This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/z__9choePB0hY85a_epZitBsx_8.roa
File:                     z__9choePB0hY85a_epZitBsx_8.roa (raw, json)
Hash identifier:          D+ruSl/X/fPQKsdHA9UXWGBlgo0rGd/gGZDncSpbB5g=
Subject key identifier:   CF:FF:FD:72:1A:1E:3C:1D:21:63:CE:5A:FD:EA:59:8A:D0:6C:C7:FF
Certificate issuer:       /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial:       019B7A5AF50B31A85C3087CAA8EF03E96182
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/z__9choePB0hY85a_epZitBsx_8.roa
Signing time:             Thu 01 Jan 2026 16:18:59 +0000
ROA not before:           Thu 01 Jan 2026 16:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197770
IP address blocks:        194.9.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:f5:0b:31:a8:5c:30:87:ca:a8:ef:03:e9:61:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
        Validity
            Not Before: Jan  1 16:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cffffd721a1e3c1d2163ce5afdea598ad06cc7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:a0:36:f2:4e:cf:84:11:15:f6:f6:59:ce:
                    b4:5a:b6:73:3f:20:98:c2:bd:db:a0:4c:ef:59:65:
                    e4:dc:29:8c:d6:64:c6:ea:27:65:28:89:8f:29:29:
                    e5:e6:87:98:d0:01:37:ce:dc:01:1d:16:08:06:52:
                    34:4f:b4:94:00:ad:1e:0e:d0:ad:03:ef:0a:74:63:
                    8f:1c:7a:13:dc:36:9f:c4:39:fe:cf:f8:85:d5:51:
                    6b:66:92:2c:75:8e:2b:45:b0:bf:61:63:11:ea:94:
                    ed:21:f5:75:db:d4:92:7f:1c:85:90:67:2a:12:3a:
                    e3:28:93:b9:fa:57:8a:22:70:ce:87:12:ba:4f:c0:
                    de:03:24:d6:39:ab:45:c5:ca:37:cf:f3:ca:60:02:
                    87:4e:4c:25:b8:a1:e4:fc:12:08:db:40:31:b7:71:
                    ff:08:d8:da:40:03:66:f4:db:14:61:4b:9f:23:48:
                    ed:2f:3e:68:89:e5:5a:90:ef:39:7c:c0:d6:dd:f2:
                    2a:f6:0b:9a:af:c9:23:5e:a0:29:b3:24:ad:62:5a:
                    5e:a8:c5:f1:82:14:84:23:c5:cf:91:a7:11:b0:dc:
                    be:a0:e1:39:4a:b3:dc:ad:64:7e:79:81:2f:dc:b1:
                    57:75:bb:40:01:a2:f3:c7:ce:c7:fc:ac:12:d3:85:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FF:FD:72:1A:1E:3C:1D:21:63:CE:5A:FD:EA:59:8A:D0:6C:C7:FF
            X509v3 Authority Key Identifier:
                keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/z__9choePB0hY85a_epZitBsx_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:c3:ef:1d:67:0c:f0:fc:71:9d:a0:d1:ad:f8:85:86:ee:
         f0:d2:56:08:c8:19:05:d8:01:b5:89:ae:71:80:4e:ac:89:82:
         a7:41:9d:78:6d:a7:45:4b:28:53:7c:d8:0b:ec:a2:ac:35:53:
         9a:22:ee:19:c6:50:07:6c:75:a3:b5:a6:94:e5:f0:06:c5:47:
         17:66:09:6b:f7:1d:94:52:36:ec:f8:38:18:02:ba:16:30:cc:
         43:f8:47:02:0b:a0:89:66:27:47:34:e1:ba:0d:70:35:ce:e5:
         69:e6:97:01:2d:79:c2:81:db:30:6f:4c:b7:79:4c:ba:aa:9c:
         52:3e:4e:5c:29:87:0e:86:2f:01:f5:b8:62:d0:1e:e7:12:af:
         22:f9:92:c6:a3:45:a9:85:58:d7:7a:73:3a:e3:66:1c:ea:fd:
         e7:47:c1:07:06:ff:98:cb:d5:8a:62:ba:e7:dc:3f:d2:f9:33:
         97:cc:fa:1c:73:6e:77:cd:20:40:2d:b0:84:32:7c:bc:58:c3:
         3e:29:e5:d9:f4:06:56:4b:22:e7:53:f9:7e:76:68:7a:e4:e5:
         9b:fd:06:66:1c:41:49:45:5b:2b:34:31:92:05:38:d8:a8:76:
         af:90:de:b1:6f:52:b7:2c:3e:c0:8d:fd:f3:d4:07:72:f4:15:
         d1:f2:c0:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WvULMahcMIfKqO8D6WGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU4Mzg0ZTM0Njk1NmEwMDY2M2E1NjU1MDdiOTZmMTRj
YzA5NzMwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmZmZmQ3MjFhMWUzYzFkMjE2M2NlNWFmZGVhNTk4YWQwNmNjN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpSgNvJOz4QRFfb2Wc60WrZzPyCY
wr3boEzvWWXk3CmM1mTG6idlKImPKSnl5oeY0AE3ztwBHRYIBlI0T7SUAK0eDtCt
A+8KdGOPHHoT3DafxDn+z/iF1VFrZpIsdY4rRbC/YWMR6pTtIfV129SSfxyFkGcq
EjrjKJO5+leKInDOhxK6T8DeAyTWOatFxco3z/PKYAKHTkwluKHk/BII20Axt3H/
CNjaQANm9NsUYUufI0jtLz5oieVakO85fMDW3fIq9guar8kjXqApsyStYlpeqMXx
ghSEI8XPkacRsNy+oOE5SrPcrWR+eYEv3LFXdbtAAaLzx87H/KwS04XbXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM///XIaHjwdIWPOWv3qWYrQbMf/MB8GA1UdIwQY
MBaAFOOVg4TjRpVqAGY6VlUHuW8UzAlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NDBiMWQtNzUxZC00YWZhLWI3MDAt
MTk0M2JiN2VhZWM3LzEvel9fOWNob2VQQjBoWTg1YV9lcFppdEJzeF84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83NDBiMWQtNzUxZC00YWZhLWI3MDAtMTk0M2JiN2VhZWM3
LzEvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwgk6MA0G
CSqGSIb3DQEBCwUAA4IBAQBFzsPvHWcM8PxxnaDRrfiFhu7w0lYIyBkF2AG1ia5x
gE6siYKnQZ14badFSyhTfNgL7KKsNVOaIu4ZxlAHbHWjtaaU5fAGxUcXZglr9x2U
Ujbs+DgYAroWMMxD+EcCC6CJZidHNOG6DXA1zuVp5pcBLXnCgdswb0y3eUy6qpxS
Pk5cKYcOhi8B9bhi0B7nEq8i+ZLGo0WphVjXenM642Yc6v3nR8EHBv+Yy9WKYrrn
3D/S+TOXzPocc253zSBALbCEMny8WMM+KeXZ9AZWSyLnU/l+dmh65OWb/QZmHEFJ
RVsrNDGSBTjYqHavkN6xb1K3LD7Ajf3z1Ady9BXR8sD7
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:03 2026 by rpki-client