This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/N-M1_Gcs5nz1z-RZbD5F2Zwy0ik.roa
File:                     N-M1_Gcs5nz1z-RZbD5F2Zwy0ik.roa (raw, json)
Hash identifier:          Eebmmc2rhKXOb9UxpkjpYhhaoAIhvKS+3sRa+Rf9xxc=
Subject key identifier:   37:E3:35:FC:67:2C:E6:7C:F5:CF:E4:59:6C:3E:45:D9:9C:32:D2:29
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       019B7CEE25149B83952F7CCBC2A717AC78F1
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/N-M1_Gcs5nz1z-RZbD5F2Zwy0ik.roa
Signing time:             Fri 02 Jan 2026 04:19:00 +0000
ROA not before:           Fri 02 Jan 2026 04:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212165
IP address blocks:        176.124.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:25:14:9b:83:95:2f:7c:cb:c2:a7:17:ac:78:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: Jan  2 04:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37e335fc672ce67cf5cfe4596c3e45d99c32d229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:1f:ae:46:95:2f:7b:76:c7:7a:59:b5:71:
                    49:aa:e9:42:25:ac:97:1e:8c:05:99:01:f2:63:5e:
                    6f:63:a6:96:8e:0c:e4:95:db:c4:d9:1f:cb:f6:5f:
                    7e:b7:fc:d7:0b:fa:c6:6e:e5:af:d5:b9:11:56:17:
                    1e:6c:98:5f:41:ad:41:61:e3:d4:36:71:6b:b4:c2:
                    58:dc:16:86:f3:76:e9:9f:6a:91:11:bd:e2:5c:30:
                    77:ac:7b:60:51:09:1c:a4:69:1b:24:1f:47:e9:8c:
                    ab:56:60:ee:90:7a:fe:8e:ea:2c:c1:3b:01:7d:8c:
                    55:35:a7:9c:da:56:31:5e:34:06:27:fe:0d:8f:cd:
                    be:b6:6d:4e:0d:8d:32:ae:bd:db:dc:e3:32:e9:7f:
                    a4:02:b3:54:35:42:1e:a1:b5:be:49:9a:f7:03:9b:
                    a2:20:02:5c:81:83:f1:89:25:21:7e:2c:6e:ee:5d:
                    10:7e:8f:04:8e:77:e7:64:5c:26:a2:70:40:f2:ae:
                    8a:e4:25:bd:e9:f7:ef:3d:59:c6:60:5b:7b:f7:da:
                    59:e8:a2:b3:12:a5:05:9c:e3:da:7e:74:21:91:46:
                    0a:9d:a9:a3:e1:f6:20:82:a3:75:08:7e:dc:94:3a:
                    19:d7:cb:b0:1a:a0:f1:5a:bd:0c:01:30:69:ae:72:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E3:35:FC:67:2C:E6:7C:F5:CF:E4:59:6C:3E:45:D9:9C:32:D2:29
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/N-M1_Gcs5nz1z-RZbD5F2Zwy0ik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.124.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:59:79:a5:9f:9d:65:29:55:3f:36:02:07:9a:40:18:8e:c6:
         b3:10:86:8c:6c:39:dc:28:1a:c4:f0:9b:78:a8:e1:26:97:d1:
         6a:25:ad:79:df:35:c3:54:c0:02:52:a2:aa:b5:4b:99:6f:0e:
         b6:7e:12:6d:ef:da:94:48:e3:1d:20:56:c4:1f:0c:3e:a9:41:
         18:7b:d1:64:a7:3d:7d:11:4b:16:d2:64:38:17:48:7b:6d:b0:
         67:16:68:fa:08:e4:0e:ed:f3:25:45:ab:30:53:66:f5:26:8b:
         41:d9:d7:c0:7b:fc:6c:45:37:31:1c:79:42:03:39:a8:6e:04:
         6d:c2:eb:61:90:d0:3a:70:ba:bd:8c:9b:3c:55:92:34:71:6c:
         ec:4e:39:93:8a:bd:70:8a:ed:d8:8b:15:4e:0c:2a:bc:88:8b:
         53:03:14:05:9d:43:92:43:61:68:fa:d6:9b:4a:c5:d7:31:5c:
         d6:2c:ee:fb:f1:2f:2d:08:c8:ef:da:6a:64:e1:a6:fc:ba:45:
         6b:a5:e3:8e:3a:70:03:5a:2b:d8:f9:73:a4:d0:d0:d4:c1:8d:
         c9:ff:f0:36:e4:f2:ad:f6:26:0a:b2:b4:05:fd:75:16:d0:4f:
         df:ca:54:d0:56:bf:d7:ef:64:bc:9c:e1:5b:9b:38:d3:9d:d5:
         77:38:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:11:46 2026 by rpki-client