This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/PZJni5TxpYn092_2LgQ4TzNg1Vk.roa
File:                     PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (raw, json)
Hash identifier:          KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=
Subject key identifier:   3D:92:67:8B:94:F1:A5:89:F4:F7:6F:F6:2E:04:38:4F:33:60:D5:59
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       019B7CEE53C50166B27C4116149DA16CC314
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/PZJni5TxpYn092_2LgQ4TzNg1Vk.roa
Signing time:             Fri 02 Jan 2026 04:19:12 +0000
ROA not before:           Fri 02 Jan 2026 04:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200334
IP address blocks:        2a0f:6580:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:53:c5:01:66:b2:7c:41:16:14:9d:a1:6c:c3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: Jan  2 04:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d92678b94f1a589f4f76ff62e04384f3360d559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:86:26:0c:cd:33:92:cb:8a:11:95:1c:32:
                    7a:c7:56:fc:2c:36:0e:d3:13:6c:7b:cb:46:e3:94:
                    98:e4:84:f0:b8:f3:49:16:1e:67:01:0e:34:63:cb:
                    89:e8:fe:2c:db:4f:a7:19:ad:ef:d0:aa:6a:2f:fb:
                    6f:58:3a:c6:77:3e:1c:17:d3:77:69:d5:c2:8e:9d:
                    e4:e5:d2:3e:92:8c:96:19:30:5d:21:31:66:ac:9a:
                    95:16:7c:b7:25:75:b9:cd:fb:19:2f:82:10:b7:b9:
                    06:fc:38:bb:d8:be:d1:1d:db:75:39:dd:f3:06:bf:
                    1d:42:5f:56:50:e1:b4:95:06:88:67:c9:9a:40:b7:
                    6f:36:ff:58:1a:34:ea:dd:c1:59:6a:a6:c1:ec:a2:
                    7a:f0:fb:5f:70:6f:89:85:bb:15:4b:b9:4e:4e:9d:
                    ca:19:b7:8e:cc:ba:bd:7c:1c:b2:4c:cc:c6:d5:b8:
                    9f:84:62:a0:10:57:bd:cd:32:db:7e:bc:d4:37:65:
                    15:48:1c:d0:b7:4c:e4:18:19:29:6c:4a:f6:40:c6:
                    da:bf:fd:09:31:6f:29:18:21:7e:6c:30:e5:b1:f4:
                    d5:c6:86:bc:78:44:23:29:81:27:c1:3f:55:51:a1:
                    af:f6:32:00:0a:c5:27:42:be:7e:3b:fa:64:8b:58:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:92:67:8B:94:F1:A5:89:F4:F7:6F:F6:2E:04:38:4F:33:60:D5:59
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/PZJni5TxpYn092_2LgQ4TzNg1Vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6580:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:a9:75:b3:b8:61:41:29:5f:33:ba:19:cb:cf:b1:9c:63:
         72:23:d8:a7:16:96:7e:4f:35:e4:f8:97:d1:ef:0a:30:0d:a5:
         4e:d9:b0:33:06:c1:cd:b3:b9:ef:b2:f2:97:ba:bf:4a:88:7e:
         87:86:85:75:04:80:1b:b5:20:28:f9:0a:93:c8:69:25:f0:2d:
         0e:c4:b8:7b:c3:dd:df:dc:a2:f7:da:1d:4d:ef:d0:53:56:51:
         41:bb:e8:74:28:96:f9:af:f0:6e:34:9d:bc:64:62:6d:73:b1:
         e4:86:91:62:8e:59:f9:5e:24:20:bd:99:f5:d1:dc:83:86:9b:
         d8:c9:26:0a:ef:4c:01:18:48:49:9a:2f:6a:23:1c:8f:f2:71:
         9f:c4:68:a8:9d:55:5d:62:34:90:67:90:3b:eb:96:74:1f:75:
         20:01:85:0a:93:34:d9:10:65:69:fe:1f:5a:3e:4f:ea:77:b6:
         57:82:4d:6d:9b:0a:e1:d6:fb:87:55:00:77:16:b0:fc:ef:07:
         9d:75:68:07:0b:fa:e4:ca:97:e1:ab:cd:43:cd:b1:ef:a5:e8:
         d0:e0:03:5a:a8:e5:c7:7f:bb:1a:b9:b7:5e:91:b9:07:9b:e9:
         0a:37:6d:3c:7b:8a:7a:10:88:77:b6:5d:e1:c8:e3:ea:0a:8a:
         33:14:41:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:47 2026 by rpki-client