This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/Nzu07THw6Tky2XNtILrXxTbGAF8.roa
File:                     Nzu07THw6Tky2XNtILrXxTbGAF8.roa (raw, json)
Hash identifier:          EeS9tyAj4w8h1PE9Nvgak38E714oDDd68R5eMJ76c6A=
Subject key identifier:   37:3B:B4:ED:31:F0:E9:39:32:D9:73:6D:20:BA:D7:C5:36:C6:00:5F
Certificate issuer:       /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial:       019B7E37B330A8EC83906874A1F3054CFF93
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/Nzu07THw6Tky2XNtILrXxTbGAF8.roa
Signing time:             Fri 02 Jan 2026 10:18:58 +0000
ROA not before:           Fri 02 Jan 2026 10:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201863
IP address blocks:        93.190.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:b3:30:a8:ec:83:90:68:74:a1:f3:05:4c:ff:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
        Validity
            Not Before: Jan  2 10:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=373bb4ed31f0e93932d9736d20bad7c536c6005f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:d7:4a:fd:3b:a6:6f:20:f7:c6:17:b4:f6:
                    30:0f:68:cc:b3:53:93:7d:11:ab:c3:3d:c4:84:54:
                    fc:67:12:70:cc:f5:9c:af:7e:49:d2:c3:22:c8:60:
                    47:d7:30:db:a1:77:93:c7:31:1c:55:67:ed:a5:c9:
                    2a:01:7a:bd:80:6f:e7:25:10:f5:17:ea:ed:97:78:
                    dc:1a:13:04:4c:c5:b0:85:33:f2:d6:f9:9d:24:cd:
                    69:84:1d:6a:e7:a9:db:41:c0:34:1c:73:c7:67:4e:
                    b4:7f:11:c9:7c:31:b7:e9:14:e2:07:71:c3:e3:14:
                    fa:ca:58:6e:70:d1:72:94:2a:68:ed:52:79:94:49:
                    b8:6c:5c:10:fe:bd:6a:8b:eb:ce:8a:52:48:36:8f:
                    07:d2:64:5d:bd:70:1a:d4:9f:74:35:f3:33:2a:b9:
                    0c:f3:06:7d:9c:77:a2:e2:15:00:c9:e3:67:9c:bd:
                    82:18:47:f3:5b:af:68:4d:5a:21:b1:8a:11:ae:f9:
                    1e:bf:c6:cf:84:7e:98:61:25:42:ae:cb:7c:08:f0:
                    4e:95:ae:ef:eb:cd:0f:ec:a5:39:08:22:50:b6:da:
                    f1:64:49:a2:b4:e1:1f:70:ff:f2:cf:f5:7a:7b:c3:
                    f6:74:47:68:e7:19:c5:d9:d6:89:9e:19:48:87:05:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3B:B4:ED:31:F0:E9:39:32:D9:73:6D:20:BA:D7:C5:36:C6:00:5F
            X509v3 Authority Key Identifier:
                keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/Nzu07THw6Tky2XNtILrXxTbGAF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a7:b1:08:70:63:1b:ab:af:98:b6:29:49:10:31:d2:f9:85:
         5a:9f:ee:57:35:ee:fb:54:01:c0:78:e7:08:7f:d4:3a:4b:1d:
         ab:42:b8:fa:77:9c:55:ad:40:f7:f7:8d:e8:5e:3e:d1:96:25:
         a8:4a:52:36:bc:6e:6c:39:93:ea:ae:65:5b:6e:fe:1d:e8:cd:
         7b:3f:8d:ca:0a:34:32:16:4a:de:81:e0:39:0b:d7:e1:fd:4e:
         8b:50:cb:a4:8b:18:8d:3b:ec:40:b1:c0:b4:bb:67:39:5b:39:
         f2:6c:b5:d6:7d:c0:18:87:14:eb:99:40:a8:37:8e:c2:c3:28:
         2c:bb:03:e8:0a:2f:91:39:7e:9c:fc:6e:43:67:e3:e8:a0:6f:
         72:0c:ab:06:9f:0b:7d:9d:41:b4:67:e7:09:df:eb:63:ac:5d:
         8a:39:66:e8:32:44:e1:6d:3d:6d:98:bf:1f:16:8e:5c:cd:e9:
         ca:71:09:46:39:3b:0f:5d:08:cc:17:6f:4d:22:5d:ef:e8:d0:
         02:50:69:54:3e:75:63:8e:13:db:14:e8:e9:d8:57:84:b9:8d:
         50:4f:e8:5a:ec:55:fe:07:b9:8e:18:8d:80:c7:a3:17:d8:7f:
         a2:ff:45:28:31:08:a9:37:ee:33:56:65:ac:da:87:89:ac:6c:
         e0:4e:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:51 2026 by rpki-client