This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/ZWc731yhXtnZwZA4k-893U-Fzys.roa
File:                     ZWc731yhXtnZwZA4k-893U-Fzys.roa (raw, json)
Hash identifier:          RRFLJwA1DLmfU7R9eR3HkSpvYKtbhnQe6Ugjt8gXSbA=
Subject key identifier:   65:67:3B:DF:5C:A1:5E:D9:D9:C1:90:38:93:EF:3D:DD:4F:85:CF:2B
Certificate issuer:       /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial:       019B7BA4CD44E0AAFD3E3908E504EA8F0F5B
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/ZWc731yhXtnZwZA4k-893U-Fzys.roa
Signing time:             Thu 01 Jan 2026 22:19:16 +0000
ROA not before:           Thu 01 Jan 2026 22:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20691
IP address blocks:        91.209.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:cd:44:e0:aa:fd:3e:39:08:e5:04:ea:8f:0f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
        Validity
            Not Before: Jan  1 22:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=65673bdf5ca15ed9d9c1903893ef3ddd4f85cf2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:80:f8:ce:01:2a:f9:f3:3c:3a:2b:4f:e9:
                    4a:ef:9a:99:c3:1d:31:51:71:62:37:aa:49:85:49:
                    40:05:b0:8b:3d:1b:72:17:e1:c0:97:d4:d1:4d:d3:
                    27:25:d0:94:3a:e7:d4:70:90:cc:09:20:6e:3b:b1:
                    79:ef:e5:b7:05:18:85:ce:69:bb:89:2d:48:02:b5:
                    e1:2a:ad:74:4a:93:fd:9a:8c:81:48:06:fc:cd:d4:
                    cd:3f:98:b6:3a:9e:75:e3:7a:11:38:82:a0:83:7b:
                    1f:95:d3:10:f3:2c:04:ad:e7:1e:58:4b:68:fd:44:
                    61:59:b9:c5:0b:9e:ce:5d:a1:ba:46:6b:71:da:76:
                    5b:95:b1:bc:88:ab:37:9f:59:9b:42:35:2b:54:18:
                    70:ac:b3:df:b6:e3:36:4e:d8:6d:bb:e1:7b:35:1c:
                    2f:1e:eb:34:1f:6b:23:17:cd:0a:28:33:55:c4:82:
                    21:bd:e1:8f:7a:ca:15:af:40:a5:10:58:c4:70:25:
                    f2:01:79:1f:71:4a:8d:17:2f:16:15:67:f9:a6:46:
                    48:ba:f3:65:a4:0c:04:2f:d8:82:69:d4:ff:e6:8f:
                    1c:e0:94:df:03:be:8e:5a:6b:ec:77:ac:3a:68:a9:
                    60:0c:a2:03:b1:8a:26:11:2d:1d:05:1a:49:80:59:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:67:3B:DF:5C:A1:5E:D9:D9:C1:90:38:93:EF:3D:DD:4F:85:CF:2B
            X509v3 Authority Key Identifier:
                keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/ZWc731yhXtnZwZA4k-893U-Fzys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:4d:7b:84:91:53:5a:a1:b8:2a:07:bd:f3:4c:04:e6:23:
         44:7b:eb:33:c2:9d:57:b6:14:a7:ef:2a:f1:df:c4:75:8f:46:
         c1:fd:5a:4d:80:45:af:d9:0b:92:22:58:30:ec:cf:4a:7d:e4:
         2f:ec:4b:bc:99:52:35:fa:c9:e5:d7:cb:13:27:c5:16:3d:47:
         a8:ad:d0:30:6c:d4:18:16:54:cf:1e:94:81:6a:11:63:5e:32:
         3d:02:2f:a9:ac:2b:18:05:c6:5e:ac:75:46:5b:c8:35:0a:6d:
         ab:30:09:88:ec:74:1c:a1:97:4e:4f:78:4c:92:be:68:6f:38:
         28:60:e4:f5:8b:f4:fa:42:dd:54:50:1e:f5:84:4a:a3:59:fd:
         45:58:a7:d9:29:5c:9e:c7:db:40:32:d3:65:4e:c4:a7:ac:43:
         23:27:0d:59:69:08:56:fa:0a:fe:e2:d6:49:87:29:74:22:f8:
         f9:6f:67:93:53:6d:ac:d0:21:07:2f:7c:59:44:cb:9f:43:cb:
         2a:2f:25:20:40:58:67:f0:29:44:ef:d4:af:fe:2a:15:ac:87:
         67:6b:67:cf:d3:e4:d1:85:62:1d:65:9f:be:ac:08:e8:84:9c:
         37:10:65:f4:c9:ce:4f:31:d7:2f:6f:0b:7d:94:8e:cf:11:6a:
         ca:e6:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:24:12 2026 by rpki-client