This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/zseUJgVeCwjihWSVg8qrP6U6zOY.roa
File:                     zseUJgVeCwjihWSVg8qrP6U6zOY.roa (raw, json)
Hash identifier:          3GL/igz6eaoQ/qNe14Emh1CvM3j7cI74/xHiIs5bkLc=
Subject key identifier:   CE:C7:94:26:05:5E:0B:08:E2:85:64:95:83:CA:AB:3F:A5:3A:CC:E6
Certificate issuer:       /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial:       019B78354A0DFBA38380A97102247A23C2BA
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/zseUJgVeCwjihWSVg8qrP6U6zOY.roa
Signing time:             Thu 01 Jan 2026 06:18:36 +0000
ROA not before:           Thu 01 Jan 2026 06:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21183
IP address blocks:        80.91.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:4a:0d:fb:a3:83:80:a9:71:02:24:7a:23:c2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
        Validity
            Not Before: Jan  1 06:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cec79426055e0b08e285649583caab3fa53acce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:ba:13:78:0e:f7:4b:bc:62:da:62:cc:c2:
                    4b:2b:b3:22:e4:42:bc:5b:bd:e7:dc:a2:e8:e9:b0:
                    e5:f8:5d:12:3c:ce:86:ed:af:a0:76:f0:e1:34:90:
                    ad:84:db:22:9e:ea:9c:fa:da:9f:f8:8a:58:6a:d4:
                    14:44:a9:e7:01:bb:37:a0:11:f1:aa:d8:80:35:a8:
                    1b:d7:15:c0:d5:57:d5:fa:f6:02:b8:56:c6:d8:ec:
                    d2:6c:1d:8c:cb:3d:b7:68:19:7a:7e:0b:e5:cb:39:
                    25:aa:ec:79:4d:13:32:64:79:ed:f0:48:b2:9f:12:
                    a4:50:d0:c5:e0:6e:84:99:0b:92:74:de:e7:ba:35:
                    5c:26:e3:93:55:1c:34:2f:0f:d1:8a:0d:ae:b5:7b:
                    63:60:08:c3:48:a7:27:d7:17:f0:20:66:f2:34:2d:
                    97:ff:95:d2:0a:48:3a:07:d3:80:0e:37:92:96:18:
                    82:d4:fe:33:c9:6a:1d:bc:e9:f2:d2:98:1f:8e:eb:
                    40:9a:a1:82:16:e0:c3:9f:3d:49:19:9f:4f:54:6f:
                    0e:49:96:15:5f:38:a7:d5:7d:b0:47:c1:40:9f:32:
                    a6:08:18:dc:98:9e:20:b1:c0:73:33:5a:f9:2a:5a:
                    2d:42:b7:89:d3:e3:4f:55:63:a9:38:3a:a3:dd:41:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C7:94:26:05:5E:0B:08:E2:85:64:95:83:CA:AB:3F:A5:3A:CC:E6
            X509v3 Authority Key Identifier:
                keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/zseUJgVeCwjihWSVg8qrP6U6zOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.91.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:6e:83:48:1c:90:b9:4b:13:d7:ff:16:85:3b:8f:86:15:23:
         c6:48:18:d9:6c:e9:9f:a5:67:02:8a:38:b2:f0:95:bc:f1:59:
         09:5f:b7:87:68:25:09:a8:dc:0b:c3:79:40:a4:55:40:64:77:
         1e:39:48:0c:53:e9:63:24:9e:35:16:aa:92:2e:fb:e5:12:6f:
         dc:78:84:98:75:d8:72:24:f2:6c:18:be:50:89:ba:34:aa:23:
         fb:09:e6:47:06:7d:3f:15:78:5b:29:e1:a5:80:a5:fa:48:aa:
         6a:2e:aa:d7:e3:87:87:d8:ee:52:7c:e2:b9:3c:f5:e8:42:a6:
         20:1c:5f:e2:1d:a5:f5:b1:f8:32:d0:54:89:62:04:82:3d:ac:
         64:f7:ee:0a:cc:7e:82:a1:5e:87:5e:fb:5b:e8:e9:ef:78:5f:
         13:c2:c9:e3:71:1d:f0:3d:9d:f1:df:1d:4d:a6:98:8b:16:b8:
         62:cf:1c:e5:c2:58:91:4b:9a:1f:e1:ed:e5:25:04:f4:e1:a1:
         e9:7d:d5:c6:cd:01:3f:a9:4e:d4:71:71:8e:1f:6d:d5:79:62:
         32:a5:6d:6a:14:d3:e9:3d:1c:93:c7:86:db:d5:6d:c7:ca:68:
         4a:85:f2:ea:95:03:82:a7:bd:ed:45:b3:86:25:3d:92:a6:c6:
         df:5b:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:55:14 2026 by rpki-client