This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/z8zovr62ahngZe9eyLY1UmJJA_E.roa
File:                     z8zovr62ahngZe9eyLY1UmJJA_E.roa (raw, json)
Hash identifier:          h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=
Subject key identifier:   CF:CC:E8:BE:BE:B6:6A:19:E0:65:EF:5E:C8:B6:35:52:62:49:03:F1
Certificate issuer:       /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial:       019B7A5AEB3021DAE8F1499B2BB2E046D6D9
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/z8zovr62ahngZe9eyLY1UmJJA_E.roa
Signing time:             Thu 01 Jan 2026 16:18:57 +0000
ROA not before:           Thu 01 Jan 2026 16:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15576
IP address blocks:        193.17.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:eb:30:21:da:e8:f1:49:9b:2b:b2:e0:46:d6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
        Validity
            Not Before: Jan  1 16:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cfcce8bebeb66a19e065ef5ec8b63552624903f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:09:3f:7f:b1:0f:20:d7:65:c9:00:3d:fb:ac:
                    96:8e:f5:3c:c1:65:44:53:d1:87:9e:2f:79:ee:3e:
                    d3:30:38:5f:65:8e:29:e7:83:fd:73:e3:0a:fe:3c:
                    76:6a:ba:dd:4d:7a:99:ce:1b:3a:4c:8d:95:45:47:
                    62:e0:f0:41:12:26:55:f4:45:9c:8e:c8:38:ff:9c:
                    da:6f:1f:b7:d5:68:ec:63:8e:40:7a:cf:a3:93:c1:
                    f7:d1:03:0a:bb:eb:66:c5:52:24:fe:3e:1d:c0:73:
                    2f:00:26:82:7d:bc:38:a1:66:1c:0d:38:09:fa:a1:
                    af:26:e2:4e:b8:65:c1:92:6d:b6:35:de:f8:87:07:
                    12:5d:44:74:3f:19:a0:c5:e0:5d:4e:82:5d:10:69:
                    2d:8f:95:98:e6:b6:45:42:17:fd:3a:94:58:08:83:
                    98:19:d5:ad:35:94:6f:cf:b0:d6:63:de:2d:af:c9:
                    c1:76:2c:cd:82:ad:a9:50:d3:13:23:68:07:93:e0:
                    6c:b1:fc:ff:b4:90:36:53:2b:96:bb:19:c7:d4:1a:
                    ef:2c:88:74:3f:e6:64:36:4c:a6:1b:98:ae:9d:86:
                    d9:e6:53:f5:af:08:44:28:a4:5c:e6:71:75:fd:a5:
                    35:b2:ba:6a:d7:f7:5b:f5:ab:b8:d2:0f:8d:07:74:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CC:E8:BE:BE:B6:6A:19:E0:65:EF:5E:C8:B6:35:52:62:49:03:F1
            X509v3 Authority Key Identifier:
                keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/z8zovr62ahngZe9eyLY1UmJJA_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:97:9a:3d:02:8d:68:2f:e7:cf:85:a7:ca:92:f4:48:92:
         ae:c3:7e:18:c7:ae:37:24:f3:16:9b:a6:bc:43:e6:47:ea:29:
         65:90:d9:39:b8:4c:de:5b:7d:19:d5:24:bc:cd:97:bb:d0:1d:
         06:4d:ba:ed:1e:7c:c9:10:8f:67:1a:d2:2d:e0:44:f1:94:c6:
         b2:80:d6:d1:36:3c:49:b3:03:55:3e:71:fb:5a:f2:eb:91:63:
         2b:d5:d2:7c:96:31:dc:3c:61:44:e8:db:0c:54:31:70:05:61:
         57:25:99:32:f5:f8:73:1e:f9:d5:a0:5d:4e:bd:1d:77:40:ec:
         a2:f2:db:52:5c:83:ff:63:09:83:57:40:64:a6:0b:a8:78:1b:
         2d:b7:78:a6:bd:32:2b:54:5b:13:8c:d9:a1:8a:d2:3c:f4:3f:
         f4:40:85:14:7f:2b:f1:45:bf:bc:24:04:90:4c:e3:c6:4d:28:
         61:76:4e:3e:a0:49:9f:d6:c6:56:f3:84:c1:f7:a2:3b:3a:4f:
         8a:a8:4c:5f:b3:8f:e4:a6:ee:1f:bb:c3:b4:de:61:96:cf:a8:
         c7:bf:38:5d:68:46:e0:51:13:df:f6:d3:ca:5b:79:61:88:ea:
         36:d3:37:fd:7c:ec:a3:84:f0:e2:73:69:8f:80:ce:ae:ee:79:
         bf:cd:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:22:37 2026 by rpki-client