This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/ZcwqCFu-ugccIfT-C61LOqP6Rms.roa
File:                     ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (raw, json)
Hash identifier:          zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=
Subject key identifier:   65:CC:2A:08:5B:BE:BA:07:1C:21:F4:FE:0B:AD:4B:3A:A3:FA:46:6B
Certificate issuer:       /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial:       019B7DCA71D2683BCD94F1A07FBDAD460E66
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/ZcwqCFu-ugccIfT-C61LOqP6Rms.roa
Signing time:             Fri 02 Jan 2026 08:19:38 +0000
ROA not before:           Fri 02 Jan 2026 08:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        62.146.255.0/24 maxlen: 24
                          145.63.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 02:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:71:d2:68:3b:cd:94:f1:a0:7f:bd:ad:46:0e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
        Validity
            Not Before: Jan  2 08:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=65cc2a085bbeba071c21f4fe0bad4b3aa3fa466b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:99:43:2f:a8:29:0b:ee:43:d9:e8:5f:ae:
                    62:f0:d1:d2:46:f6:b2:82:dc:db:c3:17:9e:32:f1:
                    77:4f:de:3d:f2:cd:f2:da:a9:e7:89:69:31:7e:dd:
                    b0:da:4a:11:a7:00:f1:0a:9b:5c:75:5d:cf:94:2c:
                    66:64:b8:5e:34:ed:45:ca:88:83:3a:84:84:47:8a:
                    7d:dd:b7:1e:56:54:44:f0:6d:1f:44:79:8b:89:e3:
                    2f:99:aa:fd:91:f8:31:48:0c:91:a4:29:79:73:20:
                    90:ff:f5:0d:db:37:9c:c7:ef:c9:a5:c9:45:a8:26:
                    9b:f3:bc:e3:59:1d:91:33:4a:40:08:4c:fd:61:bb:
                    57:f3:fd:6e:ff:7f:60:56:17:aa:73:49:76:cf:eb:
                    81:bc:a2:87:c2:ee:32:75:2d:d9:25:27:04:7f:b1:
                    e6:4b:dc:5e:e9:9e:0f:75:52:22:50:0f:c1:69:06:
                    02:d5:f9:84:e8:74:32:53:ce:e2:b9:4c:a8:b4:af:
                    16:a2:19:ce:91:6a:6e:28:df:0e:72:19:ab:b6:3d:
                    52:cd:d2:d3:d5:47:7a:5b:bd:49:02:34:8a:73:2a:
                    67:07:4f:d2:bd:8f:33:97:74:98:a8:44:68:e2:51:
                    47:17:2d:85:a4:fd:12:cc:9f:a4:87:a7:c6:2a:82:
                    34:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CC:2A:08:5B:BE:BA:07:1C:21:F4:FE:0B:AD:4B:3A:A3:FA:46:6B
            X509v3 Authority Key Identifier:
                keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/ZcwqCFu-ugccIfT-C61LOqP6Rms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.146.255.0/24
                  145.63.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:74:bc:a3:05:35:61:14:86:62:d7:79:7b:09:e2:c1:ee:
         b2:d6:c7:b8:1a:48:8b:12:3f:31:96:67:36:4d:3b:59:28:41:
         ca:5a:77:62:39:b4:be:bf:1b:1b:80:50:e0:bd:5f:2c:e9:6a:
         5f:13:56:3a:c3:8b:24:bd:5a:55:5e:b9:92:67:60:e5:33:ac:
         3a:65:05:ac:17:31:28:2a:19:9d:2c:22:02:9f:2e:56:fb:8b:
         71:0e:96:40:01:6d:10:68:7c:43:0c:1d:b0:95:b8:5a:79:3e:
         93:07:83:90:11:08:6a:da:78:73:2e:1a:70:df:d9:3b:76:7e:
         29:fa:de:f9:b0:21:37:3d:dd:20:ee:3e:70:a6:9e:f2:9d:62:
         de:f5:e0:dc:a7:9a:4f:88:e7:35:67:91:9f:5a:a7:49:de:cd:
         4a:41:5a:11:e9:16:77:f1:9b:ec:d7:34:7d:7f:ae:4d:e1:24:
         e6:bf:d2:d3:9c:20:08:18:e8:e2:d8:a2:8a:60:1c:61:83:32:
         7b:22:13:02:b4:a1:af:9f:74:46:fb:a3:92:5d:3c:32:5b:53:
         1f:aa:91:79:58:6a:ed:41:f5:b4:e2:a6:d7:4d:a6:3b:60:18:
         d7:36:3e:fd:91:51:f2:4b:ba:c9:f8:5c:44:f9:08:2e:34:9b:
         e6:5d:80:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:15 2026 by rpki-client