This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa
File:                     v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa (raw, json)
Hash identifier:          azp2mK2l0SmjEdVLQ9ZYdD4KO3+EjEhWMc0Gk6dWvew=
Subject key identifier:   BF:56:76:3B:4B:ED:30:45:F5:F1:C9:59:EE:1F:CC:A3:4C:67:C7:BE
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019B7E3722631ED240EAD30C527EB6ABD34E
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa
Signing time:             Fri 02 Jan 2026 10:18:21 +0000
ROA not before:           Fri 02 Jan 2026 10:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208580
IP address blocks:        93.179.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:22:63:1e:d2:40:ea:d3:0c:52:7e:b6:ab:d3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  2 10:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf56763b4bed3045f5f1c959ee1fcca34c67c7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b0:44:9f:bd:13:0e:69:c8:b1:6c:19:5a:ea:
                    1e:ec:12:45:a9:28:45:38:31:3b:32:49:0a:c0:71:
                    39:73:11:17:eb:b5:db:19:b6:66:98:07:38:2d:a2:
                    7a:89:dc:34:99:c4:56:ef:3a:13:98:28:68:44:bb:
                    34:29:fe:31:86:10:eb:5a:f7:91:5f:29:23:ca:25:
                    de:80:4d:0b:8d:8b:76:8c:18:8a:0d:48:0b:c0:91:
                    6e:a4:c3:9f:eb:d1:fb:3b:0c:55:1a:82:c0:4d:63:
                    5c:32:e5:c8:22:1f:a6:88:40:d3:eb:bc:d2:9f:86:
                    6e:c8:5d:71:95:55:9e:1c:9f:e1:9c:91:3e:28:45:
                    1a:c0:34:06:d6:a9:81:7c:78:cf:be:0e:07:01:4a:
                    a7:63:ab:08:e5:84:84:c2:bc:64:81:cf:cb:13:c4:
                    d6:1e:87:db:49:13:47:07:70:df:9a:1d:87:e7:56:
                    84:fc:98:eb:fe:e1:dc:4e:32:dc:07:de:6b:98:55:
                    8e:de:9d:05:fe:30:ad:7e:4d:3c:76:32:0d:1c:b8:
                    5a:24:5b:9c:b2:ce:1c:f9:59:5c:d3:d0:24:6d:65:
                    d7:3d:de:57:e7:9e:3c:96:59:db:ee:fc:97:4e:94:
                    f2:e5:38:a8:7c:ca:29:1a:22:26:a1:11:a3:bb:6a:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:56:76:3B:4B:ED:30:45:F5:F1:C9:59:EE:1F:CC:A3:4C:67:C7:BE
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ef:c1:73:c2:35:b3:85:1a:8a:d1:3e:7a:12:53:b5:75:1a:
         a8:df:2d:30:c0:ad:9c:07:10:23:65:c8:43:15:b8:6b:6f:5e:
         4e:b6:0f:2c:cb:e6:23:d3:7b:43:1f:71:3c:64:99:f1:af:ec:
         8a:c1:27:1e:95:21:f0:6e:1c:7d:df:c7:17:ac:98:d7:b9:f3:
         59:13:6f:4c:91:aa:63:b2:03:b2:c8:96:c4:02:97:82:99:b7:
         40:20:a9:20:21:7f:f6:ce:ef:d8:b9:5c:46:10:78:dd:a4:83:
         ba:f5:e9:fc:b8:ed:3a:be:7d:4a:19:23:e0:bb:cd:db:22:5f:
         02:2a:e3:c8:82:ad:26:91:ed:73:75:6e:0f:be:1b:4e:d6:11:
         4f:44:35:3c:46:14:ce:04:49:db:8f:df:6a:9f:dc:d6:11:f0:
         e7:27:a3:af:c6:8a:3f:43:53:01:24:b7:07:a9:9f:a8:40:d3:
         fd:20:49:7c:6c:ff:ad:89:0a:51:31:45:dc:75:fa:c7:d2:50:
         1c:45:9a:a5:a5:9c:50:cc:d1:e2:67:49:3e:81:d7:38:bd:e1:
         18:7b:7b:3d:c8:50:7f:05:e5:8d:94:93:91:42:c0:5f:2f:6a:
         58:bf:9e:17:bd:b0:1d:9e:cc:ea:69:fd:80:40:66:71:82:41:
         62:d9:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:02:13 2026 by rpki-client