This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/_au0wimjEPCkLk0Si7B4RsrMdt8.roa
File:                     _au0wimjEPCkLk0Si7B4RsrMdt8.roa (raw, json)
Hash identifier:          /4fqj2Kq6klXf2682gRF7q2tz9MvyCSK5DmjIGN2uPc=
Subject key identifier:   FD:AB:B4:C2:29:A3:10:F0:A4:2E:4D:12:8B:B0:78:46:CA:CC:76:DF
Certificate issuer:       /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial:       019B7B36A333B89F85734450656A1E5E057F
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/_au0wimjEPCkLk0Si7B4RsrMdt8.roa
Signing time:             Thu 01 Jan 2026 20:18:56 +0000
ROA not before:           Thu 01 Jan 2026 20:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6505
IP address blocks:        57.74.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:a3:33:b8:9f:85:73:44:50:65:6a:1e:5e:05:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
        Validity
            Not Before: Jan  1 20:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fdabb4c229a310f0a42e4d128bb07846cacc76df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:c1:86:4b:05:84:54:c1:ec:03:7e:f8:18:
                    b1:f9:0d:d8:b5:0f:50:a3:5a:95:51:74:79:cc:9c:
                    41:53:d3:58:7b:fe:d3:dc:d8:e2:bf:be:68:be:c3:
                    da:70:08:7f:65:c2:01:19:34:0c:c3:2b:74:dc:9b:
                    97:b8:28:65:50:b9:21:dc:a1:c0:93:de:9c:7e:47:
                    cb:b6:ed:32:04:40:dd:c0:25:0d:0e:7f:cf:e8:c3:
                    5b:d0:c0:95:92:fb:c4:4c:cc:ea:23:ef:25:1a:27:
                    65:2a:0e:4b:90:d0:e0:5a:12:14:5c:47:fd:3f:64:
                    4b:fa:f7:cb:a1:c9:63:2d:c5:10:76:e3:b6:15:5b:
                    e5:11:7e:42:ed:8f:a4:1f:d1:6f:6e:81:0e:db:5b:
                    33:78:8b:ee:0d:f5:ed:24:6e:a2:8b:a0:99:85:14:
                    43:3a:36:19:8a:57:ec:91:d3:43:84:3d:4d:ac:70:
                    ce:12:2e:26:32:6b:1c:6c:2a:aa:73:dd:d0:cf:e4:
                    51:e1:53:26:ca:8d:5e:52:62:e9:cc:68:a1:f4:8b:
                    48:db:80:a9:e9:79:19:92:6f:94:69:8a:5f:6a:6c:
                    56:df:80:7a:91:ec:f7:76:62:43:c5:a9:02:e2:93:
                    8c:46:ff:c7:1d:03:12:7b:20:90:a6:16:6f:f6:a0:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AB:B4:C2:29:A3:10:F0:A4:2E:4D:12:8B:B0:78:46:CA:CC:76:DF
            X509v3 Authority Key Identifier:
                keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/_au0wimjEPCkLk0Si7B4RsrMdt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:2c:77:9f:0c:75:97:cd:1c:15:54:62:6d:b6:0b:3c:c2:02:
         e9:de:90:d8:90:30:73:30:61:e4:4c:55:6b:c5:8d:83:38:7c:
         5e:b5:52:05:00:c7:c7:ce:98:ed:1f:d4:b2:b2:bb:09:27:36:
         72:d2:a2:96:b3:02:42:06:b8:72:27:ea:3e:ac:1e:c6:9f:cc:
         e8:4b:3e:4b:c6:55:a8:bb:46:35:09:f3:09:da:dc:39:f4:7f:
         a7:b6:ca:51:84:aa:e8:c7:82:8c:08:8d:b6:c9:07:c4:d6:6b:
         e7:11:d7:aa:6e:c8:68:e8:48:5d:3a:61:a5:79:66:d9:82:ea:
         66:9b:13:7a:91:3e:dd:4d:dd:bd:0e:a7:1f:ad:60:42:b8:4e:
         77:2e:41:5b:7c:f4:8c:4a:e8:68:9f:a8:80:20:8d:e3:24:2d:
         34:7d:17:b8:7e:5e:ac:1b:43:d1:47:c0:75:2c:40:4f:f5:c1:
         3c:10:53:93:70:32:7a:4c:49:8f:38:6d:57:93:70:af:6b:7c:
         df:f4:4a:58:1e:93:f8:9c:37:1b:9f:fc:8d:52:9a:3f:38:6e:
         71:47:97:e4:56:bc:39:b9:1f:10:53:9c:fc:cf:08:1a:fb:97:
         28:6d:1b:57:bb:9c:cb:ec:52:08:f1:dd:38:d6:ae:1e:42:8a:
         46:53:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:42 2026 by rpki-client