This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa
File:                     Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa (raw, json)
Hash identifier:          7cCBpyUsGDrcq8EeS5YX2uI808hKjfebRICORugyh0E=
Subject key identifier:   67:7A:93:28:9E:C2:20:66:AC:89:E1:0B:CF:B9:69:22:9D:98:87:A9
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019B7C135239AEC30DB021A9DCA57099CA5F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa
Signing time:             Fri 02 Jan 2026 00:19:59 +0000
ROA not before:           Fri 02 Jan 2026 00:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204774
IP address blocks:        46.34.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:52:39:ae:c3:0d:b0:21:a9:dc:a5:70:99:ca:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jan  2 00:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=677a93289ec22066ac89e10bcfb969229d9887a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:64:b4:a1:85:4d:bd:47:32:80:26:7a:7a:
                    e5:31:47:74:df:15:44:59:40:62:5d:e5:0a:34:b8:
                    38:4d:eb:80:0c:cc:2b:24:d3:b1:75:d6:6a:35:54:
                    ef:60:51:85:01:af:d3:b7:77:5a:0b:8d:9f:9d:3c:
                    69:d7:33:06:8e:c1:0c:3a:0b:1b:96:74:4e:e6:74:
                    00:d2:ae:c8:0f:84:7b:d0:79:9f:c6:ee:9a:c8:b8:
                    b3:17:56:56:f3:25:a4:fa:e8:bf:0d:93:bc:ca:d0:
                    87:24:48:d7:37:62:45:55:37:5d:a7:ce:ab:7f:ec:
                    7d:24:d3:9e:b5:88:ca:6d:48:95:ca:26:dc:ec:0d:
                    40:dd:3b:2b:b3:f9:ec:4e:b6:0f:25:ff:73:3b:22:
                    81:1b:89:09:ee:2a:77:76:b7:c3:27:37:31:08:40:
                    2c:09:35:1f:98:46:bc:82:cd:9c:b7:38:3e:2f:1a:
                    a9:30:1d:9d:6d:e2:42:95:51:c2:02:e9:63:07:b5:
                    9b:e5:8d:35:ba:c2:a4:e6:eb:98:8e:c4:b0:98:6e:
                    e1:eb:72:0c:6a:a6:db:c9:cd:46:fe:e6:67:18:0b:
                    36:f6:72:63:9f:3e:5d:29:44:c0:28:e0:0e:90:8d:
                    f0:bd:3e:8a:67:9f:11:37:06:a9:af:b9:31:2f:a7:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7A:93:28:9E:C2:20:66:AC:89:E1:0B:CF:B9:69:22:9D:98:87:A9
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:c0:eb:73:8d:18:8d:e8:03:79:d5:d5:bc:c9:08:bf:ac:
         8c:87:e2:0a:55:b5:de:36:26:02:fe:bf:b5:49:6e:93:f5:ad:
         b0:2c:23:14:c1:4a:4b:b8:be:4b:92:7d:cc:9f:24:af:bc:3d:
         b7:ee:ac:88:7a:c7:b3:03:31:53:81:10:77:c4:8a:de:91:e3:
         0e:c3:54:5f:bb:23:e1:9a:00:c8:58:e2:50:96:5b:e5:0f:af:
         b8:ed:aa:c6:0f:51:b6:3b:3e:19:d5:82:7e:fe:e9:4a:e1:b9:
         24:df:69:fd:4e:64:61:ba:9d:6d:fb:5f:93:19:8e:82:3a:f3:
         55:b6:c2:ee:9f:f5:87:c6:7f:6a:d6:73:72:a5:54:be:be:8e:
         b3:83:85:2e:d4:5d:85:23:64:f0:bf:7f:a4:9d:a0:83:5b:93:
         59:15:49:11:fd:89:e9:7b:5d:50:11:27:d1:85:6f:d2:cd:a5:
         2b:a5:9c:cd:b6:27:35:bc:4c:f5:06:e3:0a:06:d1:e4:21:1d:
         2f:87:7e:b2:14:62:dc:ab:b1:73:e0:4a:b5:89:b6:13:36:38:
         a1:23:7a:35:20:82:e7:d9:19:d8:c6:b8:4f:40:b2:d3:6a:87:
         f3:95:1e:47:ee:e7:8c:96:a5:00:81:f4:7f:f8:b6:0c:2a:d6:
         52:ca:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:51:57 2026 by rpki-client