A1:29:B0:F1:47:65:7F:59:A1:3E:E9:6F:BC:29:4D:D4:3E:F0:1E
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Z6EpsPFHZX9ZoT7pb7wpTdQ-8B4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.176.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:2a:d2:b3:c0:fa:49:64:66:37:c1:40:5c:70:a4:7a:e4:84:
         af:27:90:1b:4c:da:da:68:3c:70:d1:60:bf:f4:a6:83:54:50:
         e3:e6:f0:46:97:55:42:d6:a9:22:dc:fb:a1:20:60:d8:64:f6:
         eb:da:1f:2d:14:ad:29:10:c8:68:49:73:ae:9b:cb:d8:f6:00:
         da:c1:06:d2:fd:c5:e1:39:71:d9:d1:18:0d:50:be:59:f6:83:
         3b:5f:8e:38:96:8d:fa:93:14:41:f3:7e:b7:92:fd:15:fa:54:
         c7:39:31:f6:4a:06:44:ec:59:a5:0b:42:8d:9f:40:be:6e:1f:
         3f:8e:7f:51:18:42:af:29:ab:68:34:c3:ef:56:5e:92:e3:bd:
         7c:33:6d:13:74:40:61:7a:c3:e1:28:ec:ee:45:53:17:18:cb:
         42:67:98:90:12:a1:c3:ee:a1:90:c2:99:78:32:07:0a:aa:41:
         50:7b:ac:ad:8b:1e:c4:bf:64:20:dd:e9:05:fa:6d:7c:d6:3f:
         8f:b5:a9:4c:47:82:ad:41:07:0f:d9:19:93:6c:c0:b0:4b:6f:
         bd:66:9a:fe:75:4b:28:65:f9:bd:4f:5d:b1:34:68:b7:a6:69:
         94:37:3f:4b:f0:a6:36:fa:38:99:30:c4:70:b3:aa:ec:44:89:
         84:3f:d8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:08:31 2026 by rpki-client