This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/ZmDQJclFbfRowgpnHRptrYIeIug.roa
File:                     ZmDQJclFbfRowgpnHRptrYIeIug.roa (raw, json)
Hash identifier:          H/7KqBnapWq4unhs3UjmS/EFy+upD+qehXGAkF2UTwA=
Subject key identifier:   66:60:D0:25:C9:45:6D:F4:68:C2:0A:67:1D:1A:6D:AD:82:1E:22:E8
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       019B7DCACFF75B908CD6549510B603D98B63
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/ZmDQJclFbfRowgpnHRptrYIeIug.roa
Signing time:             Fri 02 Jan 2026 08:20:02 +0000
ROA not before:           Fri 02 Jan 2026 08:20:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20560
IP address blocks:        194.50.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:cf:f7:5b:90:8c:d6:54:95:10:b6:03:d9:8b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Jan  2 08:20:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6660d025c9456df468c20a671d1a6dad821e22e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:eb:d5:6f:1e:71:3a:a6:72:f1:49:5d:91:
                    b6:94:32:d4:69:21:5f:6f:d8:64:7b:7c:e9:4a:8e:
                    4b:7e:ea:09:e8:8f:0c:28:d6:c3:fc:f4:a9:f7:5f:
                    26:3b:ee:19:6b:b3:9d:62:85:ef:6b:dc:d2:9e:52:
                    2b:f9:80:d3:94:37:8b:24:ad:0f:44:31:89:34:7b:
                    43:f6:7a:93:e6:6d:a7:15:6a:d5:28:60:f8:0a:83:
                    1c:1f:01:e6:7a:e6:d7:bb:68:db:c4:46:1a:92:77:
                    09:69:d8:73:61:2d:67:70:ab:74:07:03:4a:14:8f:
                    90:16:21:8f:d2:0f:72:36:e9:87:1d:08:44:de:ba:
                    fd:3b:3f:47:d6:bf:b1:43:a6:52:e7:81:f1:28:2b:
                    56:82:55:17:aa:d4:ed:3a:5c:e3:f9:23:7d:33:8b:
                    1b:a0:91:e6:2b:41:ce:e7:49:cb:6f:01:97:74:33:
                    79:90:b5:5a:57:cf:e6:a3:17:00:a2:58:af:7e:81:
                    2d:bb:5f:78:a6:cf:a7:88:be:32:37:43:56:3a:fa:
                    49:12:90:87:ed:1f:02:36:da:77:d9:8a:fe:7b:49:
                    32:bd:db:95:e0:48:5d:3c:7d:98:94:50:6f:40:92:
                    f9:27:20:36:77:7c:cc:2b:c3:0e:07:c4:44:fa:a8:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:D0:25:C9:45:6D:F4:68:C2:0A:67:1D:1A:6D:AD:82:1E:22:E8
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/ZmDQJclFbfRowgpnHRptrYIeIug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:8e:e1:78:af:4e:74:57:7e:3e:bc:e0:5c:e8:59:cf:50:ad:
         36:dd:63:70:56:dd:52:e0:1c:58:13:29:99:81:60:fc:5a:a5:
         6a:d0:c8:82:2f:45:f1:59:fa:af:1e:c5:db:8f:1c:e2:05:e7:
         03:87:d9:83:52:74:5f:8b:18:f1:54:f0:90:6a:4d:87:5d:19:
         fa:38:05:5f:0a:2e:2f:92:98:ba:51:52:28:0a:bd:7f:66:44:
         16:18:8d:8a:87:7c:41:82:bd:cf:a9:1f:1c:2a:c1:ba:b9:80:
         4b:d0:ea:ea:4c:51:97:b9:09:62:68:99:cf:12:a3:a9:a6:26:
         7e:77:09:36:c1:b8:64:45:d9:f1:92:42:4d:72:1e:14:3e:ee:
         9b:e3:b6:23:c2:28:01:4f:f5:57:a7:a5:cf:62:1f:c4:fe:9f:
         ef:fe:09:cf:27:96:8d:44:1c:fd:68:0e:bb:a9:fa:8f:c8:b9:
         df:e5:49:46:82:71:43:33:8a:09:73:03:48:04:92:0e:7d:dc:
         19:7b:2d:3b:ac:85:23:04:db:b3:cf:39:f7:e7:7c:0b:e7:fa:
         08:99:d8:e8:21:23:e7:93:ef:44:4c:8a:1a:5f:04:8e:c1:c7:
         41:89:0c:74:79:e8:98:4b:6b:8b:b6:d0:95:7a:64:cc:bf:55:
         76:67:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:57:09 2026 by rpki-client