This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/zlryn4mko1wRxoOR9PxP0fcxrmE.roa
File:                     zlryn4mko1wRxoOR9PxP0fcxrmE.roa (raw, json)
Hash identifier:          AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=
Subject key identifier:   CE:5A:F2:9F:89:A4:A3:5C:11:C6:83:91:F4:FC:4F:D1:F7:31:AE:61
Certificate issuer:       /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial:       019B77C6944825E2D3292113C4D76D42674A
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/zlryn4mko1wRxoOR9PxP0fcxrmE.roa
Signing time:             Thu 01 Jan 2026 04:17:41 +0000
ROA not before:           Thu 01 Jan 2026 04:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35450
IP address blocks:        193.192.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:94:48:25:e2:d3:29:21:13:c4:d7:6d:42:67:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
        Validity
            Not Before: Jan  1 04:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce5af29f89a4a35c11c68391f4fc4fd1f731ae61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:52:c3:00:71:d8:6c:cf:f0:37:b1:6b:61:
                    4f:ab:8a:03:59:d0:ab:28:04:b8:20:9f:45:c3:78:
                    74:3d:0e:cb:f3:13:88:14:6e:26:44:b1:3a:c9:77:
                    a3:e3:45:76:2c:82:c2:94:4b:6e:27:f1:20:fe:3d:
                    6a:91:b0:90:65:63:fb:c8:e1:0b:72:35:8c:43:59:
                    ea:b0:87:3b:6c:10:b2:6e:f6:b4:58:fb:ab:e5:3c:
                    e9:05:67:fa:3c:bb:af:9b:f9:42:0c:48:59:88:0f:
                    91:dc:e6:09:c0:bf:8c:15:d1:ad:a0:90:29:6c:92:
                    0c:55:32:2b:6a:ba:ba:83:e4:23:3e:fa:41:9a:11:
                    94:4f:32:5c:3a:98:4a:f9:62:2a:9a:97:22:e7:2b:
                    12:9e:b7:2c:bd:be:1d:a6:d9:9a:a1:d5:31:ee:ec:
                    53:ad:6d:e5:06:0c:78:85:a4:69:3b:62:b0:be:ca:
                    be:77:07:38:c8:56:9c:61:4b:f8:5d:3c:56:87:c0:
                    c4:e3:ef:69:64:22:f4:e1:97:c6:f0:73:79:19:b5:
                    12:b4:60:f9:97:8e:ac:ef:63:e9:d1:9f:46:88:e8:
                    d1:d8:2a:cb:76:8b:a0:f4:ad:e6:46:cc:be:aa:2d:
                    73:a3:5e:57:e9:45:d9:e3:77:39:28:03:1e:88:c6:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5A:F2:9F:89:A4:A3:5C:11:C6:83:91:F4:FC:4F:D1:F7:31:AE:61
            X509v3 Authority Key Identifier:
                keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/zlryn4mko1wRxoOR9PxP0fcxrmE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.192.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:4f:a2:15:93:30:48:01:e8:35:07:b8:38:c4:f7:c3:ec:
         d8:cc:89:f5:3e:d7:08:f1:b2:78:28:54:8b:f5:92:bc:c8:6a:
         c6:01:ce:d8:21:ca:66:5c:b1:4c:e8:08:c1:16:d3:a6:72:02:
         92:a1:92:0a:d9:15:c6:45:37:16:ae:b8:2e:98:14:e0:70:43:
         78:fc:2b:b6:41:13:26:9e:28:46:18:5a:98:8f:29:c0:27:1d:
         42:2d:3c:79:e4:76:87:a8:a7:8a:d2:ef:cc:16:b6:66:46:36:
         63:66:be:0a:72:61:5f:d3:e5:72:f1:f9:76:d0:be:d6:53:66:
         1b:ff:c5:d8:a3:45:9c:6d:7d:d8:29:ff:72:18:a4:b0:e6:b4:
         5b:ff:6d:77:73:51:d7:53:15:1c:7f:ee:41:f0:c1:3a:65:f5:
         27:f7:97:3b:d1:89:58:6c:5f:dd:92:9a:ff:c5:58:c0:a0:d5:
         ed:d0:67:2c:32:44:db:f7:02:91:2e:18:4f:fc:a7:40:c2:cd:
         ee:17:d5:44:6c:92:93:4d:0e:29:17:c0:ac:f8:a4:bc:e1:b2:
         42:1d:8c:17:3a:9a:e5:85:9e:fa:d4:4c:a1:98:a9:83:7f:14:
         2b:2b:36:86:a2:5c:4e:09:8c:2f:dc:d3:a5:64:10:24:9e:aa:
         93:06:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:40:43 2026 by rpki-client