This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/OZMA82xPSJu-yBhBRmE2uQQQB7c.roa
File:                     OZMA82xPSJu-yBhBRmE2uQQQB7c.roa (raw, json)
Hash identifier:          hd/p26xBT3/OwpQY6ul+XP0iSi+M0eAbCh1LP64Oo+I=
Subject key identifier:   39:93:00:F3:6C:4F:48:9B:BE:C8:18:41:46:61:36:B9:04:10:07:B7
Certificate issuer:       /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial:       019B7D5AAFEFF75D10FB628C64A58A44C0D5
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/OZMA82xPSJu-yBhBRmE2uQQQB7c.roa
Signing time:             Fri 02 Jan 2026 06:17:33 +0000
ROA not before:           Fri 02 Jan 2026 06:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48173
IP address blocks:        193.101.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:af:ef:f7:5d:10:fb:62:8c:64:a5:8a:44:c0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
        Validity
            Not Before: Jan  2 06:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=399300f36c4f489bbec81841466136b9041007b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:25:3c:b8:b5:f8:bd:1e:50:0b:f5:62:66:
                    10:42:56:c4:ee:78:c7:72:7b:b7:b4:db:c6:b1:e5:
                    f1:fc:77:f7:38:31:48:da:7b:15:02:fc:cb:e8:17:
                    fa:d0:ac:7b:de:73:09:2d:9e:02:17:69:01:c4:0d:
                    ab:90:05:55:11:e2:49:96:c6:7d:ff:cf:a6:fa:93:
                    17:0b:0b:6f:23:e8:3b:c4:37:c2:13:f1:cd:43:56:
                    f6:ce:e8:01:7c:b1:7a:d6:2b:30:c0:05:f4:70:f8:
                    f8:2f:35:a3:9d:f3:cb:ce:7e:66:49:61:8e:8e:f1:
                    d4:17:15:66:51:2a:a7:5c:4e:58:26:c4:48:d7:9e:
                    0d:1f:8c:ca:99:8b:f3:33:be:69:39:69:2c:42:a5:
                    91:89:e8:e9:9c:85:51:4b:32:4c:c0:09:a5:b1:74:
                    c6:d1:8e:02:c9:36:97:da:5a:b5:54:2a:bb:d8:d6:
                    2f:0f:ed:37:8e:5a:f7:4d:9e:80:a9:48:bf:f7:11:
                    ff:03:f2:5d:c3:64:90:86:85:3d:74:91:4d:87:b2:
                    86:eb:e6:f9:a6:ac:a6:13:35:0f:36:21:bd:9d:bf:
                    55:b9:56:5c:ad:60:b4:7c:08:c1:da:b8:29:1d:5e:
                    2f:56:15:ca:83:b2:96:0e:1a:32:9b:c6:d8:7b:b2:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:93:00:F3:6C:4F:48:9B:BE:C8:18:41:46:61:36:B9:04:10:07:B7
            X509v3 Authority Key Identifier:
                keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/OZMA82xPSJu-yBhBRmE2uQQQB7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.101.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:90:6e:91:6f:18:ee:5a:f6:2f:73:ef:94:0c:32:ef:e9:b1:
         10:38:e8:b0:2e:dd:ff:d3:62:9c:32:61:29:1d:70:cc:e5:ff:
         9c:6d:43:c8:e7:12:a0:16:9d:50:75:e7:52:a2:de:44:f5:70:
         92:25:10:17:aa:f2:6c:ce:29:2e:3c:48:89:48:9b:5d:06:20:
         44:76:c3:39:6d:2c:33:ac:a8:b9:03:07:4a:e3:91:c1:75:f2:
         b1:0c:73:4c:c0:a2:7e:66:5e:1e:ed:03:92:b5:b1:54:8d:43:
         f7:c4:73:5a:ff:f0:c0:a1:57:22:d8:8c:89:cf:70:49:23:9e:
         a5:8f:32:0c:4a:b3:6e:b6:a9:11:ad:98:b1:0a:26:c4:9c:a7:
         77:dd:16:9c:30:c1:fd:c9:74:4b:ea:36:f4:01:17:3c:e7:56:
         5f:95:1b:10:34:5d:81:92:6f:62:e6:71:99:3a:30:82:ea:43:
         d9:f9:fa:56:86:47:0b:0c:8e:5e:be:68:d3:67:eb:04:68:db:
         88:7e:3b:c2:c9:95:33:b8:81:6f:03:7e:25:22:65:4e:45:d3:
         a3:fc:be:33:76:44:e0:16:cf:62:77:ef:03:ed:45:db:f6:db:
         92:39:7a:fc:c0:b4:36:8a:91:2c:52:27:68:64:6d:8e:77:f4:
         23:90:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:26:34 2026 by rpki-client