This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/ZoWDl6ndQ9Hfznn3PsQgxbbAxbw.roa
File:                     ZoWDl6ndQ9Hfznn3PsQgxbbAxbw.roa (raw, json)
Hash identifier:          kikQlykcn+WarGEP2RIaDoLYfnMDSfgY1GHVB0fe+tA=
Subject key identifier:   66:85:83:97:A9:DD:43:D1:DF:CE:79:F7:3E:C4:20:C5:B6:C0:C5:BC
Certificate issuer:       /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial:       019B78A3495DA1E32AD80EEF28FA280E1C8C
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/ZoWDl6ndQ9Hfznn3PsQgxbbAxbw.roa
Signing time:             Thu 01 Jan 2026 08:18:45 +0000
ROA not before:           Thu 01 Jan 2026 08:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202807
IP address blocks:        195.200.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:49:5d:a1:e3:2a:d8:0e:ef:28:fa:28:0e:1c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
        Validity
            Not Before: Jan  1 08:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=66858397a9dd43d1dfce79f73ec420c5b6c0c5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ec:5b:cb:9e:15:bb:a1:63:a5:d8:3c:12:af:
                    76:95:8f:17:4d:7e:36:cc:d8:eb:d8:a9:a9:0f:90:
                    9e:dd:b7:65:07:1a:7b:5c:5c:95:c8:47:05:0e:96:
                    12:2a:26:1b:d1:29:64:64:d3:7a:4c:c7:11:a5:4e:
                    72:dd:02:12:7c:3d:ea:97:d3:7f:80:af:92:83:b7:
                    bc:ff:71:9c:5c:1f:05:a7:9f:65:34:17:7e:8b:5f:
                    52:ee:08:07:34:c2:ad:e6:d4:0c:9c:41:9a:09:73:
                    c5:13:99:a1:fc:ee:10:58:7b:1d:1b:5b:7b:70:11:
                    df:19:62:06:58:90:bb:0a:33:8c:88:03:e3:9f:35:
                    f7:6a:77:b4:d6:4e:7c:71:ce:8a:fa:e8:99:39:86:
                    33:c2:09:7a:96:ac:00:0c:45:d7:89:f6:17:74:b4:
                    bf:74:0e:00:b8:e8:b8:90:7b:ae:07:ef:8a:91:c6:
                    38:7f:80:25:36:0f:61:0a:78:5c:e5:98:ac:c3:87:
                    20:74:52:cc:38:73:12:fe:66:a4:18:8e:16:41:9e:
                    e4:14:87:38:d4:07:6f:8f:5f:a5:bc:86:44:36:c2:
                    97:5b:96:90:4b:85:cf:17:8b:9b:91:ad:cb:a5:27:
                    66:79:d7:29:61:07:43:bf:fe:8b:53:c0:83:6a:aa:
                    8a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:85:83:97:A9:DD:43:D1:DF:CE:79:F7:3E:C4:20:C5:B6:C0:C5:BC
            X509v3 Authority Key Identifier:
                keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/ZoWDl6ndQ9Hfznn3PsQgxbbAxbw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.200.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d7:91:06:74:91:a2:7b:81:5b:ac:e9:07:20:45:88:af:b3:
         2e:6e:a6:50:9f:e9:5b:dd:4c:0a:c2:54:26:8a:fe:88:92:ae:
         68:1d:48:ff:9d:f0:ed:ff:4e:80:ed:f4:05:5a:0c:97:47:b8:
         ec:cc:71:69:52:eb:d8:5a:09:fb:8f:73:f8:d0:2b:6b:92:42:
         c0:f2:3e:bb:ca:e9:8a:6e:9e:bd:fe:ee:2b:54:6c:ca:d7:5c:
         39:d9:30:9f:15:c6:dd:8b:87:13:d5:ea:24:e6:42:60:eb:6f:
         ff:bc:df:3e:4c:63:a3:e3:9a:b0:a3:fa:8d:38:b8:55:5c:ca:
         0e:d7:96:17:6f:52:e1:ac:20:42:df:c6:30:14:b4:e3:53:e9:
         85:eb:bb:70:8f:9f:51:53:a5:c4:c8:5f:da:b7:38:56:be:3d:
         36:e6:94:5e:42:c5:40:a0:92:c1:44:0f:0a:ee:40:00:b3:00:
         40:05:8e:ee:6e:b4:bb:f7:44:bd:47:8c:75:91:82:46:56:0c:
         6c:95:bc:05:11:64:45:9a:e5:91:cb:5f:2b:5c:83:44:66:51:
         ae:f6:46:81:18:5e:93:27:6c:a3:53:a1:b5:0d:ee:06:69:02:
         3b:80:7b:23:e6:dc:8c:42:3f:16:a9:af:36:93:f0:79:41:95:
         f0:99:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:47:28 2026 by rpki-client