This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/z-3swOq83iQal-4HNbXMWQFTmtk.roa
File:                     z-3swOq83iQal-4HNbXMWQFTmtk.roa (raw, json)
Hash identifier:          2AnlHpZVm/nKwMz5eQ79wwh/KAfXL/jahLqbUXf70ls=
Subject key identifier:   CF:ED:EC:C0:EA:BC:DE:24:1A:97:EE:07:35:B5:CC:59:01:53:9A:D9
Certificate issuer:       /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial:       019B7C12926194001C323D9D1FC9E14A6CBB
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/z-3swOq83iQal-4HNbXMWQFTmtk.roa
Signing time:             Fri 02 Jan 2026 00:19:10 +0000
ROA not before:           Fri 02 Jan 2026 00:19:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50463
IP address blocks:        194.56.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:92:61:94:00:1c:32:3d:9d:1f:c9:e1:4a:6c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
        Validity
            Not Before: Jan  2 00:19:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cfedecc0eabcde241a97ee0735b5cc5901539ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:b7:6a:99:fd:5f:01:c7:e6:7a:02:5e:29:
                    28:89:96:49:d3:ae:32:e9:fa:ac:9e:0e:76:fe:68:
                    b3:73:92:f6:3f:6c:d0:ed:5d:f5:bb:d0:cd:72:8b:
                    97:25:ac:19:2f:89:c4:ce:b6:69:63:91:60:86:3d:
                    0e:97:f4:b5:dd:9d:ef:41:d8:0a:93:7f:20:46:0e:
                    c8:53:e8:4c:b6:72:50:50:ef:9b:86:25:62:d7:1c:
                    c6:aa:19:61:39:d8:07:99:76:fc:5d:75:a1:f8:aa:
                    aa:17:3c:77:03:b4:45:f1:16:f4:e3:a0:ac:c9:2b:
                    10:9c:c2:3b:b9:bb:d3:a8:ba:28:a5:8d:7e:f3:4b:
                    26:e5:73:a4:27:03:4b:37:40:d7:78:34:dd:b8:71:
                    99:36:2b:4b:48:d5:e7:98:d7:d6:e1:a4:37:c2:0f:
                    1d:b5:be:61:44:72:aa:d5:b3:c7:92:bd:b8:26:cd:
                    f3:d4:80:03:26:25:e4:e8:7c:07:98:12:e5:48:fc:
                    21:b8:03:de:06:87:43:a9:6f:f7:df:3c:9b:d5:14:
                    f6:82:09:cd:18:c3:eb:9e:7a:63:66:e4:04:68:ef:
                    b7:e6:31:a9:0a:81:b4:7a:2d:4d:78:ef:7a:62:2c:
                    45:fc:4b:cf:cf:3b:71:93:f3:fe:a3:e7:3a:f6:a3:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:ED:EC:C0:EA:BC:DE:24:1A:97:EE:07:35:B5:CC:59:01:53:9A:D9
            X509v3 Authority Key Identifier:
                keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/z-3swOq83iQal-4HNbXMWQFTmtk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:1c:8b:23:9a:57:8f:e5:fa:fa:5f:62:be:c9:37:a7:0e:10:
         6f:7e:e9:75:a0:a0:49:cb:b0:1f:ac:f7:10:3e:27:c2:61:0e:
         a9:54:37:db:78:bc:8a:52:c0:7a:b5:45:fb:f1:73:47:07:bf:
         b5:46:10:89:87:a9:7f:96:9b:22:22:a6:22:04:c7:fe:d5:03:
         79:d9:60:e6:00:13:e6:7d:86:9c:78:28:6e:c6:5e:ea:a2:30:
         8c:14:74:fd:26:2e:dc:7a:35:f5:24:ff:dc:c6:d2:0e:6a:59:
         9f:17:72:5f:57:d0:0a:01:cd:bd:9f:e8:2f:79:34:1f:07:ca:
         bb:b0:b0:82:f5:bb:e7:bd:12:90:bd:03:38:ac:f4:bc:de:b6:
         c5:f0:bc:0d:dc:de:a0:70:53:f1:cb:b8:8d:3f:9d:bf:00:0b:
         dc:44:cd:b8:73:81:fa:16:33:ea:cb:86:47:18:e6:f3:ff:47:
         15:c7:9c:84:3b:18:f9:d4:4e:97:5d:b6:94:5b:ff:cd:6c:07:
         c5:32:26:91:94:d8:0f:43:87:89:13:96:47:64:47:e7:46:19:
         95:d5:61:35:a8:42:74:26:c9:4f:04:d1:62:13:1d:20:c8:64:
         67:3d:95:cc:d0:e3:90:b5:22:c6:1c:8e:2d:26:a3:b5:ba:36:
         a3:e1:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:37 2026 by rpki-client