This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/27zcknbY6uFbGkue7arqp2ILKCs.roa
File:                     27zcknbY6uFbGkue7arqp2ILKCs.roa (raw, json)
Hash identifier:          gpJvert0Lh9JUkut8FStHwtZUz3TUyKcakIAUMaCQCw=
Subject key identifier:   DB:BC:DC:92:76:D8:EA:E1:5B:1A:4B:9E:ED:AA:EA:A7:62:0B:28:2B
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019B7DCB492CF4F6CD40894BE60A706F9629
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/27zcknbY6uFbGkue7arqp2ILKCs.roa
Signing time:             Fri 02 Jan 2026 08:20:33 +0000
ROA not before:           Fri 02 Jan 2026 08:20:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133504
IP address blocks:        151.243.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:49:2c:f4:f6:cd:40:89:4b:e6:0a:70:6f:96:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan  2 08:20:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dbbcdc9276d8eae15b1a4b9eedaaeaa7620b282b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:e0:6d:72:4d:5b:fd:01:91:5f:dd:de:d5:
                    0e:22:e7:9b:a5:41:34:2b:83:41:2b:f3:7e:2e:26:
                    b6:29:01:a1:f3:58:f3:1f:1b:d3:52:bc:3a:a1:02:
                    52:d6:63:f4:5a:f0:fb:b2:b6:0b:75:99:a1:6a:cc:
                    46:8d:0a:52:b8:e4:7c:61:84:24:28:ad:2e:4a:33:
                    27:5b:b8:de:a1:e8:9c:48:74:55:42:f7:9e:6c:a0:
                    2c:d2:e7:32:93:03:a4:da:50:4c:4a:04:9d:e5:59:
                    d3:d7:77:e3:b2:4e:70:dd:78:0c:69:25:2c:39:3e:
                    54:51:b9:6f:b7:3c:75:b0:74:7d:da:07:28:ed:7a:
                    7a:3c:4d:98:50:d6:df:f3:06:65:55:db:d2:c5:00:
                    98:39:d8:a7:c5:d0:72:94:88:5c:d9:5a:d4:de:e9:
                    b3:3c:d5:45:32:d8:1b:00:81:c9:12:ec:32:15:e4:
                    6f:26:d6:1f:9d:b3:f0:ca:e0:ab:ea:05:05:ac:3e:
                    04:83:9d:07:44:15:db:1f:42:87:f3:d8:09:b3:24:
                    81:d1:b7:d7:6a:10:41:00:77:48:18:e3:23:05:7f:
                    ec:e5:3a:20:8c:d3:4c:9d:b0:ec:70:01:06:03:d5:
                    f2:78:f0:e8:12:9c:17:d2:04:b7:12:ad:f9:3f:c1:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BC:DC:92:76:D8:EA:E1:5B:1A:4B:9E:ED:AA:EA:A7:62:0B:28:2B
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/27zcknbY6uFbGkue7arqp2ILKCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.243.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:fa:6d:14:2b:ab:e7:de:36:8c:5e:b9:7f:f1:bd:4e:49:
         77:22:e5:9e:05:bc:09:ae:cc:9b:a7:02:bb:fc:0b:df:44:4d:
         97:4c:eb:1c:0d:f9:79:25:a4:38:e4:fc:38:66:e9:e3:e7:67:
         1e:e9:4d:6a:d6:16:58:f6:3a:2c:75:a4:7e:cd:9c:e7:17:93:
         c3:7e:dc:d7:d3:f1:bc:e2:b8:41:cd:a9:ad:54:41:24:2b:3f:
         30:ef:c0:d2:83:2e:be:b7:a8:d2:d2:61:89:d8:0f:4c:5b:43:
         57:c5:66:39:56:1f:4b:76:e2:71:1c:7f:4a:2f:5b:bb:09:38:
         dd:4b:b1:d4:42:a4:2d:c8:89:39:05:d3:f5:74:de:50:f4:14:
         67:b1:a2:01:ce:2d:16:a8:ff:e5:71:ee:8f:4f:d6:c5:ca:cf:
         38:b5:b9:09:42:75:0f:23:ae:3d:c7:18:85:d4:df:e2:f9:69:
         be:46:9e:a8:ab:b2:92:2c:be:34:7a:b0:16:6d:3f:70:f8:23:
         e6:a1:0c:79:63:63:4c:c6:f9:37:9e:9d:02:a6:e0:da:3a:03:
         60:76:2c:ad:e1:c4:51:2f:52:92:a6:1f:8d:a9:ca:45:9a:c2:
         c0:8a:49:21:55:29:1e:e1:7c:c4:1a:d8:a4:ff:2c:76:c7:1d:
         ae:e6:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:29:57 2026 by rpki-client