This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/Z7FvUApf6QnMEHQR_5aneXFhbPg.roa
File:                     Z7FvUApf6QnMEHQR_5aneXFhbPg.roa (raw, json)
Hash identifier:          gukoAxjRLbcm80d3Vzb9/kGayYnEMM/pkT9iNNFnd/k=
Subject key identifier:   67:B1:6F:50:0A:5F:E9:09:CC:10:74:11:FF:96:A7:79:71:61:6C:F8
Certificate issuer:       /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial:       019B7C8020801547F5EAF724B18AC726CC11
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/Z7FvUApf6QnMEHQR_5aneXFhbPg.roa
Signing time:             Fri 02 Jan 2026 02:18:50 +0000
ROA not before:           Fri 02 Jan 2026 02:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6823
IP address blocks:        37.202.48.0/21 maxlen: 21
                          37.202.48.0/24 maxlen: 24
                          37.202.49.0/24 maxlen: 24
                          37.202.50.0/24 maxlen: 24
                          37.202.51.0/24 maxlen: 24
                          37.202.52.0/24 maxlen: 24
                          37.202.53.0/24 maxlen: 24
                          37.202.54.0/24 maxlen: 24
                          37.202.55.0/24 maxlen: 24
                          178.251.40.0/21 maxlen: 21
                          178.251.40.0/24 maxlen: 24
                          178.251.41.0/24 maxlen: 24
                          178.251.42.0/24 maxlen: 24
                          178.251.43.0/24 maxlen: 24
                          178.251.44.0/24 maxlen: 24
                          178.251.45.0/24 maxlen: 24
                          178.251.46.0/24 maxlen: 24
                          178.251.47.0/24 maxlen: 24
                          2a01:6be0::/32 maxlen: 38
                          2a01:6be0::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:20:80:15:47:f5:ea:f7:24:b1:8a:c7:26:cc:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
        Validity
            Not Before: Jan  2 02:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=67b16f500a5fe909cc107411ff96a77971616cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:79:2b:f4:63:a2:71:21:3b:a3:c5:29:8e:
                    af:44:36:3e:86:fd:aa:eb:c5:cb:02:a6:fa:26:2b:
                    b4:84:6c:13:9f:a1:27:7a:06:10:5f:b0:b1:a2:e9:
                    81:ca:43:2b:8d:5b:de:e2:89:cc:f5:d2:30:ee:77:
                    56:2a:18:54:1e:cc:ff:f7:03:4f:93:36:dc:4a:89:
                    66:ab:2a:d4:31:13:d7:ea:81:c7:3d:b1:6d:b2:69:
                    6c:4a:3e:39:a1:d1:eb:2a:6c:c3:50:19:36:11:a9:
                    d9:7c:ad:59:98:09:c8:64:16:20:02:ca:c3:6b:d0:
                    32:98:d1:45:e2:07:36:88:7b:9a:92:45:d8:e1:74:
                    e2:d5:ec:bb:88:bb:b5:72:17:e0:56:34:52:4d:ab:
                    21:5a:af:af:c9:78:fb:82:88:8f:ef:70:4a:0d:00:
                    95:ef:a0:e8:ed:5a:de:11:81:ac:a6:f5:67:e0:1d:
                    be:1b:e1:49:e7:c5:5b:f8:7c:39:18:eb:43:b4:c1:
                    66:de:dd:0f:4e:b3:d1:96:db:8f:b5:86:1f:c1:08:
                    09:0c:28:6d:e7:73:9f:97:77:04:0e:5f:3a:26:d3:
                    62:bb:d8:bf:3a:0d:44:5d:bf:e9:0d:b1:af:1e:72:
                    0c:14:58:b5:b9:e9:65:66:ac:ad:4f:ef:98:30:f1:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B1:6F:50:0A:5F:E9:09:CC:10:74:11:FF:96:A7:79:71:61:6C:F8
            X509v3 Authority Key Identifier:
                keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/Z7FvUApf6QnMEHQR_5aneXFhbPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.202.48.0/21
                  178.251.40.0/21
                IPv6:
                  2a01:6be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:ec:64:8f:d9:73:4c:af:77:55:07:2f:8a:5a:f6:92:c8:
         f8:fe:c2:df:f7:da:db:5d:4a:ff:8c:52:10:7f:cf:8e:90:e6:
         6a:58:c0:e5:d6:f4:a1:07:c1:fa:14:92:fa:47:10:9a:db:16:
         72:19:bf:e4:92:e2:38:8c:07:00:bd:16:ca:d1:fb:dd:c2:f6:
         fa:ea:b1:c4:4b:5a:35:c1:cb:82:e2:ed:42:bf:3b:96:60:28:
         a0:4e:44:49:1c:76:2d:20:31:9d:0e:19:a4:4d:b2:85:8e:e1:
         fa:03:fa:71:fa:42:c9:c7:0f:71:d0:69:10:00:c9:46:75:ab:
         18:17:d8:f4:d1:2b:d4:97:e4:34:e2:db:53:8a:d5:f1:20:47:
         fb:d6:a3:60:50:96:92:86:9b:b7:ff:98:8f:ff:4d:e2:61:50:
         8e:71:7a:a4:d8:ec:12:aa:ca:27:62:fc:91:71:ce:f6:95:7d:
         42:9b:7e:e4:76:45:52:b2:93:3d:c1:19:e4:18:3c:b8:c9:48:
         bd:6d:6b:85:76:18:52:23:73:84:50:d4:51:0c:78:10:85:36:
         4b:08:46:fe:96:b9:fe:dd:6f:fa:04:ca:a6:55:3a:de:31:69:
         30:26:b5:0b:75:07:7e:e5:03:4c:7f:11:29:98:0e:93:47:8d:
         e7:ae:7b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:04:29 2026 by rpki-client