This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/zk24Xibi_69XM4miradQH_-zfVo.roa
File:                     zk24Xibi_69XM4miradQH_-zfVo.roa (raw, json)
Hash identifier:          8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=
Subject key identifier:   CE:4D:B8:5E:26:E2:FF:AF:57:33:89:A2:AD:A7:50:1F:FF:B3:7D:5A
Certificate issuer:       /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial:       019B79ECFD629915BC6375378BD51D5447BE
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/zk24Xibi_69XM4miradQH_-zfVo.roa
Signing time:             Thu 01 Jan 2026 14:18:53 +0000
ROA not before:           Thu 01 Jan 2026 14:18:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203136
IP address blocks:        185.143.176.0/22 maxlen: 22
                          185.143.176.0/24 maxlen: 24
                          185.143.177.0/24 maxlen: 24
                          185.143.178.0/24 maxlen: 24
                          185.143.179.0/24 maxlen: 24
                          2a0e:2700::/29 maxlen: 29
                          2a0e:2700::/32 maxlen: 32
                          2a0e:2701::/32 maxlen: 32
                          2a0e:2702::/32 maxlen: 32
                          2a0e:2703::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:fd:62:99:15:bc:63:75:37:8b:d5:1d:54:47:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Validity
            Not Before: Jan  1 14:18:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ce4db85e26e2ffaf573389a2ada7501fffb37d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:7e:22:1f:04:67:25:ff:6f:9d:7a:29:f5:
                    74:d1:6a:d5:33:65:6d:4b:87:d7:2b:41:f2:4f:cf:
                    2c:f4:02:17:b4:07:52:24:1c:dc:61:89:f3:fe:2d:
                    9c:28:28:4e:a1:22:8c:e4:99:a8:e8:15:2a:3b:5e:
                    e7:cd:39:74:de:cf:08:23:95:3e:d0:21:3e:3f:01:
                    5f:2e:3c:49:4e:78:b8:0d:a4:35:50:7d:dd:3b:f4:
                    bd:0f:a5:35:d6:71:76:1d:01:b0:28:df:60:68:31:
                    23:a5:ec:e4:ef:11:05:d1:88:e8:4e:67:a4:c6:21:
                    04:35:4b:00:da:5e:8b:2e:d1:70:44:f2:31:cd:91:
                    9a:50:9a:d8:f6:e4:9e:db:70:7d:54:eb:ac:bb:69:
                    7a:e7:1f:e3:1d:c7:ca:84:ea:c4:e3:cb:b4:61:8e:
                    12:da:21:c3:da:05:92:4c:5e:a6:ff:6b:be:86:83:
                    30:33:6c:12:cc:c5:41:2d:66:46:63:26:71:83:83:
                    b0:4e:a1:32:a2:b0:9b:07:6c:0b:e8:b4:d1:fa:4b:
                    a0:7a:6d:8e:69:71:9c:89:8f:98:eb:25:1d:4e:42:
                    f4:39:04:a0:45:47:7d:97:b5:2d:2c:25:a7:75:95:
                    9d:9b:09:0c:1c:f6:39:7b:54:ae:4a:29:1e:e6:fe:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4D:B8:5E:26:E2:FF:AF:57:33:89:A2:AD:A7:50:1F:FF:B3:7D:5A
            X509v3 Authority Key Identifier:
                keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/zk24Xibi_69XM4miradQH_-zfVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.176.0/22
                IPv6:
                  2a0e:2700::/29

    Signature Algorithm: sha256WithRSAEncryption
         87:5c:ed:22:19:ed:50:e1:f2:66:60:a8:2b:84:d3:10:b9:ac:
         25:d7:5b:d5:84:38:63:d6:60:8b:6b:71:99:4f:35:dd:f8:15:
         20:21:10:6d:e2:3a:5e:04:67:da:c5:27:c4:c4:76:a2:1d:49:
         ff:4a:d1:e7:30:04:0b:7b:9e:d3:b0:d9:ad:9e:49:d9:a3:a8:
         8f:05:77:e0:08:37:30:da:49:45:f9:8a:10:44:d0:5a:1a:8c:
         a1:e3:2f:f2:2e:07:1c:98:f6:4d:90:25:11:4f:78:32:dc:1e:
         de:02:42:f8:73:70:f4:ef:ed:0a:2f:35:ff:00:f5:d5:71:9e:
         e3:00:a8:c4:ee:df:a2:b8:44:5a:d8:ab:a1:69:e9:6d:df:98:
         ec:e4:85:82:d2:46:5f:81:75:a0:46:1c:76:6c:34:8a:33:ec:
         3f:45:60:0f:34:8d:7d:ba:c4:18:ff:ab:c8:4e:6e:41:b2:90:
         d0:d3:00:78:50:83:59:c2:9e:6b:e3:2d:4e:36:0c:f1:1a:f2:
         1e:63:ca:d0:4b:fb:97:e2:53:2e:e8:74:cd:e2:09:79:ee:b6:
         f3:7c:5d:16:0b:96:38:62:7a:61:2f:75:0f:d5:31:69:c8:f7:
         ef:06:d8:98:37:44:1d:d6:46:3f:8d:fa:a8:e4:32:12:1c:7f:
         b5:e7:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:31 2026 by rpki-client