This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/zote-bU43Xc3L_TsvE3s0Qqd22g.roa
File:                     zote-bU43Xc3L_TsvE3s0Qqd22g.roa (raw, json)
Hash identifier:          C40MNHbMRurC40NZMuiNePjAq8avbr212pcusOQWouU=
Subject key identifier:   CE:8B:5E:F9:B5:38:DD:77:37:2F:F4:EC:BC:4D:EC:D1:0A:9D:DB:68
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       019C227E077B617BE703B4C6CCAFF5D189C4
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/zote-bU43Xc3L_TsvE3s0Qqd22g.roa
Signing time:             Tue 03 Feb 2026 07:53:30 +0000
ROA not before:           Tue 03 Feb 2026 07:53:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     26769
IP address blocks:        185.253.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:22:7e:07:7b:61:7b:e7:03:b4:c6:cc:af:f5:d1:89:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Feb  3 07:53:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce8b5ef9b538dd77372ff4ecbc4decd10a9ddb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:71:f0:d4:c7:85:08:c2:cd:96:fe:a6:26:
                    77:c4:f7:36:23:cb:ed:90:41:9c:45:2f:61:69:af:
                    8d:1f:23:20:f4:71:63:26:e7:bf:f8:6d:a5:c5:3d:
                    43:04:9b:e2:cf:fc:1a:8a:fe:a5:48:40:bb:de:88:
                    25:61:0b:c3:bf:b3:90:25:ae:65:69:2e:53:c1:94:
                    ad:27:33:f5:40:62:56:49:30:16:44:7e:38:fc:91:
                    8e:66:ed:b2:e2:2b:55:79:da:fd:c4:d2:8f:1b:1f:
                    22:f3:92:eb:2c:b7:0c:e1:5c:fd:75:a4:fd:26:fb:
                    61:4f:c8:92:42:69:10:a7:8a:72:29:57:13:f3:c7:
                    51:b1:8d:47:54:92:e5:9d:64:0f:bd:d2:0d:b8:04:
                    dd:da:da:6c:8d:32:1f:e6:00:dd:3e:5a:ec:53:cd:
                    d9:47:cd:8d:27:a9:c8:a6:d5:bf:46:cd:81:8e:f2:
                    c4:c5:05:88:cf:07:1e:5f:39:7b:86:52:08:7d:41:
                    f7:84:ac:4b:5b:93:3a:4c:4a:54:10:d0:53:b1:6d:
                    42:38:ba:e3:0d:64:e1:da:49:51:70:f6:5f:aa:6d:
                    34:d5:6b:f4:57:81:93:7f:9e:84:13:2c:cc:70:39:
                    97:91:ff:92:03:50:45:73:f1:3d:7a:03:04:10:6c:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8B:5E:F9:B5:38:DD:77:37:2F:F4:EC:BC:4D:EC:D1:0A:9D:DB:68
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/zote-bU43Xc3L_TsvE3s0Qqd22g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:9f:1d:05:d2:06:b0:d6:ac:39:0f:50:3b:ba:59:de:65:9b:
         b9:a1:83:b2:51:80:7f:9e:d4:8d:0f:10:35:d4:29:ad:a8:63:
         4d:a9:ae:e5:10:6e:13:a1:fc:6f:fc:ae:eb:14:f0:0e:b3:76:
         29:ab:dd:33:e7:9e:85:a8:59:a0:2f:e8:cf:f6:9f:07:43:6e:
         f8:98:2b:a4:35:ad:2c:18:4c:3d:49:6c:d8:6a:f3:d0:df:b4:
         89:c6:00:b9:89:45:5b:a3:c1:6f:c6:99:27:48:fb:0c:53:96:
         15:9b:66:2e:78:f0:fb:8d:bb:98:b3:27:77:13:cc:69:a9:7b:
         51:50:58:72:82:8d:60:d3:6c:e8:93:da:31:10:0d:4d:fc:2e:
         05:63:d6:7d:1d:90:1f:12:e7:44:36:d5:58:b3:83:22:e7:dc:
         ed:0f:47:a6:85:df:7b:40:e1:8b:e2:6b:e3:8a:ad:93:88:d6:
         8b:a4:64:d6:fc:d6:d5:14:36:1a:6d:37:14:84:37:bd:64:cf:
         63:9a:a3:84:64:fa:0a:aa:d8:89:c0:27:22:a2:9b:71:51:e1:
         56:7d:41:d4:e7:2b:72:2e:b3:b1:a2:aa:f5:d2:5f:b7:2c:d4:
         d6:aa:99:7a:18:67:4d:df:87:f8:1a:5e:eb:cd:db:b2:9e:37:
         4c:7f:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:56 2026 by rpki-client