This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AZeR_fT56HfOexsOWfxZJ942rz0.roa
File:                     AZeR_fT56HfOexsOWfxZJ942rz0.roa (raw, json)
Hash identifier:          f0cPtQq+q104S+y9cwSRattGl2CUMMWi64g2iE9XI1M=
Subject key identifier:   01:97:91:FD:F4:F9:E8:77:CE:7B:1B:0E:59:FC:59:27:DE:36:AF:3D
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84DE32008EBCE6CA7398CB52891D23
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AZeR_fT56HfOexsOWfxZJ942rz0.roa
Signing time:             Fri 02 Jan 2026 16:22:52 +0000
ROA not before:           Fri 02 Jan 2026 16:22:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61276
IP address blocks:        93.171.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:de:32:00:8e:bc:e6:ca:73:98:cb:52:89:1d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=019791fdf4f9e877ce7b1b0e59fc5927de36af3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a2:41:85:5a:f0:b9:24:c5:f9:5b:2b:2d:50:
                    b1:a1:66:9b:5e:98:ea:de:fd:d2:d6:bc:23:4e:53:
                    93:2f:1f:60:1a:bd:b3:62:ca:a1:98:33:4c:1f:1e:
                    07:01:fe:b9:fd:6f:a9:1e:5d:78:53:db:f0:5d:e3:
                    f9:fe:dc:c7:32:91:4c:0d:42:67:b0:fc:9a:a4:07:
                    9b:0b:c7:26:53:d7:34:66:fb:f6:17:9b:5c:91:1b:
                    01:f0:9c:e6:16:24:b3:85:e8:0f:c4:25:22:a0:2a:
                    a6:2e:e3:29:53:ae:29:0e:c0:e9:d1:ef:c3:8b:32:
                    ac:e6:6e:f0:c1:00:02:e2:1d:14:5c:10:0d:51:fe:
                    01:ba:3e:59:42:c9:5e:80:e1:01:88:b9:f8:e8:9f:
                    18:9d:bb:49:12:9f:17:28:40:ec:d3:17:9c:02:b4:
                    ad:ec:95:d1:02:3d:03:3c:77:1b:98:a6:49:0e:19:
                    20:18:5f:fd:69:2e:57:0a:d8:bc:dd:f7:d7:38:9e:
                    b7:d0:c7:ce:98:41:f9:7b:00:0d:18:4b:44:2b:44:
                    04:e7:2c:f8:c8:a7:4b:81:9d:72:75:82:09:92:6b:
                    58:2e:f0:b2:36:01:41:18:bd:78:58:6d:88:bb:8c:
                    0c:2c:72:b8:39:0a:d8:58:15:b7:11:52:e7:88:e0:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:97:91:FD:F4:F9:E8:77:CE:7B:1B:0E:59:FC:59:27:DE:36:AF:3D
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AZeR_fT56HfOexsOWfxZJ942rz0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:5c:f2:91:e3:b3:1b:8a:4e:e6:4e:b2:70:58:cb:ca:6b:
         8b:91:15:e8:09:cd:9c:af:13:0d:e8:81:98:1a:88:ca:d4:28:
         9a:a1:87:a0:2d:ef:82:d4:7b:e9:06:23:da:ed:e1:a0:30:ba:
         68:3f:8c:bb:18:0d:91:a1:1e:bd:8b:13:04:58:31:02:ae:53:
         f0:4d:00:74:1e:38:4e:7b:4f:ef:e3:04:dc:05:46:64:92:bb:
         41:b4:52:2c:fe:5c:a5:a2:c2:c6:0a:35:5d:44:a5:4b:d7:5e:
         b2:94:76:00:c3:35:db:92:e8:a0:61:79:0f:ea:5e:01:c0:c3:
         47:a6:c3:a9:82:17:0d:fe:b3:d5:e3:66:e1:1f:f1:17:48:98:
         d8:90:2f:56:8d:39:dd:f8:18:6c:d2:0a:3d:df:d7:05:2d:a9:
         35:0e:81:4a:c5:fa:08:b4:9e:50:f4:64:a3:e0:57:19:04:f9:
         42:d0:42:ce:b7:26:af:11:3a:f3:e2:4e:25:0a:31:0c:04:27:
         c1:89:34:f1:0d:a2:cc:b0:58:f1:51:be:5c:22:93:44:4e:93:
         f2:05:28:5f:66:62:4b:fb:f1:6e:4f:f0:25:e1:e4:81:a0:b5:
         33:af:84:c5:14:1a:a8:33:6c:4d:0d:ce:ad:fa:85:58:40:50:
         62:e6:be:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hN4yAI685spzmMtSiR0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTk3OTFmZGY0ZjllODc3Y2U3YjFiMGU1OWZjNTkyN2RlMzZhZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qJBhVrwuSTF+VsrLVCxoWabXpjq
3v3S1rwjTlOTLx9gGr2zYsqhmDNMHx4HAf65/W+pHl14U9vwXeP5/tzHMpFMDUJn
sPyapAebC8cmU9c0Zvv2F5tckRsB8JzmFiSzhegPxCUioCqmLuMpU64pDsDp0e/D
izKs5m7wwQAC4h0UXBANUf4Buj5ZQslegOEBiLn46J8YnbtJEp8XKEDs0xecArSt
7JXRAj0DPHcbmKZJDhkgGF/9aS5XCti83ffXOJ630MfOmEH5ewANGEtEK0QE5yz4
yKdLgZ1ydYIJkmtYLvCyNgFBGL14WG2Iu4wMLHK4OQrYWBW3EVLniOCeUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAGXkf30+eh3znsbDln8WSfeNq89MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvQVplUl9mVDU2SGZPZXhzT1dmeFpKOTQycnowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavOMA0G
CSqGSIb3DQEBCwUAA4IBAQALiFzykeOzG4pO5k6ycFjLymuLkRXoCc2crxMN6IGY
GojK1CiaoYegLe+C1HvpBiPa7eGgMLpoP4y7GA2RoR69ixMEWDECrlPwTQB0HjhO
e0/v4wTcBUZkkrtBtFIs/lylosLGCjVdRKVL116ylHYAwzXbkuigYXkP6l4BwMNH
psOpghcN/rPV42bhH/EXSJjYkC9WjTnd+Bhs0go939cFLak1DoFKxfoItJ5Q9GSj
4FcZBPlC0ELOtyavETrz4k4lCjEMBCfBiTTxDaLMsFjxUb5cIpNETpPyBShfZmJL
+/FuT/Al4eSBoLUzr4TFFBqoM2xNDc6t+oVYQFBi5r5D
-----END CERTIFICATE-----
Generated at Tue Jan 20 06:03:49 2026 by rpki-client