This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ezoJl0lo6SFxJ8FpRY4TWMPADso.roa
File:                     ezoJl0lo6SFxJ8FpRY4TWMPADso.roa (raw, json)
Hash identifier:          cD7XM33EvM3euT16GARY/IJgPq96c1JjGDXWgdeNltc=
Subject key identifier:   7B:3A:09:97:49:68:E9:21:71:27:C1:69:45:8E:13:58:C3:C0:0E:CA
Certificate issuer:       /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial:       019B7B35898F430FCA1B41E8E764D549F475
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ezoJl0lo6SFxJ8FpRY4TWMPADso.roa
Signing time:             Thu 01 Jan 2026 20:17:44 +0000
ROA not before:           Thu 01 Jan 2026 20:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197190
IP address blocks:        195.226.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:89:8f:43:0f:ca:1b:41:e8:e7:64:d5:49:f4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
        Validity
            Not Before: Jan  1 20:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b3a09974968e9217127c169458e1358c3c00eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:12:e4:24:70:72:53:11:0c:1c:0e:d7:38:
                    7d:f8:be:03:43:45:12:a3:c6:ca:a0:3c:83:2a:91:
                    6e:0f:f7:88:e0:65:86:4b:e8:a4:b2:79:e4:9f:20:
                    db:a8:9d:9d:c8:42:7a:2a:c8:06:71:25:cd:aa:d8:
                    26:e0:c3:c7:30:82:b9:36:97:02:64:9f:21:2f:98:
                    f6:df:19:25:20:01:03:49:f5:5b:7f:ff:ec:c5:d3:
                    09:61:df:81:66:91:5f:b7:ee:ff:f2:29:89:53:ed:
                    8f:6d:7b:1b:ae:f8:30:ac:4a:51:f4:b7:64:0e:df:
                    31:1e:99:54:6a:cb:03:64:3f:b5:41:fc:bd:3c:58:
                    bd:5e:38:3b:10:fd:b6:61:f0:62:38:21:41:74:be:
                    29:7d:57:be:2c:64:3e:2e:ba:50:e0:40:c8:37:23:
                    8b:29:b3:a0:87:60:c2:f6:d8:d7:e7:a1:ec:b3:76:
                    d3:e2:77:4c:a4:c4:ef:b9:37:48:38:11:4b:ad:93:
                    b4:f1:2c:bc:f5:63:f8:a9:84:03:91:df:d3:e2:93:
                    c8:95:f8:61:b4:2e:6a:a7:cc:88:03:ec:73:d9:c6:
                    30:c0:d5:a7:63:2c:2d:34:b2:cc:88:e9:c5:66:6d:
                    27:54:e3:ad:11:8c:c1:e8:53:21:13:25:96:1a:1c:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3A:09:97:49:68:E9:21:71:27:C1:69:45:8E:13:58:C3:C0:0E:CA
            X509v3 Authority Key Identifier:
                keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ezoJl0lo6SFxJ8FpRY4TWMPADso.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.226.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:d3:d3:db:24:5a:77:a1:ac:4f:dd:e6:cd:6a:a3:d4:62:20:
         dd:8e:62:2f:93:72:07:c3:e3:c2:d0:45:00:cb:8a:8b:e5:b6:
         df:a9:2b:d7:f6:1e:f3:e7:0d:89:24:41:16:70:4a:19:84:d3:
         30:1c:10:c4:8c:32:25:80:b1:90:2c:f5:34:d0:ca:46:b6:33:
         55:a5:1d:61:e2:6a:f6:bd:81:e1:12:5a:ef:6f:0f:3e:4f:51:
         57:78:4b:25:ff:8f:9e:34:67:84:6b:2a:ca:4c:60:aa:85:6f:
         6a:83:a3:8f:d8:a0:ad:72:11:87:fb:8f:4f:5d:80:5f:cd:df:
         86:af:7f:14:d8:4e:bb:c7:de:a4:cf:81:0b:c7:82:9c:2b:1d:
         25:ed:37:66:d2:08:6f:08:2b:ea:0f:1c:85:33:2d:db:b7:92:
         f4:4f:7d:67:d4:7f:62:04:03:3e:08:5f:b9:53:07:cc:8e:29:
         ff:6e:f3:e6:55:6e:ac:67:14:05:38:1d:da:88:d1:9c:9c:77:
         21:62:ed:92:25:86:8a:49:f6:86:b6:95:30:25:db:ff:d4:db:
         0e:a7:1c:39:c3:0b:ea:c6:da:ea:67:83:dd:bb:bb:cb:86:0f:
         d0:77:56:37:10:2f:c2:c2:ae:98:ec:27:c0:de:0b:1d:28:d0:
         09:36:86:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NYmPQw/KG0Ho52TVSfR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmM2YzNkMjJjZjZiMTAxZDcxNDgwMDZkYTdhNzI4NGRj
YmIzMjAwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjNhMDk5NzQ5NjhlOTIxNzEyN2MxNjk0NThlMTM1OGMzYzAwZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OoS5CRwclMRDBwO1zh9+L4DQ0US
o8bKoDyDKpFuD/eI4GWGS+iksnnknyDbqJ2dyEJ6KsgGcSXNqtgm4MPHMIK5NpcC
ZJ8hL5j23xklIAEDSfVbf//sxdMJYd+BZpFft+7/8imJU+2PbXsbrvgwrEpR9Ldk
Dt8xHplUassDZD+1Qfy9PFi9Xjg7EP22YfBiOCFBdL4pfVe+LGQ+LrpQ4EDINyOL
KbOgh2DC9tjX56Hss3bT4ndMpMTvuTdIOBFLrZO08Sy89WP4qYQDkd/T4pPIlfhh
tC5qp8yIA+xz2cYwwNWnYywtNLLMiOnFZm0nVOOtEYzB6FMhEyWWGhymbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHs6CZdJaOkhcSfBaUWOE1jDwA7KMB8GA1UdIwQY
MBaAFGYsbD0iz2sQHXFIAG2npyhNy7MgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQt
ZjIxYjZhZTNiZTZjLzEvZXpvSmwwbG82U0Z4SjhGcFJZNFRXTVBBRHNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQtZjIxYjZhZTNiZTZj
LzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+LHMA0G
CSqGSIb3DQEBCwUAA4IBAQC309PbJFp3oaxP3ebNaqPUYiDdjmIvk3IHw+PC0EUA
y4qL5bbfqSvX9h7z5w2JJEEWcEoZhNMwHBDEjDIlgLGQLPU00MpGtjNVpR1h4mr2
vYHhElrvbw8+T1FXeEsl/4+eNGeEayrKTGCqhW9qg6OP2KCtchGH+49PXYBfzd+G
r38U2E67x96kz4ELx4KcKx0l7Tdm0ghvCCvqDxyFMy3bt5L0T31n1H9iBAM+CF+5
UwfMjin/bvPmVW6sZxQFOB3aiNGcnHchYu2SJYaKSfaGtpUwJdv/1NsOpxw5wwvq
xtrqZ4Pdu7vLhg/Qd1Y3EC/Cwq6Y7CfA3gsdKNAJNobQ
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:10 2026 by rpki-client