This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/3ZnlgSbrf049eCIYO73iNtM8JCQ.roa
File:                     3ZnlgSbrf049eCIYO73iNtM8JCQ.roa (raw, json)
Hash identifier:          GJC/RuNNoXXcqKNwZALbvh45eCMDOfy7Dcd3Npgg0qc=
Subject key identifier:   DD:99:E5:81:26:EB:7F:4E:3D:78:22:18:3B:BD:E2:36:D3:3C:24:24
Certificate issuer:       /CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Certificate serial:       019B7911231A69795D5013BB9C7934FC6332
Authority key identifier: 7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/3ZnlgSbrf049eCIYO73iNtM8JCQ.roa
Signing time:             Thu 01 Jan 2026 10:18:44 +0000
ROA not before:           Thu 01 Jan 2026 10:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216439
IP address blocks:        84.234.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:23:1a:69:79:5d:50:13:bb:9c:79:34:fc:63:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
        Validity
            Not Before: Jan  1 10:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dd99e58126eb7f4e3d7822183bbde236d33c2424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:24:5d:c6:32:7c:12:e5:69:ae:17:ca:44:
                    23:99:da:b8:27:f6:e7:4c:69:32:36:da:1a:4b:66:
                    4e:ac:0f:9b:99:27:91:37:8a:9a:21:6c:12:f7:a0:
                    1b:4e:60:a4:13:18:2c:e4:6e:3b:af:ac:dc:ef:eb:
                    5d:04:ea:a1:23:2c:84:a0:2a:12:ad:26:91:dc:9f:
                    c6:19:82:b5:38:cc:34:24:fe:63:c6:ac:bf:58:8c:
                    c8:02:30:51:08:f0:46:b0:3e:ff:f7:d7:e9:ff:79:
                    f3:ae:01:9f:25:cc:8e:97:68:c1:74:05:9e:90:c6:
                    cc:42:00:fd:00:19:28:f8:b7:13:e5:d9:16:eb:70:
                    fa:14:f9:65:73:7e:97:a3:c5:33:a7:2a:8a:65:5d:
                    a3:d3:68:19:aa:54:51:46:16:c2:24:85:ff:31:61:
                    95:f2:ad:64:be:44:9e:4a:32:58:11:e2:c6:63:f2:
                    b0:7a:8f:8d:39:b1:ea:b1:92:9a:c2:08:da:0c:93:
                    af:5a:38:0c:62:a8:44:ff:92:8c:9a:df:c0:48:1b:
                    dd:4d:5c:84:34:cc:1c:1e:f8:74:f1:18:2b:75:b2:
                    8f:6e:c2:b0:9b:b9:19:ac:44:d2:d4:e0:7d:12:82:
                    0b:b4:04:aa:36:9f:4d:e3:03:7e:e4:43:dd:b3:69:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:99:E5:81:26:EB:7F:4E:3D:78:22:18:3B:BD:E2:36:D3:3C:24:24
            X509v3 Authority Key Identifier:
                keyid:7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/3ZnlgSbrf049eCIYO73iNtM8JCQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.234.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:30:f7:0d:70:71:ae:80:0d:ed:fc:1e:9f:33:43:09:83:5a:
         63:13:20:fa:ca:79:af:28:e9:e7:58:64:81:11:ca:d1:ce:c1:
         5b:6c:f1:2a:b6:07:d7:71:dd:2f:6b:c7:d9:11:d5:84:b1:8f:
         63:a7:bc:b6:1a:1a:1b:ab:f5:be:48:ba:53:64:77:99:ab:29:
         56:38:31:4b:7f:5b:84:e3:b1:7b:5c:c7:e4:a0:b5:df:4e:cc:
         06:5d:b8:be:a0:59:a7:d0:1e:86:55:f1:a9:49:09:03:80:c9:
         f0:50:77:49:ea:72:8a:40:95:91:39:73:5d:f1:d0:f7:3a:44:
         30:fc:27:f9:72:73:97:65:da:1a:9c:df:87:2e:a2:d8:92:02:
         85:76:b5:b2:b3:c3:b2:9b:a8:69:b5:b7:8c:3b:40:0f:96:76:
         19:a7:d1:15:46:ca:72:2c:76:9f:4e:57:bc:31:6f:ee:9e:f0:
         c7:9d:06:3c:5a:d1:b7:ba:ed:be:97:53:a1:a7:4a:96:73:7c:
         60:a2:8c:7e:40:04:4c:33:dc:d2:8b:f6:dc:7c:cd:15:83:68:
         14:2e:09:c4:00:ac:7d:36:b5:c8:00:3a:e9:e9:f7:ac:b7:d9:
         a1:0b:71:ab:b7:96:f9:8b:4f:73:57:8e:25:d2:11:23:a0:47:
         aa:d8:bb:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ESMaaXldUBO7nHk0/GMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZThlODRjZGMwZjQ5ZGFjMjkzYWRmYjVlMDRhNDkxMDhj
ZWQ2NDYwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDk5ZTU4MTI2ZWI3ZjRlM2Q3ODIyMTgzYmJkZTIzNmQzM2MyNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3skXcYyfBLlaa4XykQjmdq4J/bn
TGkyNtoaS2ZOrA+bmSeRN4qaIWwS96AbTmCkExgs5G47r6zc7+tdBOqhIyyEoCoS
rSaR3J/GGYK1OMw0JP5jxqy/WIzIAjBRCPBGsD7/99fp/3nzrgGfJcyOl2jBdAWe
kMbMQgD9ABko+LcT5dkW63D6FPllc36Xo8UzpyqKZV2j02gZqlRRRhbCJIX/MWGV
8q1kvkSeSjJYEeLGY/Kweo+NObHqsZKawgjaDJOvWjgMYqhE/5KMmt/ASBvdTVyE
NMwcHvh08RgrdbKPbsKwm7kZrETS1OB9EoILtASqNp9N4wN+5EPds2nT+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN2Z5YEm639OPXgiGDu94jbTPCQkMB8GA1UdIwQY
MBaAFH7o6EzcD0nawpOt+14EpJEIztZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVqb1ROd1BTZHJDazYzN1hnU2trUWpPMWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hZDgwN2QtZjk4NC00ZjFiLWI4NDct
MGU3NjJlMDZmMjFjLzEvM1pubGdTYnJmMDQ5ZUNJWU83M2lOdE04SkNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hZDgwN2QtZjk4NC00ZjFiLWI4NDctMGU3NjJlMDZmMjFj
LzEvZnVqb1ROd1BTZHJDazYzN1hnU2trUWpPMWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOp/MA0G
CSqGSIb3DQEBCwUAA4IBAQByMPcNcHGugA3t/B6fM0MJg1pjEyD6ynmvKOnnWGSB
EcrRzsFbbPEqtgfXcd0va8fZEdWEsY9jp7y2Ghobq/W+SLpTZHeZqylWODFLf1uE
47F7XMfkoLXfTswGXbi+oFmn0B6GVfGpSQkDgMnwUHdJ6nKKQJWROXNd8dD3OkQw
/Cf5cnOXZdoanN+HLqLYkgKFdrWys8Oym6hptbeMO0APlnYZp9EVRspyLHafTle8
MW/unvDHnQY8WtG3uu2+l1Ohp0qWc3xgoox+QARMM9zSi/bcfM0Vg2gULgnEAKx9
NrXIADrp6fest9mhC3Grt5b5i09zV44l0hEjoEeq2LtX
-----END CERTIFICATE-----
Generated at Tue Feb 10 08:39:16 2026 by rpki-client