This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZXcMeeipBn7sUUJEU91rzEI17zk.roa
File:                     ZXcMeeipBn7sUUJEU91rzEI17zk.roa (raw, json)
Hash identifier:          5bsppIb2wCZVXZGFfEu5mwku1Y7/zmbNHcXjdaosbrc=
Subject key identifier:   65:77:0C:79:E8:A9:06:7E:EC:51:42:44:53:DD:6B:CC:42:35:EF:39
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       019B77C707E5B63D56244D4862289A1F0D9C
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZXcMeeipBn7sUUJEU91rzEI17zk.roa
Signing time:             Thu 01 Jan 2026 04:18:10 +0000
ROA not before:           Thu 01 Jan 2026 04:18:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200019
IP address blocks:        188.214.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:07:e5:b6:3d:56:24:4d:48:62:28:9a:1f:0d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Jan  1 04:18:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=65770c79e8a9067eec51424453dd6bcc4235ef39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:ed:62:ae:a5:a2:a2:1f:52:4b:d6:0e:00:
                    ac:a9:e2:3b:86:05:3d:d4:32:9f:5a:6b:41:83:98:
                    62:34:d2:4e:f0:bc:14:47:2f:58:ea:22:a6:ed:5f:
                    ff:f1:1b:75:35:c3:11:b0:2c:43:89:9a:96:bc:09:
                    17:3d:57:93:fa:f6:5f:af:b5:2e:73:79:39:2e:a4:
                    24:fa:bb:54:3c:43:46:e6:2e:f1:b1:e6:8c:34:72:
                    00:fd:14:d7:3f:ec:17:6c:ba:5f:7f:77:cd:9c:d6:
                    d3:8c:5b:2e:5c:a5:a9:ea:2d:59:cc:59:55:2a:5d:
                    6b:f5:3c:8f:dd:d1:77:5f:03:26:93:20:92:72:da:
                    62:82:26:60:02:ad:e6:f9:7c:d2:dc:1e:71:a1:c7:
                    fe:71:14:77:72:db:20:78:72:d1:ae:57:0f:a4:54:
                    cc:d1:6c:88:be:93:de:a4:34:3a:9f:3b:35:7e:2f:
                    a4:dd:e3:60:8f:fb:33:d3:47:46:57:85:3d:2d:53:
                    59:4e:a4:71:17:d3:db:bb:d7:6d:c4:12:cb:df:b2:
                    cb:0a:1a:58:8b:9c:93:42:a2:29:81:d0:96:ff:11:
                    fb:be:42:0f:d5:72:39:68:92:f6:e1:d8:4f:6f:28:
                    12:82:c6:47:a3:ed:68:64:c3:c4:96:df:b4:61:36:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:77:0C:79:E8:A9:06:7E:EC:51:42:44:53:DD:6B:CC:42:35:EF:39
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZXcMeeipBn7sUUJEU91rzEI17zk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.214.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:51:69:0c:82:7c:b6:e6:51:50:64:1b:53:e9:73:e2:8a:d9:
         39:c5:4b:4d:28:ba:43:eb:d3:23:87:58:f8:22:0f:c7:b2:66:
         0b:a9:1e:39:22:ef:86:31:20:4d:47:59:ad:8a:25:06:25:66:
         c1:b0:e8:7e:c6:7a:69:76:e6:5d:18:fb:d8:ee:36:3a:f3:4f:
         2b:ea:ad:83:4c:fe:4c:8f:01:a3:f9:ab:c4:a9:76:72:01:c6:
         7f:9e:05:e8:b7:9f:69:b5:97:b5:6c:51:6b:e5:c2:7d:0b:c5:
         17:37:db:df:65:77:52:8a:98:02:0a:82:fa:93:77:ce:e9:b5:
         e6:3e:c5:31:b6:66:7a:78:e8:53:2e:4f:62:e6:3e:f5:d1:40:
         00:e4:3c:d1:af:4b:8b:8d:43:e3:93:0b:27:c0:8c:4c:d3:c6:
         7c:6a:c1:57:5b:eb:45:e8:44:77:24:8c:07:d5:ea:f7:4c:15:
         dc:6b:44:2c:05:8d:ad:c2:a7:4c:8c:7f:3f:bf:c6:c0:16:b1:
         cb:ec:96:4e:02:98:54:9d:45:68:4d:12:d6:26:0f:99:6f:44:
         42:a0:43:65:05:bf:5f:b2:4c:47:21:ac:ac:04:b9:c8:94:24:
         f6:c3:b6:e1:23:b1:44:93:14:03:cc:49:58:a0:cc:28:35:a5:
         f4:0f:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:56:01 2026 by rpki-client