This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ZGPQKEDVE9F1MV2KWCts_BoufGk.roa
File:                     ZGPQKEDVE9F1MV2KWCts_BoufGk.roa (raw, json)
Hash identifier:          epehMPMwEjYywMBrhnF1PZ/wa0g0S9LNY7+R460jN/I=
Subject key identifier:   64:63:D0:28:40:D5:13:D1:75:31:5D:8A:58:2B:6C:FC:1A:2E:7C:69
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       019B791022123577856631BF8A30719432D4
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ZGPQKEDVE9F1MV2KWCts_BoufGk.roa
Signing time:             Thu 01 Jan 2026 10:17:39 +0000
ROA not before:           Thu 01 Jan 2026 10:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203909
IP address blocks:        193.228.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:22:12:35:77:85:66:31:bf:8a:30:71:94:32:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Jan  1 10:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6463d02840d513d175315d8a582b6cfc1a2e7c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:f5:19:6a:07:de:1c:7e:2d:0c:46:8c:3f:
                    1e:cf:95:3f:d6:32:f3:7f:53:03:27:a5:65:52:f5:
                    b1:57:31:3f:66:bd:2b:16:6f:e8:56:55:02:18:19:
                    56:ef:dd:26:4b:b0:6f:cc:45:0a:e7:be:52:e1:c1:
                    3d:1f:2c:50:09:7c:44:96:bf:17:9f:b7:bf:3c:37:
                    51:22:44:02:39:b8:07:17:41:36:26:ee:10:ae:b2:
                    76:5e:c7:a8:82:ed:1f:68:4e:63:30:c0:87:20:d3:
                    0a:f8:9c:c6:cd:ad:7a:9f:33:24:41:85:59:bd:3e:
                    e2:f7:70:a3:e9:37:84:55:e2:a0:8e:2f:af:4b:87:
                    02:83:81:df:2e:ba:16:99:a1:90:bd:bc:be:61:ec:
                    e7:81:2a:40:b6:f0:3f:64:73:fb:97:d3:1c:04:19:
                    44:d5:fe:f4:35:d6:3d:a5:9a:bf:d8:91:fd:a5:44:
                    7d:97:9e:4e:63:3e:d1:8e:93:30:fd:55:42:05:a2:
                    d6:59:d0:dd:4a:7f:23:19:ff:77:b1:1e:20:87:0a:
                    41:d2:15:24:ce:7c:db:f7:0a:9f:a4:b7:e1:97:d0:
                    e6:1c:ad:92:45:11:50:4f:17:84:46:1f:d3:de:23:
                    01:ad:16:70:2f:e6:e1:a4:33:2e:ba:e2:41:25:25:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:63:D0:28:40:D5:13:D1:75:31:5D:8A:58:2B:6C:FC:1A:2E:7C:69
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ZGPQKEDVE9F1MV2KWCts_BoufGk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a5:5f:2d:a1:6a:e7:ee:c6:57:66:c6:ec:d5:71:90:92:d6:
         7f:a0:dd:69:a4:66:27:c6:85:91:70:d6:75:1e:09:13:6a:6c:
         e2:d9:34:56:7e:46:d1:29:a5:5d:b3:21:69:7b:b1:c8:81:08:
         e1:11:85:cc:e8:c4:ab:88:83:c0:90:89:61:c6:3b:e9:9e:dd:
         82:a5:e2:f3:09:3b:fc:c5:bb:d5:5f:73:8b:8a:b7:2b:7a:70:
         9a:fe:7e:09:95:ee:fa:9a:9b:2c:67:59:e0:6d:27:2d:e0:25:
         e4:dd:71:5e:59:3c:86:8c:ed:be:1f:fc:a5:33:ec:66:59:20:
         b9:49:2a:ee:cc:ab:a4:42:5f:92:76:2b:5d:37:e5:ad:71:af:
         e7:1e:e2:8a:2f:ea:25:82:c3:31:9a:53:96:84:68:b3:5d:1c:
         13:99:51:6b:ea:75:9f:6f:63:ac:4b:8b:8f:9b:23:c4:ff:c3:
         a2:48:9f:73:90:ab:6d:77:5a:f2:99:b0:ec:44:61:f3:bf:00:
         35:1d:ff:bb:6c:52:7b:cf:81:94:99:e5:cf:d2:d4:0f:de:16:
         4b:97:53:e3:5e:d3:9a:29:a0:88:c1:1c:d8:81:3b:8e:03:32:
         43:7a:69:49:25:60:dd:54:dd:18:51:60:12:26:b9:cc:12:61:
         b9:f3:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 03:40:00 2026 by rpki-client