This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/ZyCMXfbtNuXumIzCS12JtYABWa8.roa
File:                     ZyCMXfbtNuXumIzCS12JtYABWa8.roa (raw, json)
Hash identifier:          FCS7VDdR2sOQaENYtuEq5+AVcoh+zteoO7fT7vMr+Ek=
Subject key identifier:   67:20:8C:5D:F6:ED:36:E5:EE:98:8C:C2:4B:5D:89:B5:80:01:59:AF
Certificate issuer:       /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial:       019B7B358C75523112E1BD4266F51F1B758E
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/ZyCMXfbtNuXumIzCS12JtYABWa8.roa
Signing time:             Thu 01 Jan 2026 20:17:45 +0000
ROA not before:           Thu 01 Jan 2026 20:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213425
IP address blocks:        195.200.69.0/24 maxlen: 24
                          2a14:8180::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:8c:75:52:31:12:e1:bd:42:66:f5:1f:1b:75:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
        Validity
            Not Before: Jan  1 20:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=67208c5df6ed36e5ee988cc24b5d89b5800159af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:e7:93:69:55:e0:29:94:e8:2f:e3:01:35:
                    91:05:2b:df:54:ff:03:75:97:5e:24:a7:60:39:9b:
                    a3:ae:23:7d:8b:c6:5d:1a:1d:7a:5d:2c:5c:f9:03:
                    c8:f5:35:73:fc:7c:f7:40:72:90:b9:45:64:9f:31:
                    40:4a:d5:c8:3a:ed:67:e0:0b:c1:c4:14:ad:35:4a:
                    bd:ad:f5:a7:5e:6b:fc:68:3d:37:8a:02:6c:9d:70:
                    59:e1:85:a2:e1:39:f2:45:c7:fb:7a:1c:f9:77:e1:
                    ab:69:c3:be:47:05:33:39:8d:2e:05:7f:e2:22:c5:
                    1c:86:2c:f9:9a:4f:7a:45:a2:69:4e:8a:72:53:df:
                    dd:e0:87:2d:20:bd:fe:13:41:82:e3:85:8d:c4:3f:
                    1e:6a:09:72:02:e7:57:b9:9c:b2:c4:48:cc:4e:d9:
                    a4:44:b1:75:87:ce:6e:5f:25:ef:73:03:6e:6e:ef:
                    97:36:f3:c8:15:d0:09:79:01:c0:e0:15:92:ad:ef:
                    6d:47:f4:6f:df:b3:e1:f0:5b:d3:bc:22:98:41:51:
                    dc:19:23:a4:a3:8c:a3:49:40:aa:fe:f5:f5:56:0a:
                    69:5c:9f:26:4a:f3:75:2f:bc:7c:6c:6b:78:94:9a:
                    de:2d:e7:2e:4e:ff:72:d5:ac:67:af:bc:24:25:5f:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:8C:5D:F6:ED:36:E5:EE:98:8C:C2:4B:5D:89:B5:80:01:59:AF
            X509v3 Authority Key Identifier:
                keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/ZyCMXfbtNuXumIzCS12JtYABWa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.200.69.0/24
                IPv6:
                  2a14:8180::/29

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:2e:8d:9a:6b:3f:92:16:f1:bc:e9:f3:62:89:a1:27:7b:
         6f:99:61:3f:be:bf:49:7c:fa:fc:54:8a:9c:cd:c0:95:3f:20:
         d2:a3:a9:d3:3f:1b:db:0b:97:7a:06:6d:c6:26:e1:9f:53:f7:
         6f:dc:1c:f1:8b:15:f8:4e:39:50:19:77:58:65:26:5e:95:01:
         30:7b:5b:2a:de:79:b0:cd:5b:b8:bc:5d:2b:6e:30:bd:a1:8f:
         22:9a:35:41:21:37:93:fc:62:84:0d:ea:81:e8:2a:a6:d0:64:
         28:86:ff:27:b7:ff:e9:95:63:81:a9:77:8c:b8:2f:28:69:09:
         90:8b:af:b4:41:db:03:8d:c3:fd:f8:d9:54:d9:83:c9:b4:e8:
         07:86:1b:eb:f0:7c:47:b4:c4:68:f3:91:93:8d:d1:67:c6:db:
         af:94:1a:a0:63:dd:f5:6d:7a:b1:a9:ee:2a:37:95:2a:5b:b1:
         83:15:e8:c2:a1:a4:4d:fe:8e:15:b6:d1:ce:17:c9:ab:ef:ee:
         8e:dd:8e:c4:ec:28:10:f1:d9:7a:93:e0:14:cb:ee:fb:5b:02:
         80:13:24:f9:c6:de:f1:90:d9:a5:4f:61:00:df:6a:0c:5f:0f:
         f1:ef:f5:a3:55:84:b3:42:75:da:0f:9d:ab:47:55:c8:e0:c6:
         cb:56:c4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:48 2026 by rpki-client