This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/Zd_S7TX7KyLf91f92bM72Q5m1hg.roa
File:                     Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (raw, json)
Hash identifier:          cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=
Subject key identifier:   65:DF:D2:ED:35:FB:2B:22:DF:F7:57:FD:D9:B3:3B:D9:0E:66:D6:18
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       019B7B35694F8F6C7F57CEEC96BFC99FFBF0
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/Zd_S7TX7KyLf91f92bM72Q5m1hg.roa
Signing time:             Thu 01 Jan 2026 20:17:36 +0000
ROA not before:           Thu 01 Jan 2026 20:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        83.137.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:69:4f:8f:6c:7f:57:ce:ec:96:bf:c9:9f:fb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Jan  1 20:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=65dfd2ed35fb2b22dff757fdd9b33bd90e66d618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:da:d7:f7:d6:a6:06:af:00:06:a8:7a:ff:
                    cc:b8:b1:b6:9e:5f:a8:ef:bf:37:e6:b6:72:f9:bd:
                    b6:86:5f:05:2e:3b:b3:51:ec:c5:13:2e:9e:c7:90:
                    57:ce:20:28:05:c3:ab:b3:61:d8:43:c9:fd:8e:2c:
                    32:af:17:59:a0:9b:ac:f9:35:71:01:eb:b1:15:7f:
                    d9:11:a5:a8:77:bd:90:be:8d:40:8d:e6:f0:ee:ae:
                    ad:8c:35:7b:40:37:e7:fa:c1:a0:49:a7:6c:3d:a2:
                    e1:59:bd:93:e4:34:67:ac:e6:61:52:80:78:3f:ff:
                    47:6e:8d:ab:ad:3e:dc:c8:1e:cf:bb:92:96:b5:67:
                    d9:48:d0:5f:86:f1:1b:7a:d3:b1:b6:20:2e:a3:1a:
                    5a:73:dd:a2:e0:01:2b:0b:d9:0f:6b:f7:e1:d5:4a:
                    8c:37:fb:12:c0:32:58:64:03:51:a5:b5:c2:8c:22:
                    8d:f8:19:b7:60:c1:b2:c9:74:36:52:08:5f:cd:36:
                    94:2f:90:02:c3:48:03:e5:6a:0d:57:96:56:22:71:
                    62:cd:68:7b:fa:67:2a:4f:88:0a:13:77:89:3c:77:
                    ee:8e:61:e9:d2:9f:8d:ca:c0:15:f9:a5:65:86:79:
                    10:8f:b4:41:c4:6a:0a:d7:af:c5:be:98:27:3c:b3:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:D2:ED:35:FB:2B:22:DF:F7:57:FD:D9:B3:3B:D9:0E:66:D6:18
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/Zd_S7TX7KyLf91f92bM72Q5m1hg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.137.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:ba:2b:74:02:07:d2:55:ad:bf:01:90:3e:38:c8:a8:b3:
         e0:9d:91:a8:08:3e:dd:63:24:ff:63:32:85:b8:13:f2:11:16:
         67:65:a6:a4:a2:2b:d1:f8:93:98:36:15:94:36:d1:a7:7b:ce:
         98:95:b5:d5:8a:65:74:cb:c9:e6:ec:bc:72:c3:50:cc:c5:23:
         78:66:42:83:c6:66:b7:69:ca:51:29:eb:a3:f5:f5:2e:f8:fa:
         ad:9c:27:b1:d0:ad:e4:0b:3e:e9:0b:76:70:f6:c3:51:bf:57:
         91:3e:80:9e:3c:e2:b6:3e:64:b0:73:b9:58:03:6a:e7:d1:cf:
         55:79:71:a5:c6:08:50:e2:82:21:7e:8c:ea:06:2c:c4:a7:a8:
         e6:a1:cd:df:7e:84:4c:62:c9:63:c8:14:43:6c:8e:1b:13:12:
         3d:d5:56:a2:ca:a9:65:fa:14:db:c6:a3:a2:01:71:d7:81:b5:
         b1:91:81:2b:26:98:5c:89:c0:39:0b:6b:ee:fb:1c:3e:52:b2:
         70:04:c3:cf:45:de:d9:5e:68:3d:d1:29:6b:80:16:27:b6:b6:
         37:3f:34:53:e4:61:4b:26:48:56:ab:34:60:e2:c9:73:b3:0d:
         0a:60:e2:a6:7b:71:fd:cd:73:ec:ab:c9:1d:cf:94:f9:79:82:
         90:bd:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:29:50 2026 by rpki-client