This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ZVdYS7hWyL07oFURFx4lZvwSczY.roa
File:                     ZVdYS7hWyL07oFURFx4lZvwSczY.roa (raw, json)
Hash identifier:          RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=
Subject key identifier:   65:57:58:4B:B8:56:C8:BD:3B:A0:55:11:17:1E:25:66:FC:12:73:36
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       019B7FF1978A569936C95271FF6AD218AF58
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ZVdYS7hWyL07oFURFx4lZvwSczY.roa
Signing time:             Fri 02 Jan 2026 18:21:38 +0000
ROA not before:           Fri 02 Jan 2026 18:21:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211014
IP address blocks:        46.38.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:97:8a:56:99:36:c9:52:71:ff:6a:d2:18:af:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jan  2 18:21:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6557584bb856c8bd3ba05511171e2566fc127336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0b:5a:0f:f8:2d:f4:d4:02:be:cb:c4:25:40:
                    e9:24:01:36:eb:2b:68:d9:ca:45:d2:74:ba:64:d2:
                    b7:87:4a:e1:1b:21:4d:1c:cb:f9:9e:b2:95:0b:96:
                    85:07:11:67:72:c6:e7:f5:95:9f:67:46:8c:07:04:
                    19:04:fc:b6:5c:ff:4f:19:3a:70:17:f4:ac:37:db:
                    55:ce:bb:0a:47:83:c5:58:4d:42:de:26:8a:b3:15:
                    5e:97:53:d3:c4:d9:93:db:dd:45:46:b7:d8:f9:f8:
                    88:fe:3a:a4:bd:19:66:74:70:ce:84:9d:50:c3:65:
                    b7:c1:6f:49:70:82:37:b3:b1:94:7c:cf:59:1a:4d:
                    06:c3:42:f0:40:5d:6e:39:d6:24:d8:c3:5d:1d:45:
                    87:fa:78:8f:3b:31:fb:a9:1e:30:62:81:9d:cf:88:
                    8c:e9:10:4e:ef:95:92:ef:ee:cf:c0:a6:82:08:85:
                    58:65:f2:44:04:c4:68:08:65:7e:ce:71:11:ed:db:
                    5a:0f:b0:12:3c:83:f7:9c:56:46:7d:bb:1a:e8:c9:
                    f9:83:fe:1b:09:c9:a8:8a:fa:cd:68:2c:e9:b7:35:
                    a7:08:04:92:4d:0c:2d:53:17:18:c3:d9:69:04:d3:
                    25:66:81:af:c7:79:1c:b9:7c:fb:30:63:3d:89:6e:
                    68:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:57:58:4B:B8:56:C8:BD:3B:A0:55:11:17:1E:25:66:FC:12:73:36
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ZVdYS7hWyL07oFURFx4lZvwSczY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.38.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:07:26:de:df:a5:f9:5b:8f:32:e4:bb:4a:6b:b4:94:6e:9f:
         85:66:fa:cf:81:17:3a:81:50:1c:fa:a4:c9:ac:b1:d4:62:61:
         b8:f6:f2:0f:96:86:55:5e:e7:05:dc:5b:c0:3e:4f:bb:f0:a7:
         a0:e5:ff:95:76:d2:7f:5e:8c:af:74:61:9b:2a:36:7c:17:c9:
         f8:3e:5c:d4:6d:32:13:26:48:82:fb:7c:fe:11:c4:ca:83:c9:
         85:f4:a6:5b:13:a7:fd:68:fb:18:b7:d6:a0:be:7a:ac:e6:47:
         be:90:d5:e2:3b:c6:21:a9:e7:a2:73:74:59:e0:62:ad:9d:00:
         db:bb:6c:33:6c:31:aa:a8:2e:b3:8c:3e:b8:d3:21:91:e5:64:
         a8:2e:60:1a:1c:33:85:ab:3d:bb:5e:fb:7b:71:f1:70:27:bb:
         b4:c0:df:98:b2:7c:32:93:98:41:9f:66:10:93:a9:2d:a4:29:
         e7:31:f9:be:cc:d9:44:41:4e:18:18:92:ad:45:2b:34:1a:01:
         ff:2e:08:d7:43:db:b5:66:69:b5:da:ac:5f:89:10:9b:bf:d9:
         82:87:28:87:7a:a5:90:0c:24:36:10:84:61:3d:b4:c2:15:f8:
         b9:92:48:2a:93:bb:91:f5:dd:46:7f:f9:53:fe:ec:87:b9:02:
         cd:95:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:04:08 2026 by rpki-client