This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/0ZCplUocK0t7bDn-aV_dYdEIf1g.roa
File:                     0ZCplUocK0t7bDn-aV_dYdEIf1g.roa (raw, json)
Hash identifier:          PhCo67AThImAAICRbSKmw/MtJm7M6upTm1QEQIqyWmM=
Subject key identifier:   D1:90:A9:95:4A:1C:2B:4B:7B:6C:39:FE:69:5F:DD:61:D1:08:7F:58
Certificate issuer:       /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial:       019B78A259BF10EAB42976AF9F8D21776972
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/0ZCplUocK0t7bDn-aV_dYdEIf1g.roa
Signing time:             Thu 01 Jan 2026 08:17:44 +0000
ROA not before:           Thu 01 Jan 2026 08:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201917
IP address blocks:        194.20.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:59:bf:10:ea:b4:29:76:af:9f:8d:21:77:69:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
        Validity
            Not Before: Jan  1 08:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d190a9954a1c2b4b7b6c39fe695fdd61d1087f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:d4:cf:f4:28:bc:0b:14:c3:67:25:e4:9e:
                    e5:9e:8e:46:30:f0:bf:1c:0a:02:75:0a:38:18:ac:
                    99:27:6c:b7:f2:d4:88:f3:85:27:d1:5f:84:69:2f:
                    0f:36:e3:3d:34:4f:1c:98:1f:62:17:24:4b:6d:39:
                    05:cf:37:ef:d1:a8:60:b8:22:e4:5c:47:5f:47:03:
                    41:99:c2:1e:0b:3c:95:f3:96:da:2d:1c:ed:79:33:
                    75:16:79:e8:c3:80:82:9a:e1:80:f3:57:ff:48:c3:
                    56:bc:df:a7:08:3c:c5:ae:96:41:65:67:c8:f1:3f:
                    b6:89:26:47:3d:c4:12:b0:c8:78:5c:73:50:72:fd:
                    e3:07:56:92:43:e8:07:43:4b:0f:42:fa:5c:53:66:
                    8a:10:c8:2c:69:80:6b:73:c4:3a:67:07:40:7b:3a:
                    54:a7:48:89:0f:48:b6:9d:6d:a9:d7:58:97:60:3a:
                    2b:2f:f5:ef:e2:0e:6e:f0:0b:3b:2b:a3:3c:1e:84:
                    c9:29:f8:ce:6c:14:b0:9a:b5:fd:87:d2:63:43:73:
                    ca:63:39:31:f6:9b:19:a1:c2:9e:43:10:f7:eb:cb:
                    33:7d:ac:d8:57:95:a7:9e:b9:7b:cf:2e:ad:2b:10:
                    d3:f7:49:5a:e8:4a:04:bb:90:df:cf:b0:33:c0:b9:
                    bb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:A9:95:4A:1C:2B:4B:7B:6C:39:FE:69:5F:DD:61:D1:08:7F:58
            X509v3 Authority Key Identifier:
                keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/0ZCplUocK0t7bDn-aV_dYdEIf1g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.20.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:a3:69:c2:f1:1e:6f:1e:bd:7f:f3:ed:b7:b2:a0:73:ec:4f:
         b7:fa:1e:24:40:e3:0e:78:0c:9d:d2:68:00:62:40:37:4c:54:
         41:a0:90:ab:1c:32:1a:7a:ad:20:73:75:9f:8a:01:b1:31:9d:
         64:d5:88:e8:a9:56:c6:d4:4c:84:fc:59:1a:8e:02:90:43:f0:
         64:ab:a9:c5:ef:3a:a9:82:56:a1:27:0c:c6:f5:55:36:d9:16:
         90:ef:47:20:5b:23:59:e6:2b:4d:c3:ae:7b:97:40:78:98:51:
         69:15:a0:b3:ed:c6:47:71:3c:ac:5f:0f:9a:6f:35:52:3b:ec:
         22:fb:c7:62:9c:84:ac:a2:81:3c:0e:8e:03:46:ca:53:a2:25:
         64:fd:20:f8:1c:c0:31:e2:5e:87:97:1e:a1:be:24:90:c5:0b:
         36:72:83:61:ec:a9:75:60:26:df:e7:e0:68:a5:53:90:64:5d:
         4c:e8:b7:37:29:b3:ce:4a:74:b4:1d:86:41:b5:b9:77:57:87:
         5c:af:30:7a:16:70:78:3e:cd:4e:29:97:19:d7:eb:9f:7a:32:
         a5:af:20:de:46:c4:fd:82:cd:66:8c:ca:ab:41:f8:be:07:ad:
         30:f6:c4:8d:5c:da:57:e3:8d:7b:64:b4:c2:38:9f:c0:fc:6d:
         62:d5:44:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4olm/EOq0KXavn40hd2lyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi
MGNhMDkwHhcNMjYwMTAxMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTkwYTk5NTRhMWMyYjRiN2I2YzM5ZmU2OTVmZGQ2MWQxMDg3ZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFXUz/QovAsUw2cl5J7lno5GMPC/
HAoCdQo4GKyZJ2y38tSI84Un0V+EaS8PNuM9NE8cmB9iFyRLbTkFzzfv0ahguCLk
XEdfRwNBmcIeCzyV85baLRzteTN1Fnnow4CCmuGA81f/SMNWvN+nCDzFrpZBZWfI
8T+2iSZHPcQSsMh4XHNQcv3jB1aSQ+gHQ0sPQvpcU2aKEMgsaYBrc8Q6ZwdAezpU
p0iJD0i2nW2p11iXYDorL/Xv4g5u8As7K6M8HoTJKfjObBSwmrX9h9JjQ3PKYzkx
9psZocKeQxD368szfazYV5Wnnrl7zy6tKxDT90la6EoEu5Dfz7AzwLm7OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNGQqZVKHCtLe2w5/mlf3WHRCH9YMB8GA1UdIwQY
MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvMFpDcGxVb2NLMHQ3YkRuLWFWX2RZZEVJZjFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwhRAMA0G
CSqGSIb3DQEBCwUAA4IBAQDOo2nC8R5vHr1/8+23sqBz7E+3+h4kQOMOeAyd0mgA
YkA3TFRBoJCrHDIaeq0gc3WfigGxMZ1k1YjoqVbG1EyE/FkajgKQQ/Bkq6nF7zqp
glahJwzG9VU22RaQ70cgWyNZ5itNw657l0B4mFFpFaCz7cZHcTysXw+abzVSO+wi
+8dinISsooE8Do4DRspToiVk/SD4HMAx4l6Hlx6hviSQxQs2coNh7Kl1YCbf5+Bo
pVOQZF1M6Lc3KbPOSnS0HYZBtbl3V4dcrzB6FnB4Ps1OKZcZ1+ufejKlryDeRsT9
gs1mjMqrQfi+B60w9sSNXNpX4417ZLTCOJ/A/G1i1URE
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:07 2026 by rpki-client