This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/JZV9Wmscw-_tBZW5yLoO12kB4nI.roa
File:                     JZV9Wmscw-_tBZW5yLoO12kB4nI.roa (raw, json)
Hash identifier:          9OD9YsHNLfEzpjHohpylUNvgGqpABxz0jPfe6Fwb8Ws=
Subject key identifier:   25:95:7D:5A:6B:1C:C3:EF:ED:05:95:B9:C8:BA:0E:D7:69:01:E2:72
Certificate issuer:       /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial:       019B79ECDCB6504B8280E3D7A3643A058202
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/JZV9Wmscw-_tBZW5yLoO12kB4nI.roa
Signing time:             Thu 01 Jan 2026 14:18:44 +0000
ROA not before:           Thu 01 Jan 2026 14:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9091
IP address blocks:        194.8.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:dc:b6:50:4b:82:80:e3:d7:a3:64:3a:05:82:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
        Validity
            Not Before: Jan  1 14:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=25957d5a6b1cc3efed0595b9c8ba0ed76901e272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:81:af:77:87:5d:9d:d0:38:5b:f2:cc:cd:
                    44:5c:df:42:26:33:90:fc:62:9c:08:e3:6e:84:84:
                    d7:43:95:f1:3d:35:e4:9b:43:66:f5:f4:59:18:31:
                    fc:3f:f8:ce:aa:4d:78:62:2f:ae:86:1b:24:8c:13:
                    d0:66:0e:ee:89:21:02:44:77:e4:e8:66:b6:a0:b1:
                    88:70:3e:92:e9:94:aa:87:95:1d:7d:4e:97:11:1b:
                    1a:2a:f7:eb:36:76:42:fc:ea:a6:4a:90:69:40:6a:
                    79:14:c0:49:c8:32:1f:1b:4d:7c:c6:e6:19:df:92:
                    46:5c:07:d0:31:dc:67:42:21:29:8c:93:2e:24:a6:
                    13:7d:e2:87:91:9e:75:34:95:51:c2:34:c7:cb:a8:
                    61:fd:e5:f5:d7:1f:dd:54:3a:95:ac:06:90:d1:89:
                    4e:94:8f:ea:e1:b1:bd:87:74:39:03:fa:21:84:ca:
                    18:b4:33:56:ef:76:07:4a:b6:59:17:68:31:af:ca:
                    e3:93:8f:19:df:a9:10:3b:d5:59:f5:3d:e2:53:e4:
                    9b:9e:0b:5b:4a:fe:c8:6f:50:12:17:5e:af:1e:30:
                    62:7d:fe:c4:e2:69:57:ce:98:4f:4e:28:41:4d:b7:
                    c8:6b:ee:e1:2f:8c:08:5c:b5:37:7a:81:cf:b5:03:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:95:7D:5A:6B:1C:C3:EF:ED:05:95:B9:C8:BA:0E:D7:69:01:E2:72
            X509v3 Authority Key Identifier:
                keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/JZV9Wmscw-_tBZW5yLoO12kB4nI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.8.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:53:c3:e3:78:fb:97:4c:5a:2a:5e:01:47:d2:36:11:04:
         ad:a9:53:9b:07:78:9b:fc:9f:be:69:0a:78:ab:88:2f:a9:e1:
         72:4f:b7:87:4d:11:ae:88:5d:5f:32:94:18:1b:03:02:42:e7:
         7b:eb:e7:c7:d0:77:a0:87:88:a5:d9:9f:78:be:22:5d:d0:f6:
         31:04:15:34:37:b6:1f:fa:9c:b8:cb:91:2c:f8:c4:42:97:b9:
         7e:66:6d:29:84:31:ab:df:25:e9:6a:c0:90:e7:00:28:ac:1a:
         1e:75:56:f4:b6:ea:bd:9a:97:1f:45:8c:2f:bd:30:e7:66:56:
         f6:4f:f1:bb:f8:6c:91:42:a8:11:f0:b8:cb:c6:a6:2e:4b:cc:
         46:83:9b:05:56:83:72:5f:86:33:87:ea:92:8f:03:83:a0:2a:
         85:3f:83:21:be:0d:63:31:4c:a9:e1:65:82:8d:00:00:24:f5:
         b6:3e:65:9e:34:5c:54:09:a3:fd:86:25:f3:0d:b9:99:74:de:
         e0:1e:54:78:1e:1d:7c:df:f1:dd:02:56:f8:19:40:49:12:a4:
         12:91:ce:76:09:00:d3:59:63:cb:af:eb:58:6e:33:1f:55:7e:
         a4:f0:70:f9:38:2e:b7:8d:7a:10:61:0d:ab:12:9b:e6:de:fa:
         0e:2e:8c:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57Ny2UEuCgOPXo2Q6BYICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MDQ3Yjk4N2JlOTc0Mjc4NWJhOGU4YjMzYWMwNzdiZjlj
N2EyMjIwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTk1N2Q1YTZiMWNjM2VmZWQwNTk1YjljOGJhMGVkNzY5MDFlMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWaBr3eHXZ3QOFvyzM1EXN9CJjOQ
/GKcCONuhITXQ5XxPTXkm0Nm9fRZGDH8P/jOqk14Yi+uhhskjBPQZg7uiSECRHfk
6Ga2oLGIcD6S6ZSqh5UdfU6XERsaKvfrNnZC/OqmSpBpQGp5FMBJyDIfG018xuYZ
35JGXAfQMdxnQiEpjJMuJKYTfeKHkZ51NJVRwjTHy6hh/eX11x/dVDqVrAaQ0YlO
lI/q4bG9h3Q5A/ohhMoYtDNW73YHSrZZF2gxr8rjk48Z36kQO9VZ9T3iU+Sbngtb
Sv7Ib1ASF16vHjBiff7E4mlXzphPTihBTbfIa+7hL4wIXLU3eoHPtQNsFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWVfVprHMPv7QWVuci6DtdpAeJyMB8GA1UdIwQY
MBaAFGcEe5h76XQnhbqOizOsB3v5x6IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYt
ZThlZGYyOTI0NWMwLzEvSlpWOVdtc2N3LV90QlpXNXlMb08xMmtCNG5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYtZThlZGYyOTI0NWMw
LzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwggKMA0G
CSqGSIb3DQEBCwUAA4IBAQBhtVPD43j7l0xaKl4BR9I2EQStqVObB3ib/J++aQp4
q4gvqeFyT7eHTRGuiF1fMpQYGwMCQud76+fH0Hegh4il2Z94viJd0PYxBBU0N7Yf
+py4y5Es+MRCl7l+Zm0phDGr3yXpasCQ5wAorBoedVb0tuq9mpcfRYwvvTDnZlb2
T/G7+GyRQqgR8LjLxqYuS8xGg5sFVoNyX4Yzh+qSjwODoCqFP4Mhvg1jMUyp4WWC
jQAAJPW2PmWeNFxUCaP9hiXzDbmZdN7gHlR4Hh183/HdAlb4GUBJEqQSkc52CQDT
WWPLr+tYbjMfVX6k8HD5OC63jXoQYQ2rEpvm3voOLozG
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:12 2026 by rpki-client