This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/LOa9xv2W9YFuTD_x6lFvwCsCAjA.roa
File:                     LOa9xv2W9YFuTD_x6lFvwCsCAjA.roa (raw, json)
Hash identifier:          YRY3aRjchAoV6SVn5P9y+64CvJS3RI9yxNO5e/xkQfw=
Subject key identifier:   2C:E6:BD:C6:FD:96:F5:81:6E:4C:3F:F1:EA:51:6F:C0:2B:02:02:30
Certificate issuer:       /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial:       019B7F14760B93CA0D50C2D0F4BA588128F5
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/LOa9xv2W9YFuTD_x6lFvwCsCAjA.roa
Signing time:             Fri 02 Jan 2026 14:20:05 +0000
ROA not before:           Fri 02 Jan 2026 14:20:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59723
IP address blocks:        185.233.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:76:0b:93:ca:0d:50:c2:d0:f4:ba:58:81:28:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
        Validity
            Not Before: Jan  2 14:20:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2ce6bdc6fd96f5816e4c3ff1ea516fc02b020230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:5a:94:85:fb:5c:8f:4f:cd:88:71:25:1f:
                    d6:4f:14:f8:70:f1:f6:b0:43:1f:c3:54:6c:fa:6c:
                    3a:3c:50:57:3b:5d:be:c3:e5:44:a2:18:cb:1a:c1:
                    9e:c7:04:20:6b:b8:85:c4:0e:34:d1:d6:01:a7:58:
                    86:71:11:bb:d6:05:6c:1e:95:ff:a7:37:77:40:5d:
                    eb:93:4f:74:d3:78:31:f8:d8:4f:1c:c3:b1:a5:e6:
                    10:5e:17:0c:3f:6f:ed:5d:2d:33:cd:d6:d7:76:03:
                    cd:6e:4d:b3:15:e8:82:9e:31:02:05:7b:06:de:44:
                    0a:41:f0:01:6e:e6:4b:45:cd:69:72:16:ff:23:5f:
                    31:e8:75:dc:af:a8:ad:f8:3c:aa:59:2e:44:4b:04:
                    7a:bc:7e:46:34:32:75:26:74:7e:9f:f7:f1:c6:ab:
                    c3:9f:33:85:1e:38:5c:22:0b:4a:e0:d9:7c:93:08:
                    5b:a1:55:d2:dc:91:a4:57:52:49:fe:70:04:f6:76:
                    56:81:12:e6:47:81:60:f6:b1:8c:c3:7f:2a:9a:33:
                    7b:cf:52:b7:e2:a7:85:4b:53:fa:9e:77:cf:cd:8b:
                    c6:4d:a5:85:eb:50:d7:1a:62:77:8e:e7:9c:57:12:
                    39:59:28:af:08:27:87:17:da:28:ed:ec:a1:ee:f2:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E6:BD:C6:FD:96:F5:81:6E:4C:3F:F1:EA:51:6F:C0:2B:02:02:30
            X509v3 Authority Key Identifier:
                keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/LOa9xv2W9YFuTD_x6lFvwCsCAjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:fa:44:5d:58:ce:73:19:30:7f:ff:02:72:db:8c:1a:f1:68:
         1d:cb:5d:05:61:15:d5:f9:5b:6a:be:b7:a3:d2:39:2e:3e:b6:
         40:93:5a:25:b9:a7:ad:98:c9:d4:7b:26:ed:ce:57:8b:06:5d:
         92:32:60:7d:53:f6:1d:f4:88:20:12:a0:c9:d1:f6:ef:dc:94:
         1a:74:f3:72:35:bd:b0:89:2b:b7:fd:5c:8e:17:09:f7:15:4d:
         05:fb:8a:40:1c:07:e3:05:ba:b0:11:93:c5:ec:bf:f3:59:ec:
         b8:3d:bd:97:e1:b1:a8:1b:a3:47:e2:89:ed:14:b2:1d:07:c6:
         85:ff:9a:7e:3e:68:7c:84:c1:b0:96:23:8f:80:f1:5c:8d:6b:
         52:c2:29:7e:31:94:18:11:b0:e5:66:ff:b4:92:67:14:3d:34:
         c3:64:f7:a9:79:ff:e8:df:8f:7c:16:ef:ab:56:9d:fd:26:ce:
         91:9a:bb:b4:14:df:73:50:51:bb:20:5f:b7:2f:80:d1:78:89:
         72:62:8c:96:6d:db:36:69:43:cc:13:e4:81:23:61:26:8a:67:
         a5:1f:2a:b5:94:f6:c9:77:39:06:cf:fd:e4:b8:62:6f:b6:80:
         e4:ea:2b:f0:a2:3e:68:2d:57:89:56:53:85:55:37:88:02:74:
         59:cb:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:41:42 2026 by rpki-client