This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/pz_LxxSTUEK41xRGO49WFkaPamo.roa
File:                     pz_LxxSTUEK41xRGO49WFkaPamo.roa (raw, json)
Hash identifier:          Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=
Subject key identifier:   A7:3F:CB:C7:14:93:50:42:B8:D7:14:46:3B:8F:56:16:46:8F:6A:6A
Certificate issuer:       /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial:       019B7BA3E51115322EBC20196063223A48DD
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/pz_LxxSTUEK41xRGO49WFkaPamo.roa
Signing time:             Thu 01 Jan 2026 22:18:17 +0000
ROA not before:           Thu 01 Jan 2026 22:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47692
IP address blocks:        185.46.184.0/24 maxlen: 24
                          185.46.185.0/24 maxlen: 24
                          185.46.186.0/24 maxlen: 24
                          185.46.187.0/24 maxlen: 24
                          185.205.80.0/24 maxlen: 24
                          185.205.81.0/24 maxlen: 24
                          185.205.82.0/24 maxlen: 24
                          185.205.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:e5:11:15:32:2e:bc:20:19:60:63:22:3a:48:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
        Validity
            Not Before: Jan  1 22:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a73fcbc714935042b8d714463b8f5616468f6a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e6:10:23:45:f0:f3:05:e1:f2:4f:13:d0:e7:
                    36:8f:67:af:74:f2:e1:79:e4:0c:bc:2a:5b:77:f0:
                    9d:de:3b:e4:be:7b:4d:f9:4a:49:51:bb:45:22:6a:
                    10:9e:ff:87:49:1d:93:e5:64:e1:09:65:03:8e:a5:
                    24:99:d8:9d:6e:ba:8b:af:1c:ce:d5:61:3c:5c:00:
                    75:eb:76:b2:20:02:df:9e:da:65:9e:e9:41:df:6d:
                    3f:e8:85:d8:e7:3d:d0:14:09:08:7a:bd:a6:be:08:
                    81:ca:30:43:68:ff:25:8e:5f:17:d8:36:99:a4:d7:
                    74:ba:2b:fd:9b:bb:64:95:7f:f7:fb:7e:f0:d6:2b:
                    29:46:49:1c:7a:65:57:d5:ec:79:6a:15:80:81:0e:
                    5c:5c:75:31:23:e6:b4:d7:cf:d3:dd:de:9e:e5:04:
                    b6:2a:33:e2:4f:42:78:86:5b:41:ed:8a:8b:6c:4a:
                    a6:90:f7:02:f1:c4:80:c9:09:e4:d9:88:7f:37:b4:
                    86:88:2d:5d:64:eb:21:3b:c7:86:3c:af:56:20:d1:
                    a7:49:2e:97:eb:13:19:31:08:fd:64:7e:b4:93:16:
                    60:31:15:3c:00:d6:ea:b8:99:36:c8:97:74:ed:ca:
                    8a:13:30:3a:d4:58:69:6c:88:43:6b:00:5e:b5:4f:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3F:CB:C7:14:93:50:42:B8:D7:14:46:3B:8F:56:16:46:8F:6A:6A
            X509v3 Authority Key Identifier:
                keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/pz_LxxSTUEK41xRGO49WFkaPamo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.184.0/22
                  185.205.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:34:fb:40:96:ef:7a:e8:b9:56:98:a2:a8:d4:63:60:e1:78:
         48:6f:38:36:66:38:0c:8d:e8:f6:ee:c1:2b:ef:ef:40:e0:be:
         b1:d5:4d:1f:a6:70:f8:84:60:d9:67:54:08:85:96:b9:da:42:
         6a:69:d4:0a:fb:82:ce:0b:52:65:ea:13:ea:bb:d7:44:c9:29:
         d6:14:2a:ef:29:de:28:af:0b:6f:7e:ef:ef:c9:72:7b:45:29:
         9d:f5:36:d9:55:d4:45:70:7a:42:b7:d9:a6:8c:d0:e0:35:e9:
         11:37:62:d5:70:6e:e6:d9:7e:d0:a6:0b:9d:5c:58:3f:4c:2f:
         df:ea:23:7d:f8:8d:cf:30:92:70:40:a7:84:fe:30:b1:d0:b3:
         7c:b8:95:ce:45:15:ca:33:04:26:38:bc:65:54:25:b3:f0:7f:
         40:84:0b:81:04:7e:42:a1:e3:0b:7d:08:4d:5b:9c:94:64:ba:
         91:a6:16:eb:25:fc:3d:47:55:ff:14:d2:b2:13:2a:30:a9:7b:
         72:7e:24:f2:e6:a0:1e:a9:65:b2:fb:d6:de:9c:fb:63:42:6e:
         75:ff:4b:33:e4:b3:9c:c8:9a:7f:75:ed:fb:83:d5:57:d6:1e:
         9e:c4:3a:d5:33:84:63:3a:4d:04:e4:2e:a7:76:45:37:13:4d:
         a3:82:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:29 2026 by rpki-client