This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/OG-ZWZfHCWaD7Z-Puldasen5Jog.roa
File:                     OG-ZWZfHCWaD7Z-Puldasen5Jog.roa (raw, json)
Hash identifier:          thCFPWKbwyWEpovqQZHv9ObyQQr7Q4FawLDulYyxWKI=
Subject key identifier:   38:6F:99:59:97:C7:09:66:83:ED:9F:8F:BA:57:5A:B1:E9:F9:26:88
Certificate issuer:       /CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Certificate serial:       019B78A20F8B9528BE1002936307145FBB55
Authority key identifier: 12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/OG-ZWZfHCWaD7Z-Puldasen5Jog.roa
Signing time:             Thu 01 Jan 2026 08:17:25 +0000
ROA not before:           Thu 01 Jan 2026 08:17:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59943
IP address blocks:        193.200.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:0f:8b:95:28:be:10:02:93:63:07:14:5f:bb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
        Validity
            Not Before: Jan  1 08:17:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=386f995997c7096683ed9f8fba575ab1e9f92688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:1b:03:30:cc:ac:39:72:32:1a:44:91:93:
                    41:6d:ff:fd:fe:c3:02:a5:1b:81:9c:9d:0b:d0:82:
                    b8:23:d2:fc:75:17:66:e7:a1:c5:d4:df:30:28:77:
                    1f:cd:34:1a:b6:1d:96:4a:30:bd:af:a0:26:aa:b5:
                    2b:f3:c7:07:6e:c1:9e:9e:67:85:d8:a0:4f:f6:48:
                    e9:11:16:ce:00:41:d8:1e:53:50:28:89:1a:9b:00:
                    e2:07:4f:68:3b:6a:86:b2:cf:81:bf:28:f8:90:8c:
                    c8:02:67:35:b9:99:c7:2b:43:59:56:da:89:f1:10:
                    5b:57:12:a8:ae:92:20:89:dc:d3:1f:06:3a:bb:87:
                    e8:5d:eb:c9:87:c4:14:03:1b:f3:6e:4b:13:6d:4f:
                    25:70:16:d0:6f:2c:fb:8d:0d:47:c1:66:17:31:be:
                    a3:7c:65:0c:eb:4d:81:eb:e1:14:f9:e2:26:eb:83:
                    44:99:b6:ef:eb:91:ef:6e:d5:48:72:82:8f:0c:16:
                    68:e3:5c:80:6c:27:98:df:a1:ac:b0:74:37:d6:38:
                    40:97:24:a2:ca:39:c0:00:9e:02:28:17:9a:eb:c7:
                    6b:2f:ef:ca:9f:ec:19:42:41:5a:c4:e8:a4:ef:b8:
                    34:2c:df:62:aa:29:36:c6:75:17:bd:fa:07:74:b4:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6F:99:59:97:C7:09:66:83:ED:9F:8F:BA:57:5A:B1:E9:F9:26:88
            X509v3 Authority Key Identifier:
                keyid:12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/OG-ZWZfHCWaD7Z-Puldasen5Jog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:98:5e:8d:5f:eb:a5:d1:c3:70:3c:0c:28:37:9d:de:09:1d:
         f3:8d:75:be:95:91:ee:c3:28:5b:26:d1:78:f8:d3:57:80:cc:
         ae:b7:68:d8:77:80:b2:e5:61:80:7b:da:e5:8a:9b:b5:68:cd:
         da:d8:fc:16:c4:f9:1a:60:64:d2:84:d0:f4:6a:60:d3:b2:fd:
         bd:21:74:71:c1:6a:76:23:64:58:2f:c5:73:1e:60:a0:b3:ca:
         b4:be:74:03:bb:59:3a:a9:0d:cf:88:7b:e4:e1:c1:9f:19:40:
         ff:ef:60:c3:cb:64:b0:b4:18:04:48:22:e7:9e:9c:cf:f3:8f:
         66:9a:c9:2b:15:93:13:a6:8d:78:fd:55:69:7a:ca:41:a6:3f:
         19:e7:ab:c1:75:a0:93:a3:f3:b4:26:bc:9d:18:50:b6:2c:5a:
         70:b1:d9:d2:2b:ef:d7:1d:82:43:51:e9:45:18:ec:18:81:bd:
         50:5d:e2:68:5a:2a:ab:64:27:d0:3b:7b:47:66:6e:91:c6:c1:
         db:89:79:2b:19:30:6a:e9:30:c7:c5:97:59:15:14:dc:6a:bd:
         71:3b:a6:45:b4:f4:00:c7:f8:84:88:7a:99:9f:bf:1c:73:16:
         68:fe:82:b0:dc:3d:86:22:51:81:63:3c:b5:d8:56:a0:e3:63:
         27:8e:6e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:17:57 2026 by rpki-client