This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aZkA2iniPI362xsycukaud-4CB4.roa
File:                     aZkA2iniPI362xsycukaud-4CB4.roa (raw, json)
Hash identifier:          HarwIL8b+NTV12U+LGjjz5UWE6eIvYd6cGMm35jQOBk=
Subject key identifier:   69:99:00:DA:29:E2:3C:8D:FA:DB:1B:32:72:E9:1A:B9:DF:B8:08:1E
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       019B77C766F9BF9D685E04554C77749BC849
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aZkA2iniPI362xsycukaud-4CB4.roa
Signing time:             Thu 01 Jan 2026 04:18:35 +0000
ROA not before:           Thu 01 Jan 2026 04:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33908
IP address blocks:        82.140.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:66:f9:bf:9d:68:5e:04:55:4c:77:74:9b:c8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan  1 04:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=699900da29e23c8dfadb1b3272e91ab9dfb8081e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:39:f1:c6:6f:f7:e5:e9:51:a6:8c:11:1b:
                    33:31:9d:7d:be:1c:4b:4a:64:3e:f8:5c:15:50:22:
                    19:5c:3b:7d:c9:fc:53:61:da:c2:57:94:b4:0a:0f:
                    22:97:3b:43:7e:aa:53:40:55:af:cf:4f:bd:23:81:
                    df:9c:dd:2d:a3:e3:63:e8:fc:dc:5b:46:b0:e9:a1:
                    ab:5d:6c:9b:02:09:b4:85:73:08:7a:95:f7:4d:cd:
                    e9:24:74:c0:21:50:9d:24:bd:5c:26:55:c4:95:93:
                    e9:19:32:f1:1d:fa:9d:cc:8a:2c:02:29:eb:ab:6d:
                    92:85:93:e8:4f:d5:5d:b7:ef:bb:18:ec:5d:e5:15:
                    ad:79:2c:df:96:fc:c6:a6:7b:cb:57:df:78:58:55:
                    21:d6:1e:a6:e0:af:08:17:f4:75:b3:f8:ea:d1:26:
                    29:09:cd:7e:10:e5:d5:e7:72:95:9f:59:92:17:05:
                    7a:3a:97:d3:2c:19:d4:62:1c:95:c4:cd:87:ee:f9:
                    56:69:94:79:e8:25:61:62:f0:6e:c4:90:74:73:fd:
                    b3:5a:54:e6:ca:03:23:7b:19:e9:35:45:18:d4:3a:
                    2e:d3:f3:ba:b4:eb:83:2e:fd:23:4b:e8:d5:dc:82:
                    f7:e5:e3:c2:29:e0:a3:45:4d:b1:9f:68:13:97:9c:
                    79:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:99:00:DA:29:E2:3C:8D:FA:DB:1B:32:72:E9:1A:B9:DF:B8:08:1E
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aZkA2iniPI362xsycukaud-4CB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:54:16:48:e7:34:4b:81:24:44:38:48:93:71:b3:62:1b:fc:
         f4:6f:be:53:25:db:62:55:e5:a2:d8:1e:93:0e:bd:4b:9b:7c:
         11:ee:1c:c2:7d:2c:74:c7:25:86:92:f5:fd:c6:ee:db:85:58:
         20:c9:8f:4b:23:37:9f:a8:20:d2:5d:bf:91:0e:81:4f:1f:73:
         7c:9f:8f:80:37:eb:73:c2:a3:15:37:e9:d3:9e:8f:16:a6:ab:
         0b:31:24:f8:cf:76:a6:68:67:c4:e7:21:53:cb:ec:b4:c5:21:
         d2:9f:03:b2:6b:0e:f4:d9:71:68:02:a2:93:1a:6c:9f:ce:fb:
         a8:9b:16:54:b7:25:0d:98:f4:4d:a2:5f:be:f1:07:a4:32:aa:
         a5:28:58:f1:f4:66:34:c3:c5:9d:cb:10:fe:26:5e:0b:3f:9b:
         5d:ae:4c:0c:7e:c7:62:f6:f2:a0:28:64:03:36:bb:73:93:3f:
         26:67:f5:64:21:00:c9:ba:4d:6f:30:d7:e1:46:69:dd:c4:c5:
         7b:32:bf:14:48:5c:e7:57:5d:1a:3b:13:02:a1:c9:68:f1:5a:
         98:de:d1:56:11:36:07:5d:50:25:ae:eb:88:c7:d4:20:7b:d7:
         12:e7:ee:bf:92:2f:73:71:2d:d5:07:48:56:ce:f8:ab:8d:d8:
         01:3f:cc:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x2b5v51oXgRVTHd0m8hJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTk5MDBkYTI5ZTIzYzhkZmFkYjFiMzI3MmU5MWFiOWRmYjgwODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte458cZv9+XpUaaMERszMZ19vhxL
SmQ++FwVUCIZXDt9yfxTYdrCV5S0Cg8ilztDfqpTQFWvz0+9I4HfnN0to+Nj6Pzc
W0aw6aGrXWybAgm0hXMIepX3Tc3pJHTAIVCdJL1cJlXElZPpGTLxHfqdzIosAinr
q22ShZPoT9Vdt++7GOxd5RWteSzflvzGpnvLV994WFUh1h6m4K8IF/R1s/jq0SYp
Cc1+EOXV53KVn1mSFwV6OpfTLBnUYhyVxM2H7vlWaZR56CVhYvBuxJB0c/2zWlTm
ygMjexnpNUUY1Dou0/O6tOuDLv0jS+jV3IL35ePCKeCjRU2xn2gTl5x5kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGmZANop4jyN+tsbMnLpGrnfuAgeMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvYVprQTJpbmlQSTM2MnhzeWN1a2F1ZC00Q0I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUoxOMA0G
CSqGSIb3DQEBCwUAA4IBAQAiVBZI5zRLgSREOEiTcbNiG/z0b75TJdtiVeWi2B6T
Dr1Lm3wR7hzCfSx0xyWGkvX9xu7bhVggyY9LIzefqCDSXb+RDoFPH3N8n4+AN+tz
wqMVN+nTno8WpqsLMST4z3amaGfE5yFTy+y0xSHSnwOyaw702XFoAqKTGmyfzvuo
mxZUtyUNmPRNol++8QekMqqlKFjx9GY0w8WdyxD+Jl4LP5tdrkwMfsdi9vKgKGQD
Nrtzkz8mZ/VkIQDJuk1vMNfhRmndxMV7Mr8USFznV10aOxMCoclo8VqY3tFWETYH
XVAlruuIx9Qge9cS5+6/ki9zcS3VB0hWzvirjdgBP8zz
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:06 2026 by rpki-client