This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/Ralz59ZNhkowCSRq7nWfwQexXQY.roa
File:                     Ralz59ZNhkowCSRq7nWfwQexXQY.roa (raw, json)
Hash identifier:          3tmPipc3I05STv4thnRFgrqp/af0hKCpEUtzU540eWY=
Subject key identifier:   45:A9:73:E7:D6:4D:86:4A:30:09:24:6A:EE:75:9F:C1:07:B1:5D:06
Certificate issuer:       /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial:       019B78355239A407447FCC0D1E659A48FC7B
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/Ralz59ZNhkowCSRq7nWfwQexXQY.roa
Signing time:             Thu 01 Jan 2026 06:18:38 +0000
ROA not before:           Thu 01 Jan 2026 06:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207431
IP address blocks:        185.190.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:52:39:a4:07:44:7f:cc:0d:1e:65:9a:48:fc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
        Validity
            Not Before: Jan  1 06:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=45a973e7d64d864a3009246aee759fc107b15d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:f1:3b:56:dd:a0:ff:7c:96:8c:e8:77:86:
                    24:17:6d:33:62:60:e3:52:c4:e7:9a:a8:1a:a8:87:
                    6e:8a:a3:92:90:66:8f:cd:f2:d8:83:52:5e:bd:3e:
                    c2:ec:1d:7c:df:01:09:3b:f0:e3:92:96:63:86:8f:
                    db:2d:d0:8c:bb:fe:f0:ad:27:06:61:e5:ab:3b:7d:
                    fc:72:45:b4:6f:64:58:90:2e:b1:44:78:0e:b1:e1:
                    9b:78:f0:5a:e0:2f:24:d3:31:2e:d7:f9:11:df:fc:
                    b2:3e:4b:4e:71:e3:b3:2d:32:6a:75:44:f7:be:e4:
                    eb:bf:40:9f:d4:b3:45:76:e5:05:03:eb:e8:f1:59:
                    4a:60:79:84:95:c3:26:87:1c:22:db:4f:2b:8a:da:
                    26:65:2a:cc:3a:80:9f:4e:e7:f8:b7:87:bf:d1:7b:
                    6a:e8:31:57:6a:cf:39:42:87:76:9b:c1:b0:d1:e8:
                    b0:13:11:73:77:2d:86:ae:c6:55:5f:c6:f3:40:e2:
                    89:b4:c2:0d:16:82:bc:cd:ad:03:9a:cb:24:03:b7:
                    ac:c3:57:89:e9:a0:9b:32:cf:b2:b9:a9:d4:32:d9:
                    9a:c9:00:19:b5:26:9e:2b:e8:45:ec:c2:0b:f4:b5:
                    4e:35:ed:1d:ca:97:2c:ed:3e:c6:c5:41:53:80:2f:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A9:73:E7:D6:4D:86:4A:30:09:24:6A:EE:75:9F:C1:07:B1:5D:06
            X509v3 Authority Key Identifier:
                keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/Ralz59ZNhkowCSRq7nWfwQexXQY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:b8:7b:c9:91:53:a9:ee:51:75:c7:1f:7a:78:9a:e0:4d:d7:
         61:ae:ce:de:f4:73:e2:1d:6d:ef:40:d4:33:28:fe:10:7e:b2:
         df:b8:9c:5b:19:38:a3:2e:79:12:46:ab:a8:bc:28:78:62:4b:
         46:05:e0:ee:be:f4:9f:83:a8:af:05:37:ec:db:11:24:e1:3d:
         f3:7a:c1:5a:c6:a4:52:18:90:8f:12:29:b4:33:18:b1:aa:8e:
         ad:2a:65:bf:ac:f1:b3:10:90:b9:e8:dd:dd:0f:46:99:f5:e7:
         f3:70:23:84:66:4f:7f:94:24:2d:d6:2d:da:76:99:65:38:a6:
         de:ca:4e:55:81:87:d8:d6:51:e9:fc:3a:bd:95:f6:d5:6c:80:
         7c:3e:ad:1a:40:51:20:b4:88:a3:7b:05:87:7e:8d:19:61:91:
         71:91:80:eb:ed:67:87:b3:3f:2c:9a:6a:a8:ea:3d:3e:32:1c:
         da:be:05:87:2a:94:de:6b:f5:cb:7b:7f:6e:a2:d9:6a:82:2a:
         2a:0b:06:d8:66:84:df:87:81:69:e5:cb:48:57:c0:04:de:22:
         8a:18:0a:a2:c3:41:0b:f0:e1:d3:15:a0:7f:18:8f:50:f0:27:
         ff:c2:bb:24:a0:8a:41:0a:1f:6b:ce:71:67:d0:05:63:38:f4:
         10:85:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:48:09 2026 by rpki-client