This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/Jxh1vyeGRVZubYdlgBTDXZW-uWo.roa
File:                     Jxh1vyeGRVZubYdlgBTDXZW-uWo.roa (raw, json)
Hash identifier:          71XpHjlTdPY1qywc9le+VCgiZcIMSS2xeHJ0XkAm/ow=
Subject key identifier:   27:18:75:BF:27:86:45:56:6E:6D:87:65:80:14:C3:5D:95:BE:B9:6A
Certificate issuer:       /CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
Certificate serial:       019B7834F2BFC427402E5A28AD21C7E2A5A1
Authority key identifier: 64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/Jxh1vyeGRVZubYdlgBTDXZW-uWo.roa
Signing time:             Thu 01 Jan 2026 06:18:14 +0000
ROA not before:           Thu 01 Jan 2026 06:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51009
IP address blocks:        83.166.96.0/19 maxlen: 19
                          2a11:8600::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:f2:bf:c4:27:40:2e:5a:28:ad:21:c7:e2:a5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f
        Validity
            Not Before: Jan  1 06:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=271875bf278645566e6d87658014c35d95beb96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:09:11:7f:52:99:19:eb:62:55:84:4e:43:
                    a8:1c:1c:f8:a6:1b:1d:6f:0d:f6:aa:39:05:30:d9:
                    1d:ce:a4:1c:92:96:4b:5b:c6:44:79:9f:fe:c5:fb:
                    3e:6a:96:2f:4a:fb:e1:55:e5:cb:8f:02:04:a0:3b:
                    26:33:fa:90:7b:68:5b:14:e2:d9:88:23:58:1d:ec:
                    67:dd:2c:6e:ff:a8:17:f3:ed:58:61:06:af:ed:89:
                    22:cc:10:0c:05:f6:ce:c5:70:41:44:0a:eb:de:1a:
                    10:8b:32:bc:6f:28:81:06:8b:81:c8:cb:e5:b6:79:
                    c2:26:0a:4b:5b:d4:6a:bd:ef:d8:8d:39:f4:38:7e:
                    fc:ea:94:22:9f:49:09:10:c9:de:2c:b4:eb:49:32:
                    73:0e:76:4e:f0:8d:ab:4f:17:62:5c:d7:1e:7c:3e:
                    b3:4f:f3:73:43:57:49:99:53:90:cc:4b:3a:19:f6:
                    2e:ae:34:48:04:e8:70:f7:7c:f7:fd:cd:62:d9:45:
                    66:bd:a7:f8:c6:6b:5a:9e:ba:31:62:83:53:12:00:
                    97:62:ec:a3:25:e0:68:eb:6f:80:09:d0:fc:1d:39:
                    3c:ff:79:7f:cb:cd:ec:40:e3:57:8b:32:88:08:72:
                    74:75:40:a8:c0:03:1b:bb:2f:7c:73:64:9f:56:f4:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:18:75:BF:27:86:45:56:6E:6D:87:65:80:14:C3:5D:95:BE:B9:6A
            X509v3 Authority Key Identifier:
                keyid:64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/Jxh1vyeGRVZubYdlgBTDXZW-uWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.166.96.0/19
                IPv6:
                  2a11:8600::/29

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:bb:23:e2:a2:f5:72:39:17:c8:81:07:51:47:cd:36:d0:
         2e:4a:6b:93:f1:09:58:ef:89:e0:a8:cc:71:26:4f:b8:f1:30:
         c6:53:5e:24:8e:1d:f2:0d:de:41:1a:46:18:20:d2:f8:cd:77:
         31:e8:4b:ac:fe:9e:a2:d2:21:a3:e6:30:c6:fe:37:0c:7f:e4:
         9e:e1:f8:ed:20:d6:b6:6d:79:e1:30:de:0d:4c:46:9d:24:1b:
         90:2a:7f:f5:89:cc:df:15:d8:57:0c:9e:af:12:76:2f:53:42:
         94:e3:a0:cd:1f:c0:31:85:5f:93:3f:7d:3b:75:57:89:77:17:
         96:6b:b1:ac:e1:15:43:26:7b:f0:83:c8:7b:11:8a:e8:77:b9:
         c2:01:29:62:06:5d:b8:7c:1a:f0:70:fa:6e:b7:da:a1:18:78:
         2b:e7:c7:2d:6a:36:b5:e1:ba:2a:dd:1b:87:84:b8:3f:80:1d:
         77:ee:b1:0b:ec:d6:23:37:cb:7d:31:36:6f:a4:ef:4f:e4:68:
         87:e9:d4:13:f9:35:58:7d:51:e3:b2:de:8c:e7:b7:fd:c0:7e:
         28:b2:ca:ea:27:fc:8f:c1:c6:04:4a:0c:37:97:e1:64:48:33:
         d4:4b:14:54:0f:6a:59:57:2a:26:29:4a:5f:37:84:37:2b:cc:
         5e:6b:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:24 2026 by rpki-client