This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/zACbew-GGDfV_PK86Nbolx1SxaQ.roa
File:                     zACbew-GGDfV_PK86Nbolx1SxaQ.roa (raw, json)
Hash identifier:          D57qhpDyGLmWHribQIP+4h8O4QGVd3pMoP+ytRMK0jc=
Subject key identifier:   CC:00:9B:7B:0F:86:18:37:D5:FC:F2:BC:E8:D6:E8:97:1D:52:C5:A4
Certificate issuer:       /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial:       019B791056612B31A1A24FC58363EB2E1FE3
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/zACbew-GGDfV_PK86Nbolx1SxaQ.roa
Signing time:             Thu 01 Jan 2026 10:17:52 +0000
ROA not before:           Thu 01 Jan 2026 10:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     996
IP address blocks:        188.191.100.0/24 maxlen: 24
                          188.191.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:56:61:2b:31:a1:a2:4f:c5:83:63:eb:2e:1f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
        Validity
            Not Before: Jan  1 10:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cc009b7b0f861837d5fcf2bce8d6e8971d52c5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:5c:bb:59:d6:ed:41:f2:63:ee:10:e9:fb:
                    d4:5f:8b:91:3b:59:db:e3:ab:7d:74:d9:22:40:19:
                    14:b1:4c:d8:9b:2a:d1:9b:50:9f:26:e1:79:c4:4d:
                    63:68:d3:2c:c0:60:05:35:1d:e0:d9:9d:34:0f:cc:
                    b0:fc:4c:a9:19:c7:a1:45:5d:12:e2:88:1a:d6:05:
                    8e:5d:c2:fb:7a:81:21:84:dd:4d:6d:77:63:01:cb:
                    d9:9e:34:89:13:cf:22:3f:aa:14:15:4c:ff:3f:79:
                    8d:0e:02:71:9e:89:41:0e:8b:90:0a:43:37:3a:45:
                    3b:eb:1f:93:42:86:1d:cd:47:85:3d:de:20:91:4f:
                    a1:f2:c1:5e:e6:c9:f6:33:e9:b6:bf:e0:c3:b1:64:
                    e0:1e:b0:56:25:be:3d:7e:ce:a6:62:dd:1d:fa:8b:
                    9d:d7:f9:06:5d:3e:44:ce:93:fe:61:a3:ad:e6:e1:
                    e5:de:99:d1:d4:79:3a:01:28:5f:3f:76:1b:4e:e9:
                    a6:c6:7b:59:b8:08:4f:74:aa:65:53:7a:ea:cc:56:
                    62:89:d6:2f:fb:b2:5c:61:22:3a:e9:fb:25:15:ec:
                    dc:d6:4b:ae:1b:ce:ce:16:b6:53:7f:93:fe:be:aa:
                    fe:2b:af:fb:ef:53:f2:df:5b:5e:b5:2d:fc:2e:85:
                    5d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:9B:7B:0F:86:18:37:D5:FC:F2:BC:E8:D6:E8:97:1D:52:C5:A4
            X509v3 Authority Key Identifier:
                keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/zACbew-GGDfV_PK86Nbolx1SxaQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.191.100.0/24
                  188.191.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:79:75:57:2a:f6:fe:ea:fb:99:45:0c:41:82:a1:c1:bb:58:
         72:1e:f5:e4:9e:82:0f:30:dd:c1:34:60:54:9b:19:fd:1f:90:
         be:5b:12:17:1b:19:f3:81:ee:6d:ab:63:63:54:8e:ba:9d:df:
         3c:57:69:5f:b8:b6:11:aa:ca:c6:fc:2d:aa:8d:85:4b:85:3b:
         fe:38:68:62:a3:ee:d1:62:28:29:80:c2:90:b6:bc:6b:b8:3e:
         f0:a4:70:5e:e0:87:65:f0:24:39:01:6c:11:f1:5c:9e:c1:54:
         69:6d:37:56:bd:a1:3a:15:22:89:2d:56:81:a1:dc:de:ad:1c:
         99:0d:31:29:e1:ad:6d:ff:7f:f9:de:e9:28:9b:c5:b2:d2:a1:
         e6:7c:31:fe:d0:31:c2:61:52:b7:64:5a:f9:c4:fb:8b:17:71:
         04:0f:fa:cc:e0:e3:2a:e1:c5:63:ac:90:f2:d0:98:13:e7:1c:
         1c:f7:a9:24:23:d3:78:95:84:bb:d2:66:5d:c8:80:90:5a:06:
         62:06:f5:a7:fb:a8:31:c8:77:34:dd:54:d5:d8:46:53:1a:fa:
         81:f6:93:50:76:c7:01:40:ee:14:c9:8c:eb:11:01:f8:15:0d:
         e1:a0:a0:4d:b3:84:29:1a:e6:f7:10:04:6c:32:e4:f5:04:cd:
         b7:ca:23:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:11:58 2026 by rpki-client