This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/zcCiixqCklulb_B107CrpvzF08M.roa
File:                     zcCiixqCklulb_B107CrpvzF08M.roa (raw, json)
Hash identifier:          I58sikhQ3Ff9PunOEcBamQjNVvG5kDBAQWFHprNeKL4=
Subject key identifier:   CD:C0:A2:8B:1A:82:92:5B:A5:6F:F0:75:D3:B0:AB:A6:FC:C5:D3:C3
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       019B7D5CBCB55422B4ADF1310C4BC4046242
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/zcCiixqCklulb_B107CrpvzF08M.roa
Signing time:             Fri 02 Jan 2026 06:19:48 +0000
ROA not before:           Fri 02 Jan 2026 06:19:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34900
IP address blocks:        176.123.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:bc:b5:54:22:b4:ad:f1:31:0c:4b:c4:04:62:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Jan  2 06:19:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cdc0a28b1a82925ba56ff075d3b0aba6fcc5d3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:3b:d3:34:15:55:16:38:c1:8a:3b:e4:94:
                    aa:3d:3e:1b:25:77:82:c0:60:c1:6c:08:02:08:ac:
                    c2:02:64:61:cc:26:a8:15:fa:36:d8:e2:c5:aa:45:
                    07:21:63:34:89:db:8b:af:78:77:08:c9:49:8c:8b:
                    5c:48:e0:d2:ee:a9:ac:55:68:30:95:bf:48:8d:41:
                    86:c6:f2:ce:8e:0e:fb:2f:cc:ad:a2:3f:99:0c:b0:
                    04:cb:ff:74:27:c1:0c:e2:c6:79:19:41:3c:cb:1d:
                    a0:3f:9b:a0:55:ac:a9:f0:b6:22:03:f1:b4:93:06:
                    d6:d6:b0:a0:e7:e8:bc:7e:0a:e8:ae:63:55:e4:9c:
                    56:e7:eb:a4:74:17:1b:3d:77:6a:90:6f:a1:19:99:
                    26:94:62:b3:d2:e6:37:8a:ef:0f:2a:32:f4:29:ac:
                    e1:35:eb:f9:b7:bd:9d:e1:e5:e4:37:11:53:d1:7a:
                    b7:74:9b:1b:03:07:1e:9f:bd:bd:25:7d:9b:e1:e7:
                    87:67:83:5b:48:cf:ba:49:64:1c:dc:c6:42:5c:91:
                    eb:c9:0c:6f:45:d9:64:b6:1d:e8:f5:17:b4:87:b1:
                    0d:da:46:4b:78:e2:4a:72:8d:61:c7:35:76:cc:7d:
                    1f:38:7c:84:44:6b:12:5d:b0:35:f8:49:b9:ee:3e:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C0:A2:8B:1A:82:92:5B:A5:6F:F0:75:D3:B0:AB:A6:FC:C5:D3:C3
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/zcCiixqCklulb_B107CrpvzF08M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.123.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:8a:a5:ad:ae:3a:75:d6:34:7f:f3:95:68:73:3f:55:c8:35:
         f1:67:35:09:0c:bf:7a:88:aa:00:6e:9a:20:ed:6d:28:25:0c:
         39:ef:96:01:f7:3b:27:0e:b9:a6:2f:ab:b2:b0:f7:99:c9:25:
         6f:e0:03:54:79:5f:c2:a9:96:5a:e5:13:97:dc:0b:97:a6:32:
         5b:85:4d:78:2e:47:02:d5:64:91:b5:fd:f7:c4:83:83:2f:d1:
         86:c5:0b:9e:fc:65:0f:91:ff:12:93:7c:0a:35:2a:fb:52:27:
         bc:9f:ce:51:01:64:d4:66:9b:98:0d:f8:90:e2:9e:10:d0:73:
         86:32:96:8f:d8:10:58:0e:c8:a8:db:16:c8:a4:ef:56:95:1a:
         40:a8:88:96:bc:06:d0:24:4e:ec:b9:1e:ba:4d:3a:63:4a:9c:
         e5:6f:11:d7:75:8c:18:6e:af:c9:09:8f:fd:57:bf:eb:6a:46:
         82:06:c9:da:e1:70:70:1f:bf:ab:03:c4:fb:0b:ef:a3:c2:21:
         70:b9:45:0f:91:22:d7:26:7a:d0:55:03:1a:fc:9d:21:65:31:
         01:03:d7:8e:f5:9e:bf:d7:96:24:49:e3:d3:65:f3:39:74:da:
         b2:f6:f2:9a:f0:50:92:17:0f:a7:97:49:23:83:00:11:db:8b:
         26:52:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:12:18 2026 by rpki-client