This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/sZzlwoV7VUnP0rnAO0okZeo6Iak.roa
File:                     sZzlwoV7VUnP0rnAO0okZeo6Iak.roa (raw, json)
Hash identifier:          WXgl70GjiFz6sqLRQIYx3xNCuabeBF1y/DzdVPV9mJg=
Subject key identifier:   B1:9C:E5:C2:85:7B:55:49:CF:D2:B9:C0:3B:4A:24:65:EA:3A:21:A9
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       019B79EC0BD1E471193DD0E2B7F51599EEB6
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/sZzlwoV7VUnP0rnAO0okZeo6Iak.roa
Signing time:             Thu 01 Jan 2026 14:17:51 +0000
ROA not before:           Thu 01 Jan 2026 14:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31331
IP address blocks:        83.150.128.0/19 maxlen: 19
                          83.150.160.0/20 maxlen: 20
                          83.150.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:0b:d1:e4:71:19:3d:d0:e2:b7:f5:15:99:ee:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: Jan  1 14:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b19ce5c2857b5549cfd2b9c03b4a2465ea3a21a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:98:8e:ee:9c:86:e8:d4:3f:cd:dd:23:66:1f:
                    c2:56:9b:2b:80:39:3b:5b:84:19:59:0d:44:32:45:
                    f5:02:42:71:90:04:c3:3a:4e:cf:ea:99:33:69:5e:
                    3d:72:97:f1:f2:59:06:0d:53:f9:22:42:90:fe:74:
                    b3:31:64:cd:38:4f:e7:17:d5:a4:12:4d:4a:57:60:
                    11:1e:76:6d:b5:14:63:fc:95:d1:eb:b9:e3:e2:48:
                    16:fc:8d:bc:98:4e:09:b4:b3:32:d6:03:2a:30:65:
                    45:f5:70:92:2a:9d:b6:a9:07:ab:50:3d:62:35:b2:
                    d4:be:a3:af:d4:c3:3f:50:98:7b:27:f2:22:f9:83:
                    9d:7a:d6:c1:fb:f4:5d:07:06:48:43:e3:0d:27:bc:
                    66:c4:ab:e0:83:63:7d:fb:6c:ef:00:58:50:30:39:
                    8a:09:d6:bf:79:a4:b7:cb:a9:1e:da:1c:ac:0e:5a:
                    98:9a:05:20:a5:e9:d3:cd:00:9f:d8:ea:2b:7b:b3:
                    23:52:13:4a:f5:34:c6:f4:e4:7d:e0:9a:75:dc:01:
                    67:f5:c9:96:cf:7f:b5:02:33:b3:61:68:19:53:ca:
                    73:b9:ce:e7:b8:3d:a6:33:85:00:dd:af:ce:81:e4:
                    5b:82:26:5d:26:f0:9f:73:02:40:cf:a6:6b:4d:23:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:E5:C2:85:7B:55:49:CF:D2:B9:C0:3B:4A:24:65:EA:3A:21:A9
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/sZzlwoV7VUnP0rnAO0okZeo6Iak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.150.128.0-83.150.175.255
                  83.150.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:6a:77:36:b2:21:34:2a:d2:c3:96:93:5b:42:4b:c9:96:a9:
         13:b1:be:ac:cc:57:d8:e9:a5:f6:88:82:4e:4d:b2:2d:c3:6e:
         4d:b3:4f:19:67:af:09:23:9f:a4:2a:2f:a5:5d:b2:f5:72:60:
         ac:d3:d5:2a:50:7e:c8:7e:4e:2c:0b:23:87:1b:a2:0d:b8:b0:
         5c:14:c8:62:b4:b9:90:36:7a:1e:30:9d:cb:76:90:ec:5b:5d:
         d3:23:22:81:d1:7f:9f:53:4a:09:67:c4:8b:3c:ee:fc:33:ea:
         86:11:81:a5:07:76:7e:a9:a1:8d:7e:ad:4e:55:e2:ed:3b:1a:
         7a:e9:19:e8:7d:3e:db:4e:d6:b6:64:f0:ad:3f:70:8e:7f:14:
         87:69:cc:3d:fa:6d:45:b5:0e:a2:e8:b5:6a:0d:ae:2c:24:0f:
         a7:d5:9e:d6:78:af:56:8b:ad:3a:d3:5e:61:75:0b:a7:7c:57:
         d6:82:38:e9:ab:d0:66:fb:1f:36:4a:6b:50:40:c5:b7:3a:85:
         76:c6:f3:52:95:78:c6:34:fd:c0:fc:d0:be:95:1c:a8:27:d9:
         20:a7:d8:65:5a:82:19:e3:97:cd:86:88:40:d6:38:dc:43:fc:
         3f:f4:62:2b:25:5e:e3:9f:1b:90:e8:21:f9:8f:0d:b5:78:c7:
         0a:1d:0d:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:55:33 2026 by rpki-client