This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa
File:                     z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (raw, json)
Hash identifier:          Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=
Subject key identifier:   CF:6C:9A:D0:EF:99:B7:51:E4:48:59:D1:16:93:61:CD:48:84:A4:AC
Certificate issuer:       /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial:       019B7B35E3F7914CC5E702D7710F6C9F8396
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa
Signing time:             Thu 01 Jan 2026 20:18:07 +0000
ROA not before:           Thu 01 Jan 2026 20:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33911
IP address blocks:        193.202.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:e3:f7:91:4c:c5:e7:02:d7:71:0f:6c:9f:83:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
        Validity
            Not Before: Jan  1 20:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cf6c9ad0ef99b751e44859d1169361cd4884a4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:87:e7:64:51:17:50:a2:db:36:a3:86:95:fe:
                    18:55:f2:4e:62:1e:95:40:ad:1e:16:90:24:6c:b9:
                    fa:2a:22:0b:0c:51:85:3e:cf:10:20:77:0a:54:3c:
                    ec:2c:8b:07:19:69:e5:3e:73:63:cd:09:7c:84:ed:
                    4b:fb:8c:2a:80:c0:c0:3e:f4:78:ba:72:10:75:60:
                    a5:df:8b:4e:f5:ce:6e:55:0f:13:d2:5a:09:e9:1c:
                    e9:a2:c1:bc:bd:fa:d2:91:a7:18:9c:bb:dd:b0:a6:
                    88:57:46:0c:ef:3b:a6:fd:ef:b0:74:e9:f8:73:ec:
                    9e:e0:a7:16:3e:30:14:0e:8b:01:cc:bd:89:84:7e:
                    50:7a:de:fc:3f:91:92:1d:a9:38:74:b9:8a:b7:c1:
                    04:c2:45:38:27:66:1e:ed:23:8a:76:1a:96:c3:6a:
                    3f:f9:5d:8a:bf:8b:ff:b0:f5:8d:b6:eb:8e:73:8a:
                    3f:e1:10:f6:87:7b:67:45:bc:50:72:ca:12:f9:93:
                    72:fd:49:ed:1a:0d:be:da:51:4b:69:18:a7:d7:d5:
                    80:e6:97:ec:c5:d1:e8:9e:85:bf:21:16:94:dd:72:
                    cf:7c:b7:6f:fc:5a:4f:c9:64:13:c7:c8:51:14:2e:
                    86:f9:45:64:b3:b4:3c:74:7f:fd:bd:1d:f5:04:62:
                    8b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6C:9A:D0:EF:99:B7:51:E4:48:59:D1:16:93:61:CD:48:84:A4:AC
            X509v3 Authority Key Identifier:
                keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:82:8c:23:17:1d:99:22:06:06:c5:26:25:9d:8c:f8:5d:60:
         48:b7:00:55:f4:b0:5e:33:09:24:e5:13:ff:96:b1:90:65:e0:
         6c:1f:70:f6:0d:1c:e5:54:00:b1:a7:ea:53:0e:26:8f:11:56:
         b2:5f:5e:75:f2:02:c4:4d:82:23:1b:a9:c0:ee:ff:b1:45:e2:
         63:02:a8:40:e2:39:99:9f:6a:01:9e:29:ba:17:9f:fc:2c:bb:
         b0:f5:51:c0:c5:fb:13:c0:2b:3b:32:2b:e6:08:de:52:56:78:
         69:55:21:11:9e:a0:b4:44:7e:5a:4a:50:47:8b:b6:59:e6:2a:
         fd:6b:7f:44:1a:a6:6a:e8:aa:88:12:8e:8d:ea:2b:5e:a0:e4:
         7b:8a:b3:5a:eb:13:77:14:23:b0:d0:64:eb:79:d4:29:91:ce:
         f1:3c:80:ce:52:78:dc:73:5a:ce:43:5b:a1:ec:2d:08:7e:75:
         6c:0e:6f:a1:3a:a9:ee:db:49:dc:d1:79:ea:ec:34:2f:4c:5a:
         12:e8:3e:a5:18:bc:31:b3:01:62:aa:57:6f:3b:c1:d2:59:c7:
         8b:22:f0:36:8b:7b:d7:06:13:5d:d6:88:13:01:53:80:e7:bd:
         03:d0:46:aa:76:e4:96:6a:85:b3:52:70:7a:2c:f9:85:31:17:
         a9:e3:e9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:35 2026 by rpki-client