This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/Z4DAklyvQ_tcSanawmKE9EaEL9M.roa
File:                     Z4DAklyvQ_tcSanawmKE9EaEL9M.roa (raw, json)
Hash identifier:          o3molPBT9AAqHiP/f5TGDP1/kwtZCHzNXCqe1hcN8eI=
Subject key identifier:   67:80:C0:92:5C:AF:43:FB:5C:49:A9:DA:C2:62:84:F4:46:84:2F:D3
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       019C0EAD181B944DB3862632BF073BF825DD
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/Z4DAklyvQ_tcSanawmKE9EaEL9M.roa
Signing time:             Fri 30 Jan 2026 11:32:30 +0000
ROA not before:           Fri 30 Jan 2026 11:32:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        185.199.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0e:ad:18:1b:94:4d:b3:86:26:32:bf:07:3b:f8:25:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Jan 30 11:32:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6780c0925caf43fb5c49a9dac26284f446842fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:cd:95:5f:63:23:24:17:05:d8:57:17:7f:
                    2b:4d:58:68:74:ba:34:fe:29:83:87:23:6e:d8:4d:
                    30:59:ce:c5:ac:50:f3:b5:04:0c:29:9b:d5:b9:58:
                    5f:b2:d4:1f:10:ad:8c:e0:e5:06:1c:19:0f:0c:17:
                    2a:4e:eb:4e:80:8e:e7:95:55:4c:57:4a:1a:19:6d:
                    6e:65:a6:73:c5:bb:e2:0b:92:57:30:4f:e5:b7:5f:
                    3d:e6:10:ef:08:ca:51:c7:83:3d:d5:d2:ce:84:1c:
                    af:90:48:b1:86:2d:e7:ea:b9:5b:00:fd:a2:1c:dc:
                    da:5b:45:8f:30:8a:f0:88:59:3c:95:00:52:54:9f:
                    a4:48:1b:45:51:37:1f:55:08:0e:cd:b4:23:43:30:
                    7e:a5:cc:43:24:2b:a6:86:6a:85:1f:19:34:94:0d:
                    94:88:8b:df:84:ba:22:25:50:33:a4:eb:fa:f0:79:
                    5c:71:9a:f5:4c:3d:8d:57:09:f4:48:57:52:b7:0a:
                    fa:79:df:82:00:dc:a1:b2:13:50:f7:88:a8:6a:00:
                    51:17:5c:a2:8e:35:13:8f:3c:cd:98:93:c9:4c:18:
                    87:9f:e5:1c:f1:5c:9d:d8:d1:93:95:53:3e:2a:fc:
                    a0:0f:59:cf:40:da:16:54:5d:cb:15:03:ee:a5:6b:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:80:C0:92:5C:AF:43:FB:5C:49:A9:DA:C2:62:84:F4:46:84:2F:D3
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/Z4DAklyvQ_tcSanawmKE9EaEL9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.199.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:94:68:cf:80:9c:f8:a8:c7:d3:55:ce:8b:a0:8f:05:6c:4d:
         92:27:35:e0:6c:e8:8b:40:36:c7:be:6d:ff:74:0e:7a:9f:91:
         8f:86:43:1b:c6:b0:40:11:cb:15:83:9f:b0:87:9e:64:53:e4:
         b0:7e:bd:a3:63:fd:15:f9:7f:d2:70:30:29:b8:db:da:f7:6f:
         72:31:fe:8c:78:e7:26:1e:6f:0b:e1:5e:a8:2f:3a:00:58:4a:
         54:57:ec:96:58:9a:8d:97:8a:40:98:6b:9c:0a:2b:15:2e:a3:
         8e:95:de:4b:b2:69:3b:2e:f2:6a:d6:07:3d:2a:be:e6:12:ea:
         f5:05:57:03:56:cd:5c:45:6b:68:9f:41:79:42:30:ab:58:a7:
         2e:59:2a:57:09:6f:e9:0a:eb:c7:2c:fe:22:30:0f:60:03:71:
         0d:5c:e0:0a:f2:99:5a:68:1d:dd:83:5c:8d:0a:05:87:77:65:
         d1:96:02:bb:0a:89:e5:6e:51:29:a4:c4:f1:a9:40:58:2e:76:
         98:22:6e:5f:ac:5c:39:d1:2a:fe:96:b0:cf:d6:00:05:6b:df:
         a7:4f:17:2a:69:37:c7:2e:ab:7c:26:f8:d5:57:2a:23:25:4c:
         01:39:9e:35:95:38:ca:b8:bc:34:4c:56:f6:7f:b0:27:c8:e1:
         ed:0f:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:57:14 2026 by rpki-client