This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/zWI51cMGq8NIsv4xHlGLcLlujuY.roa
File:                     zWI51cMGq8NIsv4xHlGLcLlujuY.roa (raw, json)
Hash identifier:          eQXeTCbeaOa+X96n8vuRc2zEoYqnb9UvGcseeMKxWrA=
Subject key identifier:   CD:62:39:D5:C3:06:AB:C3:48:B2:FE:31:1E:51:8B:70:B9:6E:8E:E6
Certificate issuer:       /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial:       019B7C122C4BCDE6004F31ECA8BB45452704
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/zWI51cMGq8NIsv4xHlGLcLlujuY.roa
Signing time:             Fri 02 Jan 2026 00:18:44 +0000
ROA not before:           Fri 02 Jan 2026 00:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60478
IP address blocks:        185.31.100.0/22 maxlen: 22
                          2a00:b420::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:2c:4b:cd:e6:00:4f:31:ec:a8:bb:45:45:27:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7401e0249418b357547268824f6244925d8db39
        Validity
            Not Before: Jan  2 00:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cd6239d5c306abc348b2fe311e518b70b96e8ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:a5:bb:75:5f:49:74:25:5c:22:1a:1a:fe:
                    8c:13:bb:30:91:78:5e:6f:0e:f7:02:10:fa:be:27:
                    a0:58:65:23:67:b4:ad:87:4e:85:1d:cf:e2:13:ea:
                    0b:7c:18:ce:60:c3:a2:6c:ab:65:7a:48:6e:67:d6:
                    10:7f:56:c0:06:c5:c5:8c:19:92:da:9e:2b:ca:e3:
                    30:6b:48:dc:18:0e:90:48:43:27:72:68:91:44:1b:
                    1e:8d:43:c7:e7:fd:66:f0:38:04:91:70:1b:32:e3:
                    cd:3b:17:cf:fa:77:32:26:0f:65:40:f8:e3:9e:14:
                    96:cb:67:c6:b2:55:9d:9a:53:df:b1:52:b0:88:06:
                    d7:f5:0a:63:be:d6:d4:25:cf:40:8a:47:25:74:cf:
                    f6:b1:62:7d:e2:44:ae:01:5a:9d:c7:c0:29:fc:d1:
                    c6:ff:e8:3e:a4:6d:67:90:2d:b2:3f:b9:02:ad:ff:
                    0e:08:d8:3a:13:e8:42:0d:30:f6:11:c1:28:cf:ef:
                    72:1e:b6:36:86:cc:43:9a:23:bb:b0:6f:47:d8:28:
                    96:cc:da:04:cf:4b:4e:2f:c9:d8:5c:f4:b8:44:76:
                    be:76:b4:12:81:91:aa:10:64:a7:7a:87:79:91:88:
                    3d:f5:89:2f:5c:0f:5c:55:4d:6e:c1:fc:ac:54:88:
                    d6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:62:39:D5:C3:06:AB:C3:48:B2:FE:31:1E:51:8B:70:B9:6E:8E:E6
            X509v3 Authority Key Identifier:
                keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/zWI51cMGq8NIsv4xHlGLcLlujuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.31.100.0/22
                IPv6:
                  2a00:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:97:7f:97:44:71:26:1f:da:bd:6c:3b:b8:c8:c3:ab:2a:3e:
         58:bf:e8:f2:88:c3:b0:35:f1:52:1f:7b:e5:01:25:9b:65:84:
         74:de:4c:83:bc:2f:48:b4:36:a5:ed:65:6b:7e:e3:44:bf:8a:
         4f:01:15:e0:00:36:ad:de:89:52:aa:a2:0c:18:95:7d:b9:c0:
         8b:e6:4c:3f:7a:6e:f6:2d:9a:9a:2d:11:6d:81:db:40:55:8f:
         ec:ed:b1:a9:32:12:e9:4c:1b:9c:a0:4f:e9:c8:cf:b8:5e:f7:
         49:b7:ac:6d:7f:1d:8c:d7:42:ea:5f:70:c2:05:f1:79:c7:14:
         91:ec:7c:4c:bd:51:45:12:39:06:7e:e8:df:83:7c:6d:a7:cb:
         5f:e9:0f:3e:82:59:67:cc:7d:14:fc:8e:eb:cd:97:67:30:ed:
         11:27:ac:f2:c0:ef:c7:3d:20:82:86:6d:62:a6:26:7b:5e:59:
         35:07:b4:47:dd:fd:75:4f:ff:58:10:17:a7:4e:ba:1e:9c:6d:
         0d:50:80:31:11:73:1f:2a:4e:17:16:98:ab:9b:ac:66:bf:e7:
         76:3e:bc:b5:45:ac:55:dd:a1:77:e6:9b:62:df:76:69:7f:60:
         41:bd:b6:fb:09:97:25:59:5c:e6:38:0e:0c:1c:47:af:39:55:
         98:25:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:01 2026 by rpki-client