This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/Zj34HNU6ikECXRJN4URIatUwvoo.roa
File:                     Zj34HNU6ikECXRJN4URIatUwvoo.roa (raw, json)
Hash identifier:          lyjNKlqhYGZwJZeL+GJ/hhK1LHVsbOhkZp/xurQj4dc=
Subject key identifier:   66:3D:F8:1C:D5:3A:8A:41:02:5D:12:4D:E1:44:48:6A:D5:30:BE:8A
Certificate issuer:       /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial:       019B7B35B0D0A41F0463D070A663B049E1FC
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/Zj34HNU6ikECXRJN4URIatUwvoo.roa
Signing time:             Thu 01 Jan 2026 20:17:54 +0000
ROA not before:           Thu 01 Jan 2026 20:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     196939
IP address blocks:        193.105.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:b0:d0:a4:1f:04:63:d0:70:a6:63:b0:49:e1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
        Validity
            Not Before: Jan  1 20:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=663df81cd53a8a41025d124de144486ad530be8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:5b:21:e8:dd:e6:40:a6:32:f6:98:45:58:
                    f4:6b:46:d4:e9:29:8f:e7:e2:ad:98:66:c3:ff:66:
                    43:37:14:d4:cd:94:11:1d:a1:31:91:93:5e:7c:bd:
                    3e:02:29:fc:37:02:d3:ed:4a:c8:e6:eb:bd:8d:2a:
                    15:55:37:2a:83:f7:b4:f8:4f:bf:3d:93:b3:52:fd:
                    3d:d6:6d:47:39:8d:42:1d:c1:cd:2f:d7:16:22:50:
                    40:16:e7:1f:5b:67:8a:2a:d9:0a:b5:ce:96:24:8e:
                    c0:d3:8b:c7:02:06:d1:02:8c:1c:9f:da:44:52:02:
                    2d:c3:20:30:8b:09:ed:4f:5e:09:6e:ba:e8:7d:b0:
                    3c:e6:4d:6a:a4:9b:5b:b6:c5:5c:f8:63:21:57:73:
                    33:15:06:aa:58:29:a7:60:da:70:ae:d6:f9:93:ea:
                    9b:0c:02:6c:a6:18:6f:80:93:82:8f:4f:88:0e:c9:
                    de:62:ee:cd:c1:23:80:94:04:49:b3:ca:ff:18:53:
                    c6:fc:55:7e:e8:a4:27:47:c4:60:33:47:9c:79:e7:
                    68:b8:f4:47:76:91:10:b7:de:13:9d:0d:fa:03:7f:
                    20:a8:7a:a4:a5:d2:dc:f2:a1:e9:d7:7f:08:27:ae:
                    96:39:e1:51:b0:b0:f7:96:ee:30:f5:dd:70:2e:a0:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3D:F8:1C:D5:3A:8A:41:02:5D:12:4D:E1:44:48:6A:D5:30:BE:8A
            X509v3 Authority Key Identifier:
                keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/Zj34HNU6ikECXRJN4URIatUwvoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ec:26:ff:21:aa:39:89:7c:c7:54:8f:f5:1d:d0:38:66:75:
         61:2d:0a:0e:9f:3d:bc:63:75:7c:ca:1d:af:fd:7c:ef:aa:9e:
         22:59:0f:7c:5e:db:26:cd:52:c1:1e:8c:17:f1:7a:64:6a:41:
         4f:ce:5f:3c:41:c9:02:b1:ec:29:ea:6b:2f:be:6a:96:91:53:
         93:92:47:fb:ae:0c:9c:7b:44:4e:a8:0a:7b:da:f7:35:9e:23:
         2b:b8:0d:7d:54:04:d6:32:78:1e:dc:41:c4:6d:60:c4:4b:06:
         94:3f:0f:af:73:90:19:b4:84:41:2e:27:e4:63:17:83:d8:3e:
         a5:2f:ad:e4:dd:43:bc:b7:42:f2:ff:44:d0:11:ea:d5:6c:4e:
         d3:82:cc:91:79:d0:70:82:85:a6:2c:30:ef:5f:7a:a0:d1:38:
         15:0d:55:1a:bc:3e:2b:e8:27:10:39:2c:7a:d8:27:53:e3:ec:
         78:2d:5e:38:fb:72:f6:74:1a:6c:fe:a8:ad:df:fa:20:2c:b7:
         56:e2:07:87:7b:b1:2d:0c:b0:4a:b8:be:51:fb:4a:b4:d8:d1:
         1b:5a:ed:6f:02:6d:d7:e4:e0:2f:7e:86:e4:56:ae:f9:a8:52:
         00:14:52:4f:0f:51:e5:fe:45:e4:d7:99:9c:9b:6e:83:62:62:
         f4:2f:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:16 2026 by rpki-client