This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/zXmC5b7nH6itAjao6-wWOfJxl_A.roa
File:                     zXmC5b7nH6itAjao6-wWOfJxl_A.roa (raw, json)
Hash identifier:          jE99E8ty9qFkTA0vxf9N6NqHRrg3u7LBy0fCqZ+S/uA=
Subject key identifier:   CD:79:82:E5:BE:E7:1F:A8:AD:02:36:A8:EB:EC:16:39:F2:71:97:F0
Certificate issuer:       /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial:       019B7F8561EFCA65C67CC17FB63E1FA69550
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/zXmC5b7nH6itAjao6-wWOfJxl_A.roa
Signing time:             Fri 02 Jan 2026 16:23:26 +0000
ROA not before:           Fri 02 Jan 2026 16:23:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42521
IP address blocks:        45.150.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:61:ef:ca:65:c6:7c:c1:7f:b6:3e:1f:a6:95:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
        Validity
            Not Before: Jan  2 16:23:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cd7982e5bee71fa8ad0236a8ebec1639f27197f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:d1:ff:40:b9:a5:bd:de:16:a6:dd:64:1c:
                    23:f6:08:93:68:e1:b8:ae:1e:ab:24:b9:d6:e0:29:
                    da:52:4e:17:21:cb:3b:ed:b2:f2:84:8a:fd:2c:16:
                    b9:55:f6:3e:e8:fd:b4:ec:92:3f:30:66:3c:8e:4f:
                    78:eb:13:bd:5b:05:6b:bf:44:a4:f9:23:53:a6:7e:
                    14:8f:0c:91:52:57:b6:7f:4f:83:90:44:0d:a6:23:
                    db:4d:29:34:99:89:64:ba:56:3a:05:26:3f:f6:2d:
                    1e:62:33:bf:f1:ec:99:89:d0:19:64:a9:b9:f7:bd:
                    13:09:37:e1:32:7a:25:ed:21:db:f7:c6:07:26:a1:
                    e1:a4:07:15:35:1a:f7:dd:19:cc:d5:c9:d9:2d:b2:
                    8e:59:72:3c:f1:fa:c9:42:a1:05:df:50:41:38:89:
                    f9:7e:c4:fe:ca:a1:77:34:92:e5:cd:c9:7d:06:73:
                    43:13:08:10:50:16:76:7a:9e:a4:ad:3a:d5:c1:a8:
                    79:9f:57:af:a6:a3:43:1b:a6:68:b4:42:2f:54:ca:
                    d8:b5:a7:83:16:8a:37:fb:76:89:a5:dc:1c:44:18:
                    44:f2:36:00:15:35:bb:28:75:50:3a:34:75:4d:11:
                    4f:9d:02:4e:dd:5f:01:c0:a8:cd:b0:6a:08:b9:b6:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:79:82:E5:BE:E7:1F:A8:AD:02:36:A8:EB:EC:16:39:F2:71:97:F0
            X509v3 Authority Key Identifier:
                keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/zXmC5b7nH6itAjao6-wWOfJxl_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:fd:70:26:22:41:3d:76:0f:13:18:f8:1f:6e:5f:41:98:37:
         db:84:65:09:27:91:d9:80:a6:4f:85:75:1c:29:4b:29:16:36:
         d8:ac:35:5e:07:f6:6c:32:74:d1:16:63:19:1e:6c:23:1f:b9:
         4b:0e:a7:53:ad:67:e9:0b:d1:ae:e2:83:9b:73:1e:cd:16:19:
         27:d7:f5:ad:75:09:d7:1f:25:03:a2:3c:8e:2d:f9:f1:64:d1:
         bf:54:86:08:b6:df:d3:6b:02:92:eb:d1:ea:00:99:81:98:8a:
         4c:4d:7b:0b:61:02:9e:18:77:24:8a:0f:4d:1a:dd:7b:7f:e8:
         5a:9c:02:2d:ec:ef:d6:62:a2:0c:c4:99:af:34:dc:e5:fd:70:
         2e:00:68:aa:ab:eb:ce:20:5c:0b:56:f3:ca:40:92:f7:9c:a6:
         70:3e:78:73:13:c6:ca:6e:99:66:9e:fe:33:b8:4c:0c:9c:1c:
         ed:6a:01:3c:cd:ec:54:0f:f5:59:a2:0d:a3:9d:79:27:0b:c5:
         04:8d:84:25:50:f5:4b:74:2c:4f:9d:25:53:19:64:bd:d0:54:
         4b:2c:3f:51:fe:5f:e4:f6:d4:d5:17:e8:82:e0:bb:1b:8e:14:
         7a:65:bb:2f:8d:06:f6:83:f1:67:e7:5f:e9:f7:a3:a6:03:68:
         35:60:7e:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hWHvymXGfMF/tj4fppVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDA2MmE5NjlkMjE0MmJiODUwNmE1NzExODBiNDViZDBm
YWI5MzQwHhcNMjYwMTAyMTYyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDc5ODJlNWJlZTcxZmE4YWQwMjM2YThlYmVjMTYzOWYyNzE5N2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4fR/0C5pb3eFqbdZBwj9giTaOG4
rh6rJLnW4CnaUk4XIcs77bLyhIr9LBa5VfY+6P207JI/MGY8jk946xO9WwVrv0Sk
+SNTpn4UjwyRUle2f0+DkEQNpiPbTSk0mYlkulY6BSY/9i0eYjO/8eyZidAZZKm5
970TCTfhMnol7SHb98YHJqHhpAcVNRr33RnM1cnZLbKOWXI88frJQqEF31BBOIn5
fsT+yqF3NJLlzcl9BnNDEwgQUBZ2ep6krTrVwah5n1evpqNDG6ZotEIvVMrYtaeD
Foo3+3aJpdwcRBhE8jYAFTW7KHVQOjR1TRFPnQJO3V8BwKjNsGoIubZLCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM15guW+5x+orQI2qOvsFjnycZfwMB8GA1UdIwQY
MBaAFOjQYqlp0hQruFBqVxGAtFvQ+rk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5CaXFXblNGQ3U0VUdwWEVZQzBXOUQ2dVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hOTkxNmEtMTNiZi00NzcwLThlNDQt
NThiNmE1Nzg0YWI3LzEvelhtQzViN25INml0QWphbzYtd1dPZkp4bF9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hOTkxNmEtMTNiZi00NzcwLThlNDQtNThiNmE1Nzg0YWI3
LzEvNk5CaXFXblNGQ3U0VUdwWEVZQzBXOUQ2dVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZbOMA0G
CSqGSIb3DQEBCwUAA4IBAQAV/XAmIkE9dg8TGPgfbl9BmDfbhGUJJ5HZgKZPhXUc
KUspFjbYrDVeB/ZsMnTRFmMZHmwjH7lLDqdTrWfpC9Gu4oObcx7NFhkn1/WtdQnX
HyUDojyOLfnxZNG/VIYItt/TawKS69HqAJmBmIpMTXsLYQKeGHckig9NGt17f+ha
nAIt7O/WYqIMxJmvNNzl/XAuAGiqq+vOIFwLVvPKQJL3nKZwPnhzE8bKbplmnv4z
uEwMnBztagE8zexUD/VZog2jnXknC8UEjYQlUPVLdCxPnSVTGWS90FRLLD9R/l/k
9tTVF+iC4LsbjhR6ZbsvjQb2g/Fn51/p96OmA2g1YH77
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:09 2026 by rpki-client