This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa
File:                     JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (raw, json)
Hash identifier:          AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=
Subject key identifier:   25:98:44:A7:E4:23:FF:1A:E6:03:E8:55:9F:3D:FB:51:43:5D:32:04
Certificate issuer:       /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial:       019B7CEE2B27FA09C7A3DEA66FBB1BDBAA51
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa
Signing time:             Fri 02 Jan 2026 04:19:01 +0000
ROA not before:           Fri 02 Jan 2026 04:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216068
IP address blocks:        195.10.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:2b:27:fa:09:c7:a3:de:a6:6f:bb:1b:db:aa:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
        Validity
            Not Before: Jan  2 04:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=259844a7e423ff1ae603e8559f3dfb51435d3204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:e8:17:88:fe:43:62:03:f4:a6:c2:d9:f3:
                    b4:24:cf:4c:c0:72:37:21:27:59:eb:18:9b:4c:4b:
                    b4:fb:5a:3b:c4:d6:25:97:5e:74:b2:d0:9a:eb:37:
                    cd:ee:ab:d9:ca:16:b7:29:25:11:f8:5f:95:29:d6:
                    aa:e1:f8:a0:71:18:87:47:10:dc:2a:5c:e0:27:d0:
                    fc:f2:2c:9c:d1:87:5a:88:dd:2a:34:cf:e2:8d:6b:
                    cc:bf:14:fc:b3:3c:e7:ac:63:0f:3c:76:e3:44:af:
                    0f:20:9f:0c:fa:1c:cb:9f:13:3f:95:14:37:92:b8:
                    37:d1:29:fa:fb:22:d7:11:56:9a:6f:72:28:84:9c:
                    81:b8:8f:1e:d6:5e:8c:74:0d:06:5b:9c:75:7e:b8:
                    da:95:6b:b3:d6:83:c3:1e:ab:d9:16:5a:36:97:cb:
                    a3:ba:f6:76:68:e3:ec:3c:7d:55:b5:2b:6e:fc:a4:
                    ff:d5:f8:c9:a7:e1:f4:c6:f0:16:15:4c:f7:30:c5:
                    eb:f3:99:a2:76:01:ef:4f:79:a2:90:df:32:f5:85:
                    63:3f:3b:03:2a:6e:ac:32:1a:67:09:4a:ca:3d:75:
                    f4:a8:5f:38:9c:78:05:67:1d:35:74:7e:51:8a:26:
                    90:02:a8:7c:cd:a6:07:86:21:34:55:a9:ae:96:ab:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:98:44:A7:E4:23:FF:1A:E6:03:E8:55:9F:3D:FB:51:43:5D:32:04
            X509v3 Authority Key Identifier:
                keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.10.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:f7:a2:05:67:d1:72:06:7b:d6:aa:a6:ce:06:18:5c:b5:dc:
         17:62:ba:c8:c9:44:83:a1:d2:5c:73:c1:5c:d8:da:e5:0b:b9:
         49:bc:f6:79:64:82:fa:e7:82:d9:01:b3:4a:a1:1f:e9:7c:63:
         4c:d2:a6:1a:73:bc:52:3f:cd:49:84:75:fd:0f:a4:38:07:98:
         83:28:27:ed:a0:b8:0b:f7:ae:28:18:14:af:6f:47:04:6e:d4:
         81:18:af:ac:ee:ec:49:50:3b:33:8d:76:15:c0:ed:2c:cb:cc:
         fd:cc:6e:b1:28:a5:82:36:4c:4c:7e:b5:21:54:27:cd:a6:5a:
         2f:5c:8a:9b:a2:ce:f7:f0:12:fb:20:a6:d2:05:8a:5a:26:d4:
         c1:45:4f:43:44:d7:ff:cb:29:5e:dd:a4:e0:54:bf:ee:6b:98:
         d2:06:35:f4:03:50:9a:e8:4d:49:d0:06:89:2b:d7:19:e5:18:
         7c:86:5b:ed:5a:c7:99:40:80:50:a5:57:65:7d:f0:88:30:6b:
         18:8f:f0:c5:37:76:55:1c:f7:5b:ad:d7:d3:e2:20:e0:21:92:
         91:8c:52:f4:f6:d1:78:9f:7d:1f:11:55:ea:e7:ca:43:a3:67:
         26:73:f7:4e:33:c3:76:86:63:04:f8:df:b0:2e:20:83:17:11:
         25:f4:c6:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87isn+gnHo96mb7sb26pRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YThmMzQzNmZkODNlOGFmNjEwZjIxNjgwODk5NmU5MGFj
YWM3NWQwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTk4NDRhN2U0MjNmZjFhZTYwM2U4NTU5ZjNkZmI1MTQzNWQzMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpDoF4j+Q2ID9KbC2fO0JM9MwHI3
ISdZ6xibTEu0+1o7xNYll150stCa6zfN7qvZyha3KSUR+F+VKdaq4figcRiHRxDc
KlzgJ9D88iyc0YdaiN0qNM/ijWvMvxT8szznrGMPPHbjRK8PIJ8M+hzLnxM/lRQ3
krg30Sn6+yLXEVaab3IohJyBuI8e1l6MdA0GW5x1frjalWuz1oPDHqvZFlo2l8uj
uvZ2aOPsPH1VtStu/KT/1fjJp+H0xvAWFUz3MMXr85midgHvT3mikN8y9YVjPzsD
Km6sMhpnCUrKPXX0qF84nHgFZx01dH5RiiaQAqh8zaYHhiE0Vamulqu8IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWYRKfkI/8a5gPoVZ89+1FDXTIEMB8GA1UdIwQY
MBaAFKao80Nv2D6K9hDyFoCJlukKysddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTIt
YWJlNWM4ZTJiYWQ2LzEvSlpoRXAtUWpfeHJtQS1oVm56MzdVVU5kTWdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTItYWJlNWM4ZTJiYWQ2
LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwrBMA0G
CSqGSIb3DQEBCwUAA4IBAQCr96IFZ9FyBnvWqqbOBhhctdwXYrrIyUSDodJcc8Fc
2NrlC7lJvPZ5ZIL654LZAbNKoR/pfGNM0qYac7xSP81JhHX9D6Q4B5iDKCftoLgL
964oGBSvb0cEbtSBGK+s7uxJUDszjXYVwO0sy8z9zG6xKKWCNkxMfrUhVCfNplov
XIqbos738BL7IKbSBYpaJtTBRU9DRNf/yyle3aTgVL/ua5jSBjX0A1Ca6E1J0AaJ
K9cZ5Rh8hlvtWseZQIBQpVdlffCIMGsYj/DFN3ZVHPdbrdfT4iDgIZKRjFL09tF4
n30fEVXq58pDo2cmc/dOM8N2hmME+N+wLiCDFxEl9MZb
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:11 2026 by rpki-client