This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/Z76nZ5nI801iAmD3AB5yQJ-rPQg.roa
File:                     Z76nZ5nI801iAmD3AB5yQJ-rPQg.roa (raw, json)
Hash identifier:          mySiqQ6DoaxlXWJI/8R41UPuL/Gn5DnjGC/YLKdLsNg=
Subject key identifier:   67:BE:A7:67:99:C8:F3:4D:62:02:60:F7:00:1E:72:40:9F:AB:3D:08
Certificate issuer:       /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial:       019B7D5C86693AB455BDD09D3B96B794A43C
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/Z76nZ5nI801iAmD3AB5yQJ-rPQg.roa
Signing time:             Fri 02 Jan 2026 06:19:34 +0000
ROA not before:           Fri 02 Jan 2026 06:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197604
IP address blocks:        91.230.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:86:69:3a:b4:55:bd:d0:9d:3b:96:b7:94:a4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
        Validity
            Not Before: Jan  2 06:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=67bea76799c8f34d620260f7001e72409fab3d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:97:f8:e9:20:d9:6f:8d:2f:16:09:95:23:
                    a4:d7:5c:f8:46:c8:7a:f4:4b:49:d1:c3:42:43:c2:
                    3e:cb:7a:7f:49:0c:d7:76:b3:a2:16:c9:bd:78:3e:
                    bd:b0:17:0a:07:ae:95:8d:5c:a2:c6:8a:1a:96:ae:
                    ff:e7:28:65:89:07:38:f8:2b:7c:44:e6:94:b2:d1:
                    91:2a:46:47:d6:84:27:67:be:6b:73:5a:8e:42:a4:
                    7e:31:b4:d6:ef:b6:e7:70:bd:ea:a8:bf:ac:3e:7d:
                    c6:bf:cc:79:50:c2:4b:88:33:c4:dc:29:45:a3:82:
                    3f:39:34:f6:d9:7d:c1:65:fb:87:81:d5:58:8f:c3:
                    45:e3:35:15:86:bd:58:b0:37:66:ad:ac:4b:9e:7f:
                    fc:37:df:9d:0d:0d:7a:8f:c5:01:7b:30:ab:33:3d:
                    c0:4b:56:51:6d:3a:b1:31:cb:3d:f3:7b:0b:7f:68:
                    91:44:6f:5e:d6:e4:07:0e:9b:e0:5b:4f:b9:de:aa:
                    de:4a:bf:45:4f:26:93:8a:7a:54:3c:9a:9d:17:8c:
                    4e:e6:f2:34:22:82:cd:04:b3:c1:fd:b8:61:69:57:
                    ec:07:97:70:cb:8f:10:e3:34:6e:75:c0:a5:e2:be:
                    53:b9:cc:9a:16:f3:fa:77:89:65:47:5b:43:b9:cb:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BE:A7:67:99:C8:F3:4D:62:02:60:F7:00:1E:72:40:9F:AB:3D:08
            X509v3 Authority Key Identifier:
                keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/Z76nZ5nI801iAmD3AB5yQJ-rPQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:97:7c:7f:a8:fe:47:af:3e:26:2a:07:ec:2b:28:8d:66:e0:
         ee:b2:31:46:2e:77:33:14:9d:d3:53:a0:d3:ae:c3:33:9b:de:
         43:2a:77:2c:f6:f0:7e:3f:31:e6:20:53:92:82:6d:47:90:19:
         28:f3:c9:bb:28:79:65:c6:5e:4d:ca:19:10:7d:31:31:df:66:
         c1:c4:2b:c9:d5:ee:73:93:9c:ee:9e:2a:cd:c6:c4:cb:6e:8f:
         e2:7a:28:5a:50:5d:f2:e7:d4:b8:19:9a:41:15:bf:5f:21:79:
         36:cf:4a:58:6e:70:4f:64:5c:b8:ad:e0:2c:aa:2a:45:ab:ee:
         26:e8:f9:79:ff:74:1f:fe:69:60:c3:ad:2f:f8:f8:0f:a8:18:
         2c:78:98:cf:76:3d:78:c2:5b:21:a9:58:be:be:6f:02:3c:fd:
         8e:69:09:51:f2:2b:5a:8c:a4:20:08:4a:e0:e6:3f:cb:32:32:
         a9:62:c7:93:32:65:d7:ae:00:55:0c:50:29:af:bb:99:9b:de:
         6b:26:f3:fb:9f:c8:fc:3a:37:da:5d:8e:58:f3:e2:55:4a:07:
         d7:12:75:e3:f2:fd:a1:4a:38:bd:c6:38:68:07:48:18:21:a6:
         5a:aa:6a:e9:7a:eb:8b:4e:44:bc:b6:16:89:52:80:02:25:62:
         dd:05:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:10:15 2026 by rpki-client