This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/z8ur_dlixhHr86qHsQK2VwEFLVU.roa
File:                     z8ur_dlixhHr86qHsQK2VwEFLVU.roa (raw, json)
Hash identifier:          wwiX0Abxg7HH3i+7n0HaT1GyWyASGat8jETXDQw59Ao=
Subject key identifier:   CF:CB:AB:FD:D9:62:C6:11:EB:F3:AA:87:B1:02:B6:57:01:05:2D:55
Certificate issuer:       /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial:       019B7DCAD62592675C8885913BDB2CF8AC45
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/z8ur_dlixhHr86qHsQK2VwEFLVU.roa
Signing time:             Fri 02 Jan 2026 08:20:03 +0000
ROA not before:           Fri 02 Jan 2026 08:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214298
IP address blocks:        193.218.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:d6:25:92:67:5c:88:85:91:3b:db:2c:f8:ac:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
        Validity
            Not Before: Jan  2 08:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cfcbabfdd962c611ebf3aa87b102b65701052d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:ca:eb:d1:4f:03:18:c5:fe:81:33:2c:18:
                    8a:89:51:37:67:48:bd:c2:53:0b:a2:95:5c:27:ac:
                    1b:a2:61:25:eb:2d:ee:cc:d3:be:06:31:f1:e9:a9:
                    be:d1:ec:cc:2c:2b:36:6c:80:42:5d:e9:b6:3c:42:
                    8b:f8:fb:e4:d2:a9:94:64:dd:96:27:cb:76:c5:0b:
                    2c:b8:a7:a8:9d:28:f8:ab:b4:ec:1b:e5:1f:a5:d6:
                    57:55:5e:b9:97:f9:ca:b8:85:4a:59:a5:f7:07:e6:
                    7b:89:45:e0:38:b1:0e:6d:3d:73:47:04:61:a4:54:
                    dc:cc:a6:9a:df:c7:59:ac:ae:b6:92:e3:c3:da:7f:
                    66:9b:6a:4a:dc:ad:5a:9d:3e:3f:df:60:17:9b:90:
                    22:18:88:32:1f:a3:38:96:a3:91:dd:e7:94:13:2e:
                    db:e5:8f:65:7c:84:cb:3c:9d:24:11:d2:92:91:73:
                    29:12:9e:12:79:fc:05:cb:4e:11:6c:13:22:7b:4b:
                    00:d8:31:16:4d:89:03:ba:b4:cc:a3:f9:84:a4:3a:
                    46:10:22:e8:32:8a:3f:44:7c:14:80:d2:51:e6:36:
                    e0:5a:dd:26:85:9c:bf:89:f8:c1:55:b6:4d:b6:08:
                    d0:e2:a0:71:09:ee:db:8c:07:98:2d:92:6a:2d:2e:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CB:AB:FD:D9:62:C6:11:EB:F3:AA:87:B1:02:B6:57:01:05:2D:55
            X509v3 Authority Key Identifier:
                keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/z8ur_dlixhHr86qHsQK2VwEFLVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.218.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:4d:e7:4f:51:3a:15:c1:57:78:79:a0:e0:f5:c8:fd:76:fc:
         4b:fe:bb:81:bb:7e:3e:10:9d:a9:37:c4:4c:f5:2e:e6:68:7a:
         8f:d6:60:ba:e6:41:ba:16:2f:9c:60:5b:5d:4a:6e:2c:95:15:
         33:53:16:55:94:a4:17:8d:11:d9:58:a5:ec:60:ca:f3:99:3e:
         35:32:67:ce:1e:d9:a3:2c:de:34:f8:ac:9e:7c:c7:73:3d:d1:
         e3:e8:43:b3:89:ba:92:64:7d:ae:df:8b:3f:9e:c3:10:d0:78:
         52:7b:b7:e1:54:2f:79:a0:14:c2:19:2b:67:d0:32:cc:9b:82:
         b4:81:c5:83:d5:2b:20:0e:06:a6:62:df:fe:09:fd:4f:50:65:
         0c:56:cf:cd:20:dd:ce:e6:e0:90:2e:ed:ff:60:29:98:10:d5:
         57:de:93:56:f6:91:ed:a6:f9:02:44:1c:06:f3:c6:2b:54:da:
         f4:19:d1:b4:0d:81:9c:87:6c:15:01:cd:44:df:c1:6f:78:20:
         55:94:30:ad:fe:fc:3d:aa:8d:33:47:5a:b9:b7:e4:f9:71:a9:
         ea:85:34:2a:07:92:01:13:14:04:28:07:e0:45:1d:6b:a9:db:
         04:61:d0:30:a9:60:24:a1:22:b7:4e:10:7b:fa:66:09:49:6e:
         b6:20:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:53 2026 by rpki-client