This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ziqQiuCDyc_C0qoLgdhnc19wLiE.roa
File:                     ziqQiuCDyc_C0qoLgdhnc19wLiE.roa (raw, json)
Hash identifier:          vQYWjpeeJoW/gxI3PAhAEi7RWXQu4vCRAf+oSimE9xI=
Subject key identifier:   CE:2A:90:8A:E0:83:C9:CF:C2:D2:AA:0B:81:D8:67:73:5F:70:2E:21
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019B7F14B73C1F9831EEB195CAEA0259E1E7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ziqQiuCDyc_C0qoLgdhnc19wLiE.roa
Signing time:             Fri 02 Jan 2026 14:20:22 +0000
ROA not before:           Fri 02 Jan 2026 14:20:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57546
IP address blocks:        212.56.4.0/24 maxlen: 24
                          212.56.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:b7:3c:1f:98:31:ee:b1:95:ca:ea:02:59:e1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan  2 14:20:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce2a908ae083c9cfc2d2aa0b81d867735f702e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:f1:e1:ed:f7:84:0b:03:78:68:24:83:32:
                    45:58:a9:a5:66:e0:88:ab:8b:8f:e4:1b:6a:54:ed:
                    79:1a:8f:31:76:a6:87:62:c5:9b:9c:3c:00:42:9a:
                    52:90:3f:71:85:38:65:aa:63:2b:bc:f4:66:07:4a:
                    1c:5b:52:1d:67:c9:07:8c:4e:09:50:85:87:29:e8:
                    4a:b9:f1:e4:ad:e7:07:d8:7c:8b:3e:cc:32:a3:0c:
                    d0:01:65:71:0e:6b:6c:69:93:8f:cf:68:4c:c8:52:
                    01:9a:8a:c6:ca:c9:95:a2:26:f4:23:33:92:6e:57:
                    19:5f:5c:34:8b:5d:1f:0e:e9:fc:8c:df:48:3c:9d:
                    83:26:ba:24:21:db:20:24:55:2c:7c:5c:55:16:99:
                    f6:03:82:0f:b6:8a:a8:98:77:e6:70:a9:02:20:00:
                    cb:62:90:c1:f6:fb:0e:35:30:44:6e:9e:8e:df:1d:
                    a8:1c:9f:f2:20:0d:1b:f7:d4:ba:c4:98:77:b5:d1:
                    db:4f:de:da:99:32:38:be:22:30:52:50:bb:cd:ed:
                    d2:97:74:a5:69:06:15:c2:c2:7f:0f:d4:8b:1c:d1:
                    4f:a8:80:bd:7e:cf:e3:6e:7a:5b:c2:29:2b:fa:5f:
                    12:e1:d4:7a:52:07:3b:30:67:be:aa:2b:03:fe:46:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2A:90:8A:E0:83:C9:CF:C2:D2:AA:0B:81:D8:67:73:5F:70:2E:21
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ziqQiuCDyc_C0qoLgdhnc19wLiE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.56.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:55:9b:18:9d:3d:a2:06:8c:9a:bd:5b:e4:46:da:1b:d2:31:
         d1:f3:29:42:a1:3e:80:8e:e6:16:ba:42:a2:d8:23:fb:5a:28:
         a2:a5:d9:1e:63:b5:a2:93:26:c1:8b:a5:9f:61:fe:78:46:13:
         0f:9e:dc:a6:5c:9a:38:12:75:97:57:2f:c6:61:a4:db:f8:12:
         4d:59:b3:86:57:27:72:05:b1:e2:3a:82:98:d8:c6:45:65:57:
         d5:e4:e1:52:2a:a7:ec:96:99:87:7f:7c:9f:1e:9c:63:d8:f1:
         6c:c8:ef:dc:8f:07:c7:52:e0:42:5e:5b:3c:00:87:44:ab:e4:
         9c:6e:ee:65:db:e1:10:f8:29:1c:88:e7:09:0e:4d:74:ce:50:
         4c:99:f7:8a:b7:ab:d1:56:a4:d1:1e:24:87:71:ed:82:50:c8:
         60:89:54:cc:fc:1d:b2:0f:cc:09:7e:44:9f:a4:b7:3a:78:54:
         83:18:43:72:57:d2:e4:9d:a4:dd:fa:ec:35:40:43:de:7a:ec:
         41:b6:0f:f3:fe:51:be:ba:ed:0c:cd:8c:c2:4d:f8:5d:4c:2a:
         c4:5d:65:48:0b:2b:c0:8b:8c:77:23:e3:5a:84:7c:18:8e:cf:
         68:da:53:cd:0f:b3:fe:c0:ac:9f:7b:af:09:77:0f:ac:b2:8d:
         11:89:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:08 2026 by rpki-client