This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/ztVjJUiUV1rDC2jieY_0fSkWKqc.roa
File:                     ztVjJUiUV1rDC2jieY_0fSkWKqc.roa (raw, json)
Hash identifier:          E90uqL2/PKft67i6lux5huLN0HrPAucj9w5VzeHEJuI=
Subject key identifier:   CE:D5:63:25:48:94:57:5A:C3:0B:68:E2:79:8F:F4:7D:29:16:2A:A7
Certificate issuer:       /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial:       019B77596CCF5A278C63D5B1C15144F310AE
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/ztVjJUiUV1rDC2jieY_0fSkWKqc.roa
Signing time:             Thu 01 Jan 2026 02:18:27 +0000
ROA not before:           Thu 01 Jan 2026 02:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202298
IP address blocks:        195.242.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:6c:cf:5a:27:8c:63:d5:b1:c1:51:44:f3:10:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
        Validity
            Not Before: Jan  1 02:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ced563254894575ac30b68e2798ff47d29162aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:31:52:ab:ab:74:dd:b5:74:f6:20:ed:28:75:
                    d2:87:6c:59:25:e6:eb:73:11:6b:79:0b:b2:ed:44:
                    bb:33:5f:05:3c:df:e1:48:e5:e4:98:bb:34:c1:51:
                    dc:05:0e:e8:66:4d:9b:04:8b:b1:41:51:e6:62:77:
                    1d:d0:cc:bb:7f:0e:a1:b2:42:b2:96:2e:fc:39:c3:
                    53:83:a4:78:3c:e3:67:14:0d:ac:e1:c9:2c:fd:6b:
                    e3:48:c7:f8:11:42:ea:25:95:9a:e5:43:6b:e1:0f:
                    68:f0:89:d3:e2:47:bf:9e:6c:1c:65:94:ab:9c:e6:
                    bc:29:03:99:1e:c8:54:f6:3f:38:b0:db:fd:82:f4:
                    94:cc:c5:3c:41:18:0c:85:11:89:21:16:dd:18:38:
                    52:2b:3e:5b:0e:53:7e:b1:26:e1:b1:33:4e:bd:72:
                    dc:6d:a2:bd:eb:fc:5b:e0:c2:3e:16:26:d5:70:a4:
                    fc:d2:d8:8e:8c:21:87:d1:b4:07:02:07:9d:6c:b0:
                    b4:7e:e7:ba:4a:3b:50:64:fa:5b:75:1f:84:e7:c5:
                    37:dd:ff:bd:db:48:73:21:53:3e:ad:7d:c8:8d:bc:
                    c9:08:2b:dc:41:18:3d:7e:61:2e:38:9f:05:4d:27:
                    09:4f:c2:77:14:e1:2d:35:22:4f:09:53:1b:28:34:
                    04:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D5:63:25:48:94:57:5A:C3:0B:68:E2:79:8F:F4:7D:29:16:2A:A7
            X509v3 Authority Key Identifier:
                keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/ztVjJUiUV1rDC2jieY_0fSkWKqc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.242.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:c1:23:e9:b7:ff:47:40:62:83:78:cd:06:a2:70:14:b6:10:
         c4:5a:be:40:ca:d9:78:1a:ca:0b:69:a3:3b:21:cd:19:53:f6:
         17:c3:73:d3:ad:21:ca:d5:f3:4d:19:0d:70:1b:d2:65:a2:4a:
         52:d7:37:80:1e:51:c8:f0:b9:b3:cf:57:51:65:60:dd:5f:9a:
         6e:6c:4e:8e:24:ed:4e:83:28:5a:29:2e:1c:27:63:ba:bd:75:
         4c:7b:aa:b2:3d:ee:83:f5:35:52:c4:84:06:e0:f6:5a:14:c7:
         2b:01:71:39:11:a2:49:3d:8c:35:b8:27:a9:13:5b:00:05:7f:
         cf:70:89:e3:8a:55:43:65:fc:32:66:de:ff:cb:00:9c:f5:76:
         8f:ee:12:88:5d:ac:dd:a6:5a:59:d1:0e:dd:ab:a2:79:ce:66:
         b9:2b:7e:28:03:a7:e1:dd:82:76:4e:43:a2:a2:f8:d3:43:ab:
         86:4a:fe:00:96:89:ee:92:de:9d:05:86:0e:fe:ff:6e:93:d6:
         27:25:f5:d0:73:11:bd:bd:c7:db:fc:a8:94:3a:80:ae:dd:fd:
         c6:71:75:2d:95:00:38:c0:41:7a:0f:85:63:1b:32:a9:9a:34:
         ae:1d:b8:2a:46:31:e1:1a:62:88:35:d3:4a:77:a2:a0:32:c6:
         fd:28:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:32:58 2026 by rpki-client