This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa
File:                     zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (raw, json)
Hash identifier:          YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=
Subject key identifier:   CF:20:6F:2B:4E:7D:9D:2D:96:C2:9D:A0:06:A5:A8:EC:9C:7E:62:C2
Certificate issuer:       /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial:       019B7EA750BB8C21B30777A6FC6FBD438ED6
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa
Signing time:             Fri 02 Jan 2026 12:20:52 +0000
ROA not before:           Fri 02 Jan 2026 12:20:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15388
IP address blocks:        178.254.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:50:bb:8c:21:b3:07:77:a6:fc:6f:bd:43:8e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
        Validity
            Not Before: Jan  2 12:20:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cf206f2b4e7d9d2d96c29da006a5a8ec9c7e62c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:5d:6a:7a:e7:21:37:07:03:68:89:bc:dd:
                    7f:c3:b8:62:09:73:fd:f1:09:d7:ec:72:ef:3d:24:
                    43:1a:de:86:b1:57:60:8f:29:74:82:6c:a1:30:6f:
                    a2:f3:8c:32:45:63:63:fa:6e:72:52:70:74:b6:62:
                    91:34:58:5d:d6:6e:78:51:aa:31:27:68:73:1d:3c:
                    21:37:be:6f:3e:06:19:bc:72:6e:ac:5f:42:67:41:
                    19:1a:ee:92:dc:d0:ed:98:db:4d:2b:72:34:df:a9:
                    1d:7d:1b:44:81:cb:23:9a:e4:b7:39:9a:0d:2d:be:
                    d2:7a:7e:66:1f:a6:44:0d:b8:19:ac:d0:7b:42:04:
                    5c:c6:80:88:d0:a3:00:a2:f2:4a:65:d9:f9:92:f1:
                    4b:98:b4:15:fb:1f:f6:3b:ed:7c:2f:af:d8:3f:cc:
                    77:05:69:08:f0:b1:e6:39:94:be:9a:38:50:39:40:
                    9a:3d:34:b2:89:55:ae:4c:50:fd:c1:d9:40:ac:30:
                    d3:97:52:9d:ce:82:cf:af:6b:da:50:b4:16:16:49:
                    61:af:77:27:1e:d5:a8:d3:a4:2b:b5:68:a7:d4:bd:
                    e6:de:9b:17:11:f9:19:a4:7b:c3:36:aa:d9:7d:b8:
                    b7:be:95:ba:67:8e:6e:37:b0:ff:16:6d:23:e6:9e:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:6F:2B:4E:7D:9D:2D:96:C2:9D:A0:06:A5:A8:EC:9C:7E:62:C2
            X509v3 Authority Key Identifier:
                keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:ab:92:5a:58:86:0e:ba:2b:a9:1d:ca:ca:bf:ee:28:71:
         b2:78:27:52:3c:e0:d8:a6:9e:a9:78:c9:6a:02:3d:ae:ac:bb:
         10:dc:b6:e3:7e:4f:ad:8c:e8:cf:1b:6e:21:5f:79:d0:24:ce:
         e4:3c:f3:c4:41:db:1b:d7:b8:2d:04:64:16:55:28:87:1f:15:
         e4:52:3e:ec:65:59:d8:68:54:9d:58:7a:37:79:7a:a4:26:3d:
         f3:23:be:34:2c:15:a3:ee:9b:05:aa:3b:e3:a3:df:00:f5:3b:
         da:00:86:68:13:e3:8f:8d:8e:08:27:30:63:38:89:ed:c9:07:
         2a:3a:5c:dc:bc:8c:8b:4d:20:d3:b2:0e:1e:be:e0:18:13:d1:
         a5:82:7e:56:83:e0:af:61:f5:18:cf:5b:06:16:cc:ea:cd:00:
         c7:56:50:95:16:42:96:11:81:3b:d0:85:d1:1f:0c:e0:68:8f:
         6b:75:84:37:8f:b8:8c:6a:43:41:86:8c:8d:3c:15:fb:01:ac:
         25:34:67:07:b6:ce:a2:b7:48:4e:06:fc:37:6d:68:c1:c5:25:
         90:27:fb:3d:71:3d:96:44:42:3a:32:70:eb:21:96:a4:f0:e0:
         1d:8d:52:e1:4b:c2:11:3a:50:c1:d2:e9:ba:6e:c9:93:84:06:
         2d:9b:57:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:22:32 2026 by rpki-client