This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/z-6izIL2te2yW3BZT-W-LC6HIiI.roa
File:                     z-6izIL2te2yW3BZT-W-LC6HIiI.roa (raw, json)
Hash identifier:          g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=
Subject key identifier:   CF:EE:A2:CC:82:F6:B5:ED:B2:5B:70:59:4F:E5:BE:2C:2E:87:22:22
Certificate issuer:       /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial:       019B7F8414C90BF63ADB9AE187E64DE88712
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/z-6izIL2te2yW3BZT-W-LC6HIiI.roa
Signing time:             Fri 02 Jan 2026 16:22:01 +0000
ROA not before:           Fri 02 Jan 2026 16:22:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50371
IP address blocks:        37.32.74.0/24 maxlen: 24
                          185.129.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:14:c9:0b:f6:3a:db:9a:e1:87:e6:4d:e8:87:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
        Validity
            Not Before: Jan  2 16:22:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cfeea2cc82f6b5edb25b70594fe5be2c2e872222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:4b:82:8f:46:51:95:94:41:78:95:59:ed:
                    f8:18:a9:fe:55:ee:df:42:40:00:7e:9f:1d:90:d1:
                    f6:ef:00:7e:df:41:ec:54:49:9a:2a:5e:37:b0:7a:
                    79:ce:e8:11:1c:11:fe:1a:3f:5e:9f:3d:b3:3a:ce:
                    3b:72:a0:5b:f6:25:eb:2e:b1:73:f2:6e:63:1d:f0:
                    dd:90:58:2c:8a:8b:cd:28:57:0b:bf:2a:72:84:11:
                    b7:1f:4e:dd:03:8e:31:66:c6:24:67:eb:92:04:9d:
                    c1:ed:21:cf:9d:be:73:fd:46:dd:c6:e9:1c:b0:c4:
                    ab:ce:43:be:d0:85:91:78:9d:36:0d:dc:1e:18:d8:
                    4d:10:f2:e9:84:99:62:e0:82:ce:00:de:c4:5b:e2:
                    e0:87:c1:36:ca:2c:e8:7d:4c:bf:df:a4:86:40:d5:
                    f6:90:86:85:7b:52:4c:3c:39:3c:e4:6c:f1:98:be:
                    9d:39:9a:2e:89:f7:29:2b:90:5c:36:7f:a1:13:50:
                    3e:69:ce:9f:e0:53:a1:59:40:4a:b3:a9:51:4e:cb:
                    eb:95:c2:6b:2b:4c:9f:fe:d8:0f:a7:7a:6c:c5:bc:
                    9e:29:f7:d3:b3:8c:42:5f:7c:4d:f3:a3:04:f4:9c:
                    84:dc:32:66:f9:e4:dd:2a:5f:ea:18:9c:9c:b9:4b:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EE:A2:CC:82:F6:B5:ED:B2:5B:70:59:4F:E5:BE:2C:2E:87:22:22
            X509v3 Authority Key Identifier:
                keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/z-6izIL2te2yW3BZT-W-LC6HIiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.32.74.0/24
                  185.129.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:32:58:ab:27:99:c5:d4:06:9c:0d:4d:96:ca:84:ad:79:85:
         63:8d:e5:0c:1e:57:35:b7:69:9d:8c:22:63:0a:0e:b0:79:e9:
         f5:f0:c3:94:2c:22:cb:82:9f:7e:d8:b8:58:32:95:de:46:2f:
         5a:21:61:ab:03:53:f9:9a:6d:ee:92:c8:01:7e:0f:29:0d:73:
         5b:0a:aa:e0:f8:83:b0:07:1c:d2:ee:0a:b4:b6:c9:e4:01:0d:
         ec:d5:b4:b6:c3:3e:30:5d:ed:7f:b9:b5:37:57:7b:d5:83:7f:
         3d:0e:cd:40:6a:0b:c2:1d:5b:3e:79:0b:3f:44:29:8a:ab:b0:
         4f:95:ab:3f:aa:3a:3d:df:4b:ab:e1:e1:fa:ae:42:18:4c:09:
         f0:42:9e:22:df:05:d1:01:d0:c5:7c:7e:4e:27:37:a2:db:86:
         c2:b6:96:4c:cb:53:55:58:fa:0b:38:d8:41:ac:42:0b:bf:4a:
         fe:37:67:94:89:8f:c4:4d:fe:2d:8f:26:ce:d7:43:f3:be:a4:
         54:c0:49:5b:df:0c:70:24:63:bb:fa:e1:35:09:56:95:95:42:
         39:d8:79:2e:ae:0c:91:60:ad:f1:bc:00:89:a4:01:a7:df:9d:
         14:4f:f0:24:52:9e:1b:5e:1a:73:0a:91:00:85:ca:73:bd:7b:
         3f:90:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:25:18 2026 by rpki-client