This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NzzjpNtPpuq47OVcaKporkvnkpw.roa
File:                     NzzjpNtPpuq47OVcaKporkvnkpw.roa (raw, json)
Hash identifier:          ndbtqGqbQOGH+66bfbV/Ep59XBiiq0T39hZ74EigHv8=
Subject key identifier:   37:3C:E3:A4:DB:4F:A6:EA:B8:EC:E5:5C:68:AA:68:AE:4B:E7:92:9C
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019BE9C3F06A8AD1C3FE28E3F9C8F7CDB7B7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NzzjpNtPpuq47OVcaKporkvnkpw.roa
Signing time:             Fri 23 Jan 2026 07:31:30 +0000
ROA not before:           Fri 23 Jan 2026 07:31:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215292
IP address blocks:        5.230.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e9:c3:f0:6a:8a:d1:c3:fe:28:e3:f9:c8:f7:cd:b7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jan 23 07:31:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=373ce3a4db4fa6eab8ece55c68aa68ae4be7929c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:eb:d3:9b:81:f5:26:29:fb:29:a5:b4:e9:
                    5a:26:a7:0c:5f:cf:e8:22:ae:f1:4d:e1:b6:51:95:
                    77:21:37:ed:49:09:ad:b2:c3:dd:78:a8:40:d3:52:
                    4b:90:2a:da:7b:89:a0:18:64:3b:54:0f:44:c3:bd:
                    ab:1c:d0:60:42:29:bf:fe:15:22:f8:c0:a7:3b:ac:
                    f7:66:bc:9a:33:88:d6:37:56:4c:a9:39:5b:41:e6:
                    ee:d1:2c:33:51:fa:86:05:b1:a9:7a:9e:15:a6:b0:
                    b5:99:fd:72:9b:21:4d:d1:97:91:34:e4:05:a2:84:
                    3e:34:51:9d:44:c3:16:40:8e:16:e4:6c:90:07:94:
                    46:62:6f:69:82:62:df:a9:00:c1:94:4f:4e:b4:48:
                    04:ff:a4:10:99:73:f1:9f:bc:72:b4:f1:b6:40:cc:
                    ad:c9:74:89:36:86:f1:05:f8:cf:55:9e:ea:92:0b:
                    aa:9a:4b:d1:0f:45:25:30:ad:fd:43:3f:1b:8a:80:
                    32:c6:23:a6:3d:4a:e8:2e:af:7c:ec:62:9e:23:66:
                    58:ef:53:e7:fa:d7:44:39:55:29:41:8c:8f:56:00:
                    8f:38:8e:f9:f8:92:4f:16:f8:5b:50:87:23:c9:c4:
                    f7:13:f5:e7:35:6a:a6:28:10:4f:9c:4f:5b:89:4e:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3C:E3:A4:DB:4F:A6:EA:B8:EC:E5:5C:68:AA:68:AE:4B:E7:92:9C
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NzzjpNtPpuq47OVcaKporkvnkpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.230.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:af:51:74:59:4e:97:6f:03:7d:ce:2e:ea:36:18:6f:1e:67:
         41:3d:87:ae:e5:49:93:ca:cc:60:db:8c:ac:04:1c:e3:b3:cb:
         a4:0c:c2:70:bf:75:9f:bd:c4:ee:a6:04:09:66:d1:bb:c2:41:
         ca:cf:43:46:6b:e4:5b:3a:69:c7:ca:1c:ef:2f:41:ca:16:0b:
         78:cd:c9:ba:bd:9a:36:ba:8f:c3:1f:2b:01:ed:a4:3b:43:b7:
         72:af:f4:fc:d8:8c:42:59:bb:70:9a:21:aa:89:9c:94:82:4e:
         77:0b:7c:0e:23:64:22:c8:d9:82:e7:69:ce:cb:8c:aa:a8:77:
         44:19:fb:e4:8f:41:60:53:40:e7:e4:66:9b:1f:f2:93:59:64:
         57:83:4f:67:df:11:a9:a8:59:a2:68:ba:d1:fc:0e:52:88:3b:
         d7:50:cf:69:87:8d:a6:1d:ef:c1:0d:2a:66:c0:d9:ab:97:35:
         89:94:0e:0d:e8:0e:57:18:dd:4a:0f:63:c5:fc:75:d2:58:67:
         48:6a:c0:33:29:4b:45:9a:7b:fe:5c:ee:3e:6a:3c:f0:7d:04:
         4a:27:cf:f9:8c:19:7b:31:d9:e7:f5:fe:85:15:18:53:b5:3d:
         52:da:f5:72:13:1c:e8:b3:f9:31:b8:c0:2f:55:11:97:9f:12:
         1f:86:c3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:12 2026 by rpki-client