This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/Zw6KU8Yaubyr6fTeBrasGVyasWI.roa
File:                     Zw6KU8Yaubyr6fTeBrasGVyasWI.roa (raw, json)
Hash identifier:          YUUSHoIMxT31bL5DTGnNTWMiRlkifirHreIPqG9BiZo=
Subject key identifier:   67:0E:8A:53:C6:1A:B9:BC:AB:E9:F4:DE:06:B6:AC:19:5C:9A:B1:62
Certificate issuer:       /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial:       019B7AC8910BC22FA4048A4EC4C09C6CADB0
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/Zw6KU8Yaubyr6fTeBrasGVyasWI.roa
Signing time:             Thu 01 Jan 2026 18:18:43 +0000
ROA not before:           Thu 01 Jan 2026 18:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61416
IP address blocks:        194.113.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:91:0b:c2:2f:a4:04:8a:4e:c4:c0:9c:6c:ad:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
        Validity
            Not Before: Jan  1 18:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=670e8a53c61ab9bcabe9f4de06b6ac195c9ab162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:56:c6:16:26:6b:52:8f:53:b4:08:93:a0:
                    75:3f:0e:6f:f3:9a:78:40:5c:3c:6a:86:c7:02:68:
                    40:7a:fe:6f:c4:76:7b:a0:31:ff:d5:34:9a:38:73:
                    80:41:81:ae:80:90:a7:57:cc:4e:52:43:77:0b:c8:
                    fb:0f:eb:d3:04:8f:c7:8f:d7:29:59:de:88:31:b4:
                    8f:62:14:c1:25:f5:9f:6e:f2:40:b9:ff:99:78:30:
                    b7:cb:5d:4b:b6:c0:c0:76:66:13:6f:99:cd:f4:fc:
                    a1:7c:dd:9a:58:a9:59:2f:54:8b:fc:6b:46:87:55:
                    f1:c9:f2:d4:8a:f3:27:83:7c:da:42:22:c5:90:40:
                    a6:08:ff:22:ef:9f:f5:98:72:24:b4:68:2d:08:ea:
                    10:6d:a0:52:b4:fb:1d:ee:1c:1d:f4:fa:f6:d9:b8:
                    27:8f:76:9c:02:9e:5c:69:0e:69:88:c3:6f:b0:b8:
                    17:a2:da:54:e6:08:36:89:7a:1f:1a:0d:80:db:d7:
                    a1:67:f0:a7:11:50:1d:4c:21:ba:ca:1c:ec:03:3c:
                    51:e7:d7:ce:ec:42:24:8d:1f:10:34:7c:41:dd:5d:
                    d9:93:85:4f:1a:b2:ab:4e:0a:d0:5c:6a:3a:04:ea:
                    1b:5f:c9:60:b3:8a:a6:93:5c:30:c8:00:7c:98:35:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0E:8A:53:C6:1A:B9:BC:AB:E9:F4:DE:06:B6:AC:19:5C:9A:B1:62
            X509v3 Authority Key Identifier:
                keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/Zw6KU8Yaubyr6fTeBrasGVyasWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:96:7c:da:72:6a:a7:f4:43:64:d9:07:d9:b8:7a:59:f3:31:
         0f:71:41:ea:02:e4:99:38:86:9e:2c:61:e6:4a:04:4f:d8:91:
         f0:3d:32:d9:7d:b7:10:1d:2f:1d:ad:9f:7e:55:50:2b:62:f8:
         0a:1f:95:cb:ee:f6:2a:10:86:1c:b1:74:42:fd:59:10:be:69:
         81:38:dc:af:c0:af:24:6f:00:03:8d:74:60:cb:04:2c:c3:03:
         91:38:f0:6a:0b:8e:1a:75:05:1d:a2:78:6e:8a:56:04:b8:d3:
         85:2c:ea:13:4d:15:fc:f1:6b:05:2f:0b:37:e4:c9:ff:49:d9:
         17:e2:bf:74:fd:dc:c6:92:b8:2d:8d:bb:51:2e:54:af:d1:c6:
         4d:bb:b3:f6:7c:ff:56:84:52:5e:98:25:31:e4:6b:c5:98:9d:
         92:a1:6d:7a:ab:de:52:4c:ab:b2:46:44:55:27:99:5f:54:69:
         e2:16:89:a0:36:7a:10:21:fd:d7:45:6f:bc:11:61:c6:4e:41:
         13:80:a8:26:ac:b2:34:f3:49:9f:8a:67:45:f9:16:29:4e:67:
         8b:e1:4b:cc:64:62:51:95:ab:9f:c2:1f:71:a4:38:9d:f1:5b:
         fe:d7:a0:90:81:a2:1b:98:21:a4:63:d6:e6:01:8b:9a:2c:18:
         f5:9b:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:41 2026 by rpki-client