This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/ZETEwDkcVRTiVgseF2fcKRSalSo.roa
File:                     ZETEwDkcVRTiVgseF2fcKRSalSo.roa (raw, json)
Hash identifier:          oTGOylHsvsQb4i5TXwlgyF54WovHzp3kgq2AqjIPKuE=
Subject key identifier:   64:44:C4:C0:39:1C:55:14:E2:56:0B:1E:17:67:DC:29:14:9A:95:2A
Certificate issuer:       /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial:       019A968E6FE32750BFF161277B70DB5289DC
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/ZETEwDkcVRTiVgseF2fcKRSalSo.roa
Signing time:             Tue 18 Nov 2025 10:41:48 +0000
ROA not before:           Tue 18 Nov 2025 10:41:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213220
IP address blocks:        45.154.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:96:8e:6f:e3:27:50:bf:f1:61:27:7b:70:db:52:89:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
        Validity
            Not Before: Nov 18 10:41:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6444c4c0391c5514e2560b1e1767dc29149a952a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:8b:cd:12:30:b6:76:67:e3:bd:8c:a1:fe:
                    d1:3e:d3:89:4d:2b:2e:95:59:4d:0d:e6:a1:57:bc:
                    ef:dc:69:e9:f9:e7:5f:7e:a4:86:c5:5c:8f:85:6d:
                    92:ac:90:02:db:48:92:6c:c0:e1:86:74:b0:d4:10:
                    9f:d9:95:d9:0b:ac:6a:9a:0d:3a:03:0c:e6:0a:8e:
                    cf:b3:07:e1:8f:9f:56:5d:4b:73:0d:f1:8f:cf:db:
                    1c:c0:39:be:23:d8:10:5d:a1:45:4b:9d:55:55:af:
                    71:e3:cb:b4:5e:ce:92:b3:39:72:3d:36:60:cd:68:
                    62:df:35:6b:d6:79:cd:ff:c6:88:43:58:bf:3b:6f:
                    66:86:ec:3e:fb:50:1d:60:ee:47:17:61:a0:85:a4:
                    f7:88:2a:e3:48:6b:13:1a:cb:f7:68:f7:13:e0:60:
                    ba:06:25:59:0a:75:ef:af:f7:35:94:4d:d0:bf:cd:
                    e0:81:8f:b5:bb:e2:50:eb:48:f4:cf:2f:45:20:a6:
                    51:13:04:72:c2:af:db:a4:97:ac:eb:98:22:41:f3:
                    fc:d8:f9:03:38:a9:4c:6f:3e:5b:ab:39:d6:80:2d:
                    58:02:db:82:72:b1:4b:51:e3:31:c1:7f:a3:a3:89:
                    9b:ae:16:28:7f:5e:80:69:af:27:e4:a5:2c:10:80:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:44:C4:C0:39:1C:55:14:E2:56:0B:1E:17:67:DC:29:14:9A:95:2A
            X509v3 Authority Key Identifier:
                keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/ZETEwDkcVRTiVgseF2fcKRSalSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:15:57:36:5f:eb:0b:e7:fc:c7:2c:12:db:8a:06:de:af:4c:
         fb:2e:8f:42:64:08:8a:0d:4f:d6:e5:cf:b3:6e:a0:10:3f:d9:
         27:b3:ab:d0:0a:a4:99:88:44:39:49:5d:17:6e:e5:01:25:dd:
         55:ff:bb:6d:3c:1d:8e:f0:a7:b0:f5:81:3d:77:50:56:e8:15:
         e4:d4:31:1a:69:84:4a:8e:d0:4a:bb:08:d6:d8:bb:4f:1c:5d:
         49:4b:bd:c8:ba:16:dc:2c:a4:b9:30:9c:52:61:01:e9:cf:f8:
         39:7c:36:82:f9:a3:c2:81:99:fb:20:74:32:41:76:5e:6c:9f:
         4f:f0:91:03:b0:94:c5:6d:ea:9f:d8:12:21:45:9e:9d:f1:f5:
         27:d7:23:84:c3:84:c3:f4:7b:d4:77:4a:f9:ff:41:77:b0:fb:
         01:38:75:5a:16:98:bb:10:8d:8e:12:81:db:fb:3a:fc:f2:a1:
         0f:89:d0:0f:46:c0:a1:21:c4:a6:1c:30:65:ba:60:9b:f7:24:
         6d:a3:a5:0f:01:f1:b2:f8:0b:4c:47:86:ee:05:70:a4:1b:54:
         1e:f6:c2:e1:91:32:54:de:46:dc:9e:b4:da:74:41:04:24:56:
         30:5a:9e:f8:0c:c7:12:b5:c0:da:29:7c:70:e2:d9:f3:23:93:
         80:2b:ba:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:10:58 2025 by rpki-client