This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/Z4v6ZlvI7omARbhcez6_NDTJQb8.roa
File:                     Z4v6ZlvI7omARbhcez6_NDTJQb8.roa (raw, json)
Hash identifier:          UHj01S+GeMVO8OMw4/2M24W4FzNlf+cf+5/o/Mm/j6M=
Subject key identifier:   67:8B:FA:66:5B:C8:EE:89:80:45:B8:5C:7B:3E:BF:34:34:C9:41:BF
Certificate issuer:       /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial:       019B77C74EFC84C9CAA7A71D4F5F3CB5780E
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/Z4v6ZlvI7omARbhcez6_NDTJQb8.roa
Signing time:             Thu 01 Jan 2026 04:18:29 +0000
ROA not before:           Thu 01 Jan 2026 04:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59575
IP address blocks:        176.116.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:4e:fc:84:c9:ca:a7:a7:1d:4f:5f:3c:b5:78:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
        Validity
            Not Before: Jan  1 04:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=678bfa665bc8ee898045b85c7b3ebf3434c941bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:67:88:99:c4:6f:f0:eb:5c:95:cc:26:be:
                    5f:57:4e:a9:0d:3c:5b:94:67:aa:dc:71:52:b1:1a:
                    87:ad:9b:2e:a8:4a:a1:f1:fe:48:15:cc:d7:c7:96:
                    fb:8c:f9:f6:e3:99:11:12:60:6c:fc:14:32:e2:02:
                    e4:08:53:70:58:b6:6e:e6:4f:2a:68:65:66:44:26:
                    64:e0:71:96:da:eb:9b:af:cb:52:15:8d:78:00:a4:
                    0b:5d:d7:f1:20:ec:0d:18:74:21:c8:4d:cb:0b:8b:
                    d2:c1:43:68:75:14:69:06:c9:14:81:9e:7e:ec:d0:
                    ad:9c:df:1d:b1:c4:e8:98:5a:7c:d3:a7:ee:7c:0e:
                    6c:e2:f0:53:61:d9:39:31:61:8c:88:43:76:0f:c2:
                    03:87:39:34:86:cf:2f:6d:d2:e9:f2:c8:8a:e9:83:
                    be:1c:d2:c9:aa:2c:1f:66:f1:99:98:71:da:b2:63:
                    68:fe:03:ff:07:fc:49:c6:14:12:02:22:aa:0b:df:
                    0c:a1:12:a5:5d:78:a0:7f:c0:bf:33:3f:5c:a8:45:
                    48:7c:0f:f1:9c:e4:7d:46:17:d3:ca:d7:15:62:41:
                    38:cf:89:89:e5:1d:3f:36:77:4e:0f:44:df:bc:b0:
                    47:30:42:be:bc:d8:1a:fc:27:87:5b:e2:18:a4:57:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8B:FA:66:5B:C8:EE:89:80:45:B8:5C:7B:3E:BF:34:34:C9:41:BF
            X509v3 Authority Key Identifier:
                keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/Z4v6ZlvI7omARbhcez6_NDTJQb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:97:b8:47:bd:73:a9:af:bd:e3:21:eb:d9:3b:5a:41:33:da:
         ff:bc:c3:32:f8:b5:86:53:e8:14:f0:68:dc:31:da:4c:c0:6e:
         ba:f3:c9:93:c8:77:2c:29:59:e8:70:06:fc:a5:f9:ab:07:8d:
         7c:fb:f2:6c:2c:cd:5c:45:48:27:ea:ed:37:42:85:52:18:b6:
         f8:bf:a8:e5:66:e1:11:79:57:b3:93:8f:1c:e6:c7:e8:a2:18:
         dd:40:45:76:a9:91:35:b3:57:5e:a8:38:99:13:7d:45:67:83:
         42:97:a4:7e:26:91:3e:18:3c:2d:e9:88:df:9f:3a:1c:03:35:
         76:26:46:e5:2d:ec:dc:f9:2f:be:01:3f:3a:8a:02:03:a2:f5:
         a9:cd:40:86:5a:ae:9b:f1:8a:9c:79:d4:e1:5f:0f:f0:80:a7:
         d6:23:2e:02:96:ec:9b:a1:05:df:77:2b:b9:86:30:fc:4b:4b:
         9b:d0:80:bc:98:a1:78:30:34:51:b5:ea:0e:59:23:af:66:02:
         c9:d4:e0:4f:8f:0b:bf:84:3d:db:73:60:af:cb:0e:92:d4:b3:
         e5:93:3e:c0:3c:8e:15:91:22:9d:e6:bf:af:58:05:cd:b5:36:
         c8:5c:d0:c8:0e:28:5c:43:99:ff:bc:6e:c3:d9:bc:2f:af:7f:
         8e:96:81:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x078hMnKp6cdT188tXgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDViN2VjMWNiOGU4OTVhMjViZDRhYzY3YmMzMTY2NjE1
ZDhiNjIwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzhiZmE2NjViYzhlZTg5ODA0NWI4NWM3YjNlYmYzNDM0Yzk0MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1JniJnEb/DrXJXMJr5fV06pDTxb
lGeq3HFSsRqHrZsuqEqh8f5IFczXx5b7jPn245kREmBs/BQy4gLkCFNwWLZu5k8q
aGVmRCZk4HGW2uubr8tSFY14AKQLXdfxIOwNGHQhyE3LC4vSwUNodRRpBskUgZ5+
7NCtnN8dscTomFp806fufA5s4vBTYdk5MWGMiEN2D8IDhzk0hs8vbdLp8siK6YO+
HNLJqiwfZvGZmHHasmNo/gP/B/xJxhQSAiKqC98MoRKlXXigf8C/Mz9cqEVIfA/x
nOR9RhfTytcVYkE4z4mJ5R0/NndOD0TfvLBHMEK+vNga/CeHW+IYpFfjcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGeL+mZbyO6JgEW4XHs+vzQ0yUG/MB8GA1UdIwQY
MBaAFDkFt+wcuOiVolvUrGe8MWZhXYtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQt
ZDlhZWJlNDNlZjQyLzEvWjR2Nlpsdkk3b21BUmJoY2V6Nl9ORFRKUWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQtZDlhZWJlNDNlZjQy
LzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHSSMA0G
CSqGSIb3DQEBCwUAA4IBAQCxl7hHvXOpr73jIevZO1pBM9r/vMMy+LWGU+gU8Gjc
MdpMwG6688mTyHcsKVnocAb8pfmrB418+/JsLM1cRUgn6u03QoVSGLb4v6jlZuER
eVezk48c5sfoohjdQEV2qZE1s1deqDiZE31FZ4NCl6R+JpE+GDwt6YjfnzocAzV2
JkblLezc+S++AT86igIDovWpzUCGWq6b8YqcedThXw/wgKfWIy4CluyboQXfdyu5
hjD8S0ub0IC8mKF4MDRRteoOWSOvZgLJ1OBPjwu/hD3bc2Cvyw6S1LPlkz7API4V
kSKd5r+vWAXNtTbIXNDIDihcQ5n/vG7D2bwvr3+OloGx
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:47 2026 by rpki-client