This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa
File:                     zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (raw, json)
Hash identifier:          Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=
Subject key identifier:   CC:69:28:A2:0A:4E:49:5E:CE:AD:11:44:F1:9C:50:95:B1:4C:99:FD
Certificate issuer:       /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial:       019B7F153F3E54AE3BD3C7D40BA987E35216
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa
Signing time:             Fri 02 Jan 2026 14:20:57 +0000
ROA not before:           Fri 02 Jan 2026 14:20:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203
IP address blocks:        193.178.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:3f:3e:54:ae:3b:d3:c7:d4:0b:a9:87:e3:52:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
        Validity
            Not Before: Jan  2 14:20:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cc6928a20a4e495ecead1144f19c5095b14c99fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cb:05:3e:b8:3d:51:9b:54:80:df:ef:b8:49:
                    98:61:14:d3:9c:ed:51:42:87:42:44:06:b8:87:d8:
                    63:fc:75:93:cb:9d:8d:df:85:95:1b:cc:9a:49:bd:
                    36:45:90:b6:de:78:24:2b:c9:11:aa:96:bd:42:29:
                    05:d2:be:6c:de:e8:65:a6:30:0c:73:4a:49:1e:59:
                    48:4e:a6:3d:0d:86:1b:ea:ff:68:e4:a1:76:ed:18:
                    60:e1:b1:01:3b:ca:17:06:3c:05:10:43:e8:8f:a6:
                    88:bd:01:9f:76:41:28:71:ef:da:18:cc:40:ef:5e:
                    81:04:01:2c:7b:a8:e7:6b:05:78:4e:3a:33:c6:2d:
                    d9:65:5e:87:fe:2a:32:e9:51:5a:7b:fb:00:2d:6d:
                    89:d2:55:a4:bf:09:e5:30:1d:18:32:54:e1:d6:53:
                    cc:01:36:52:c8:a6:f9:c0:ca:23:07:8c:c4:ff:dd:
                    48:2c:72:b9:97:9e:17:87:f2:77:fa:ed:0a:34:34:
                    8d:a0:da:03:59:ea:a6:cd:77:72:14:00:a4:fb:43:
                    34:ad:10:ab:59:57:ff:b8:34:87:22:79:5f:08:e7:
                    d4:da:7c:ae:6d:d8:05:3b:d8:09:81:07:1a:9c:9b:
                    1f:4f:db:1b:a1:69:a8:36:f2:3c:bf:84:45:95:7a:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:69:28:A2:0A:4E:49:5E:CE:AD:11:44:F1:9C:50:95:B1:4C:99:FD
            X509v3 Authority Key Identifier:
                keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5d:02:af:1b:72:ef:b0:e8:75:e8:bf:92:d9:ea:33:e6:6e:
         dd:a8:96:2f:51:fc:fa:a6:ef:2e:6e:84:74:d5:95:4f:97:f3:
         34:86:7c:9d:8e:ae:39:16:d5:58:e1:22:b0:3e:e2:5b:68:eb:
         b9:11:92:31:b8:ba:77:32:30:1c:ca:5a:13:fc:c4:34:3c:a9:
         6c:06:63:56:07:a8:e9:33:97:23:3d:9e:55:54:df:d7:fb:29:
         5f:8f:d4:c9:8b:36:38:cf:1a:fb:82:f5:e7:de:a5:f8:4a:13:
         67:bd:27:e3:f4:4c:6c:5e:11:fe:57:3c:97:2d:e1:f6:11:9b:
         5e:20:38:7c:ea:f1:6e:a8:f4:a7:1d:85:18:57:a0:f5:2a:3e:
         ba:67:78:e3:1f:14:dd:ed:40:1f:39:90:24:f3:09:e6:97:e1:
         00:c8:1c:ff:97:d7:ff:b4:ac:eb:8f:55:fc:df:be:de:56:31:
         72:3e:68:6b:75:c3:43:08:e0:64:b2:e5:96:25:b9:b7:29:2c:
         2e:fb:64:18:39:1a:d9:74:39:56:90:8c:93:63:b0:a8:59:9b:
         2d:d5:4d:20:29:a6:f8:c9:45:ce:43:94:6d:70:68:48:b6:63:
         18:90:67:7d:9a:69:41:19:8a:b1:3a:ca:25:bf:db:66:91:4f:
         be:dc:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 09:48:32 2026 by rpki-client