This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/zsjg_uNpmMmffhFlupWb75dFOf8.roa
File:                     zsjg_uNpmMmffhFlupWb75dFOf8.roa (raw, json)
Hash identifier:          HE/uSl70PUzAoBt7ot8n4K8Er2xcIutkfXUuzgDxPFM=
Subject key identifier:   CE:C8:E0:FE:E3:69:98:C9:9F:7E:11:65:BA:95:9B:EF:97:45:39:FF
Certificate issuer:       /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial:       019B7FF2613094C29E2D4CAE0F704FAA46F5
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/zsjg_uNpmMmffhFlupWb75dFOf8.roa
Signing time:             Fri 02 Jan 2026 18:22:29 +0000
ROA not before:           Fri 02 Jan 2026 18:22:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56582
IP address blocks:        91.102.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:61:30:94:c2:9e:2d:4c:ae:0f:70:4f:aa:46:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
        Validity
            Not Before: Jan  2 18:22:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cec8e0fee36998c99f7e1165ba959bef974539ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:c8:a6:48:f8:39:0a:18:ea:3b:c6:77:bc:
                    2b:ac:1b:7b:3a:60:14:37:cf:38:25:47:99:79:9a:
                    7f:fc:8c:1c:0c:7c:e6:93:89:48:36:f6:aa:10:b5:
                    a1:2c:e4:6c:85:2a:b9:5f:a1:59:90:d3:b3:b0:f4:
                    1d:f0:db:e6:e9:7c:22:ee:0d:02:f1:36:92:ed:ac:
                    16:23:c9:18:02:aa:49:99:fb:15:4d:c7:fe:1e:03:
                    5a:c6:ac:3a:24:1e:63:b3:07:f9:77:51:e8:46:d1:
                    bb:b5:46:6e:1b:c1:13:3e:06:0a:6c:fa:4f:a0:26:
                    cd:73:8f:de:b9:46:91:f6:60:9c:18:4d:1e:8f:01:
                    43:a5:d9:f7:92:13:c1:43:f6:78:cd:2b:93:f0:2d:
                    07:50:3d:91:b4:03:ed:db:12:2b:cd:e7:bd:e8:25:
                    8e:bf:2f:ae:cc:c4:76:20:37:e0:24:98:90:a0:0f:
                    6e:80:61:64:bf:be:e4:bf:86:77:5d:fb:a9:87:63:
                    26:92:5b:d3:48:e3:53:33:d5:81:67:c2:99:08:ea:
                    03:87:52:d2:07:52:51:98:1a:4a:39:6a:bf:e7:05:
                    05:da:fc:a6:d1:24:fb:12:ab:d1:ad:af:2a:6d:16:
                    ce:1a:a9:ec:2a:52:49:ce:fa:bf:c0:fc:6f:ba:87:
                    4a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C8:E0:FE:E3:69:98:C9:9F:7E:11:65:BA:95:9B:EF:97:45:39:FF
            X509v3 Authority Key Identifier:
                keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/zsjg_uNpmMmffhFlupWb75dFOf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.102.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:b5:d7:a9:31:c2:13:31:51:af:85:88:2b:96:42:be:40:1f:
         1c:9d:c0:f5:07:3f:25:ca:4c:fb:f1:8c:c4:14:1b:42:83:74:
         98:c7:74:9e:c3:be:21:a6:07:70:8f:82:f2:e8:e8:14:1a:14:
         69:d5:ae:6a:0b:45:04:a0:29:7d:64:bb:71:94:b7:35:b9:28:
         72:f8:a0:3d:5e:ce:d6:44:5f:09:03:fd:da:01:1d:6f:0d:e5:
         bd:8d:a1:4f:b2:a9:6b:3e:5a:c1:bd:6d:16:c7:67:0b:5a:ea:
         4f:e5:76:c2:b2:4e:78:cd:4c:a2:ae:96:cf:35:19:00:7f:fc:
         fb:5b:fb:12:14:63:78:6e:26:5a:8b:5e:40:42:4b:c8:aa:74:
         4a:c3:0d:37:64:a9:4d:6f:33:f3:fa:33:76:1e:7c:0e:30:47:
         a6:6d:d0:13:27:27:69:bb:ec:45:24:32:8b:87:62:4e:01:3e:
         08:cf:b3:42:12:05:32:0b:10:26:fb:75:5f:e3:77:77:7b:d2:
         c4:f2:ee:2f:bf:6b:be:cd:6b:54:6e:fd:cd:ba:05:ef:bf:dc:
         30:16:a9:7b:ff:3e:45:f5:08:e5:2f:8f:ea:a8:c6:89:36:70:
         81:86:91:ba:10:cd:b4:48:7f:a9:4f:68:d8:5d:4f:27:48:d9:
         42:fc:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:11:51 2026 by rpki-client