This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/zWv6lPCafLJnQppl_Q2Krp9R-ts.roa
File:                     zWv6lPCafLJnQppl_Q2Krp9R-ts.roa (raw, json)
Hash identifier:          PnRp68chs8F3bed1Cp1lvtVxJK9TEVJMwXnA7+PU/D0=
Subject key identifier:   CD:6B:FA:94:F0:9A:7C:B2:67:42:9A:65:FD:0D:8A:AE:9F:51:FA:DB
Certificate issuer:       /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial:       019B7B35B86FC7CECAABB125FAED8CEA90E2
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/zWv6lPCafLJnQppl_Q2Krp9R-ts.roa
Signing time:             Thu 01 Jan 2026 20:17:56 +0000
ROA not before:           Thu 01 Jan 2026 20:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207044
IP address blocks:        185.138.112.0/22 maxlen: 22
                          185.138.112.0/24 maxlen: 24
                          185.138.113.0/24 maxlen: 24
                          185.138.114.0/24 maxlen: 24
                          185.138.115.0/24 maxlen: 24
                          185.241.132.0/22 maxlen: 22
                          2a0d:4707::/38 maxlen: 38
                          2a0d:4707:400::/38 maxlen: 38
                          2a0d:4707:800::/38 maxlen: 38
                          2a0d:4707:c00::/38 maxlen: 38
                          2a0d:4707:1000::/38 maxlen: 38
                          2a0d:4707:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:b8:6f:c7:ce:ca:ab:b1:25:fa:ed:8c:ea:90:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
        Validity
            Not Before: Jan  1 20:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cd6bfa94f09a7cb267429a65fd0d8aae9f51fadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:51:90:d5:d2:f6:23:cf:6e:de:6d:89:6b:
                    eb:75:a1:79:88:64:52:aa:9e:ca:3f:88:34:f0:5c:
                    58:3b:4d:d7:3d:90:fd:70:fe:18:8d:de:e7:d5:45:
                    02:61:18:c8:cb:a3:e8:09:12:fe:d7:35:6e:7d:e3:
                    3e:e6:ef:25:2e:6e:7a:8b:e5:22:3c:25:2f:1a:fe:
                    55:3b:d7:69:a3:23:78:f8:d0:8d:ae:f4:58:5f:aa:
                    7a:8e:01:22:17:cf:a4:82:26:ce:f2:74:cc:46:f6:
                    32:ce:6c:91:7b:3c:cf:f4:76:46:0b:ac:61:f1:c0:
                    5d:a9:cb:b3:59:19:81:d5:54:6c:67:3f:a1:e0:41:
                    af:bc:71:24:02:e7:62:e7:cd:9b:1d:f9:f9:d8:55:
                    93:34:be:a9:71:91:c7:b2:00:63:21:60:d6:cd:8e:
                    ed:d6:8b:50:61:f8:70:5b:07:12:50:e9:2f:64:ea:
                    75:79:88:95:db:01:5f:77:fc:b4:05:11:9c:ee:26:
                    66:fd:38:0b:6a:7b:ba:c0:f8:44:6d:52:e4:14:a2:
                    da:de:a2:d1:42:7f:6f:8c:28:e4:75:ef:c6:a8:46:
                    fb:43:58:e5:24:eb:d8:09:c4:8e:8a:a1:99:31:31:
                    69:16:69:4f:75:5b:5a:02:95:d3:a9:e4:c0:19:30:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6B:FA:94:F0:9A:7C:B2:67:42:9A:65:FD:0D:8A:AE:9F:51:FA:DB
            X509v3 Authority Key Identifier:
                keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/zWv6lPCafLJnQppl_Q2Krp9R-ts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.112.0/22
                  185.241.132.0/22
                IPv6:
                  2a0d:4707::-2a0d:4707:17ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:45:51:4f:f4:73:50:52:75:39:ed:80:3d:3c:87:d8:bd:
         a3:14:60:fc:0e:88:82:23:a8:67:2e:1c:0a:12:d8:2b:f2:5f:
         92:55:19:d6:2f:70:58:01:7c:91:34:9f:f5:f1:88:74:0a:7a:
         f5:13:c8:77:ea:4a:93:78:19:58:7a:bc:3a:1e:81:37:7c:06:
         20:eb:45:cf:21:69:98:ad:29:52:41:2a:c2:fd:73:e1:06:5b:
         6e:ae:a6:f4:d8:d2:5f:e2:f2:e8:18:4d:e5:e1:71:35:b1:62:
         ef:45:12:6d:a4:c8:ae:b5:b4:d5:d0:b4:27:40:1b:4b:44:57:
         be:75:77:16:56:50:3b:d5:e7:c0:6d:79:1d:c3:ae:6b:41:81:
         0d:7b:2f:fe:93:6d:66:a9:a2:c6:a3:14:b2:b0:09:9f:28:6d:
         41:e1:62:f6:de:52:45:c9:57:57:98:45:c8:b1:80:36:29:36:
         68:ab:94:a1:94:1e:34:47:35:db:6c:33:29:d8:c3:91:5c:3a:
         d3:d3:be:d3:e0:17:c5:61:98:ec:28:4c:41:51:29:44:2f:be:
         71:e2:0d:50:f6:a3:2b:85:d9:14:76:71:96:9b:ad:12:6c:25:
         70:cb:df:18:00:45:20:81:2a:f7:be:b3:dc:4f:64:c3:23:27:
         20:c6:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:09:30 2026 by rpki-client