This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/snzouUWeyTub9VxYv-zaTnE2ZFM.roa
File:                     snzouUWeyTub9VxYv-zaTnE2ZFM.roa (raw, json)
Hash identifier:          pfkdQytn678VTaFFwNFIRN8BUcd2w7thrNQxjoq6szs=
Subject key identifier:   B2:7C:E8:B9:45:9E:C9:3B:9B:F5:5C:58:BF:EC:DA:4E:71:36:64:53
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       019C2444205CF19013BDCA5F4F4B6FC62785
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/snzouUWeyTub9VxYv-zaTnE2ZFM.roa
Signing time:             Tue 03 Feb 2026 16:09:30 +0000
ROA not before:           Tue 03 Feb 2026 16:09:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35704
IP address blocks:        2a02:11ff:400::/46 maxlen: 46
                          2a02:11ff:404::/46 maxlen: 46
                          2a02:11ff:408::/46 maxlen: 46
                          2a02:11ff:40c::/46 maxlen: 46
                          2a02:11ff:410::/46 maxlen: 46
                          2a02:11ff:414::/46 maxlen: 46
                          2a02:11ff:418::/46 maxlen: 46
                          2a02:11ff:41c::/46 maxlen: 46
                          2a02:11ff:420::/46 maxlen: 46
                          2a02:11ff:424::/46 maxlen: 46
                          2a02:11ff:428::/46 maxlen: 46
                          2a02:11ff:42c::/46 maxlen: 46
                          2a02:11ff:430::/46 maxlen: 46
                          2a02:11ff:434::/46 maxlen: 46
                          2a02:11ff:438::/46 maxlen: 46
                          2a02:11ff:43c::/46 maxlen: 46
                          2a02:11ff:440::/46 maxlen: 46
                          2a02:11ff:444::/46 maxlen: 46
                          2a02:11ff:448::/46 maxlen: 46
                          2a02:11ff:44c::/46 maxlen: 46
                          2a02:11ff:450::/46 maxlen: 46
                          2a02:11ff:454::/46 maxlen: 46
                          2a02:11ff:458::/46 maxlen: 46
                          2a02:11ff:45c::/46 maxlen: 46
                          2a02:11ff:460::/46 maxlen: 46
                          2a02:11ff:464::/46 maxlen: 46
                          2a02:11ff:468::/46 maxlen: 46
                          2a02:11ff:46c::/46 maxlen: 46
                          2a02:11ff:470::/46 maxlen: 46
                          2a02:11ff:474::/46 maxlen: 46
                          2a02:11ff:478::/46 maxlen: 46
                          2a02:11ff:47c::/46 maxlen: 46
                          2a02:11ff:480::/46 maxlen: 46
                          2a02:11ff:484::/46 maxlen: 46
                          2a02:11ff:488::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:44:20:5c:f1:90:13:bd:ca:5f:4f:4b:6f:c6:27:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Feb  3 16:09:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b27ce8b9459ec93b9bf55c58bfecda4e71366453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:d8:c5:b1:28:6d:e7:27:22:3e:13:e1:cb:
                    2d:17:a8:a4:9b:a7:05:62:a2:d3:21:ee:60:bf:be:
                    2b:8f:87:fe:f6:c0:a5:38:98:e4:15:ab:77:66:f3:
                    2b:99:ad:15:f0:26:90:02:83:ec:0b:22:e2:7c:2e:
                    ad:a1:98:87:e1:08:a1:bb:73:f9:3f:0a:1b:a4:e7:
                    16:2e:81:b1:1f:16:77:e1:d9:63:63:6e:4c:8a:ee:
                    7f:5f:7f:35:12:c2:05:d6:89:61:58:f1:cf:6f:c6:
                    86:a4:50:3c:1e:93:bd:3e:e7:49:fb:87:df:3e:a5:
                    3e:c9:5c:93:e9:5a:f2:1e:54:88:ab:7e:3b:b4:95:
                    85:08:32:29:b5:70:67:26:9b:a7:7c:7a:0d:3d:dc:
                    8b:b9:59:b0:30:14:ff:5a:0b:ed:b2:35:8b:81:2d:
                    c2:63:bc:cf:36:42:5b:50:49:19:c5:bb:6a:50:b0:
                    ac:f1:14:69:13:27:d1:13:96:e9:29:96:29:39:78:
                    23:2f:4d:c3:62:e4:63:77:0d:c1:ae:bc:a1:af:d8:
                    71:9b:2b:ef:e1:40:26:22:18:be:83:2e:78:2d:cd:
                    7b:3a:58:de:8f:07:18:1b:40:87:73:58:2e:67:7a:
                    f0:1b:cd:cb:83:df:f4:2e:ef:f3:71:21:f2:e8:f5:
                    0a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:E8:B9:45:9E:C9:3B:9B:F5:5C:58:BF:EC:DA:4E:71:36:64:53
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/snzouUWeyTub9VxYv-zaTnE2ZFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:11ff:400::-2a02:11ff:48b:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:58:14:fc:ed:3e:94:d1:70:e3:52:16:24:55:e3:0d:68:
         95:a1:9f:5c:35:58:36:fb:a7:2b:a6:fb:2a:7e:b9:12:46:67:
         e0:46:6b:1f:66:dc:50:c7:86:be:4d:62:78:bd:4a:9d:38:26:
         25:76:3d:3a:94:56:c3:d7:52:2a:9c:f0:4f:60:ff:f2:04:72:
         d2:c4:6a:d3:d8:6f:c5:90:a7:c5:df:78:fb:69:0c:d5:cf:6b:
         d7:74:99:66:86:9a:fe:9c:6d:c1:23:3a:fd:49:3c:2f:98:9e:
         db:63:55:9c:1a:9b:96:da:49:86:f5:eb:10:9e:90:10:83:03:
         7f:ad:ad:79:e4:21:5a:ec:68:2d:95:cc:c7:58:9b:fe:04:d5:
         c0:15:80:fe:93:09:24:f1:16:05:01:a9:e1:98:9a:fd:a3:ff:
         13:b8:9d:f3:e6:14:ca:91:45:e5:a5:52:76:5c:51:8a:3d:74:
         68:e8:95:2f:1b:27:2c:ce:88:c9:e3:e9:e8:59:65:a4:94:6d:
         df:c4:0a:8f:9d:18:eb:23:2e:0e:a7:73:3c:1f:f8:1a:75:33:
         d6:ca:0c:fb:a2:2e:a4:75:65:dd:f8:e8:32:75:80:9b:e9:86:
         6c:16:2d:3c:54:90:5d:8c:0c:99:40:3c:bf:63:e9:f7:50:7f:
         ef:de:19:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:32:11 2026 by rpki-client