This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zrYke7PCJd1OgjFZP6XYwEJIRSA.roa
File:                     zrYke7PCJd1OgjFZP6XYwEJIRSA.roa (raw, json)
Hash identifier:          uD4HZqrmKJVSDIqlR1oLRTq7Ftc6Qs9dYopCDxPeGP0=
Subject key identifier:   CE:B6:24:7B:B3:C2:25:DD:4E:82:31:59:3F:A5:D8:C0:42:48:45:20
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019B20CDB0B9252653CFE899D21D53C6C226
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zrYke7PCJd1OgjFZP6XYwEJIRSA.roa
Signing time:             Mon 15 Dec 2025 06:58:29 +0000
ROA not before:           Mon 15 Dec 2025 06:58:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135402
IP address blocks:        92.62.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:cd:b0:b9:25:26:53:cf:e8:99:d2:1d:53:c6:c2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Dec 15 06:58:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ceb6247bb3c225dd4e8231593fa5d8c042484520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:12:aa:e2:23:42:35:2e:96:05:56:2d:7b:46:
                    e8:f1:f7:32:78:67:b2:30:22:c2:bd:09:1b:23:55:
                    e7:af:5a:af:52:c2:ee:ba:b2:c9:a6:cc:b6:11:f0:
                    cc:86:85:82:b5:24:dd:46:01:33:67:6e:e4:e1:bb:
                    ac:e8:00:40:5d:95:a7:6f:29:c6:7e:03:06:d9:12:
                    3d:3e:7d:11:0d:79:a2:47:a8:47:14:95:92:b8:86:
                    71:e9:21:7c:51:9e:72:69:21:6b:e0:e7:46:d4:1d:
                    ff:5c:24:b6:09:7b:6c:4e:5d:03:14:cb:70:4e:81:
                    81:84:00:56:57:5c:d6:30:85:92:6c:7e:04:1b:ad:
                    36:84:d6:16:d5:07:94:6e:22:bb:8f:5f:41:1c:bc:
                    31:4a:c0:33:a7:a7:48:7a:5f:4b:56:cf:4e:16:a1:
                    b5:70:1a:d1:e2:40:b0:b2:82:49:38:09:22:b2:e2:
                    c3:f1:a8:6b:97:d9:22:a7:0a:d5:3f:9f:0a:b2:10:
                    0f:a6:ea:34:df:97:44:f7:ad:64:13:65:16:8d:c9:
                    5e:06:05:4b:3c:16:76:5e:25:be:ab:2b:04:15:10:
                    60:b0:18:6a:f1:c5:e8:2e:cc:7d:a4:e8:46:37:94:
                    ac:b2:05:40:14:3a:12:96:40:47:cf:4d:57:50:8a:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:24:7B:B3:C2:25:DD:4E:82:31:59:3F:A5:D8:C0:42:48:45:20
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zrYke7PCJd1OgjFZP6XYwEJIRSA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.62.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:5b:83:64:15:80:56:39:7c:7f:ed:e2:7c:91:00:e2:6b:f3:
         99:cd:be:83:9e:e2:54:d5:6d:86:04:fb:b6:01:45:ce:af:c0:
         c8:ea:94:97:eb:2c:14:c3:d0:c1:72:a3:ea:a6:a1:e1:1b:22:
         25:d5:1d:41:8d:a7:09:ba:8d:c1:71:fa:63:92:e5:20:6e:73:
         55:44:7b:8a:54:aa:ab:f3:c9:7b:7b:42:a2:3e:0c:c0:d5:9b:
         9a:93:82:89:9e:04:7d:ec:c8:0e:33:78:b9:ea:39:40:f5:ce:
         5b:e7:a4:a5:3d:09:08:d1:22:6b:b3:80:38:cb:ec:82:67:7c:
         b3:96:10:3c:ac:2b:59:a9:00:29:8a:d4:6c:2a:3d:f4:1f:25:
         db:0b:d8:f1:e9:52:d6:21:99:76:ed:85:be:4e:21:59:37:1f:
         62:ca:5e:dc:1f:f9:41:a1:a0:7d:33:25:06:87:2b:e8:00:41:
         f1:29:a9:8c:1e:75:ea:b4:dd:56:89:df:e6:be:ae:2a:46:90:
         b9:f0:cd:9a:8f:60:bd:12:df:c8:97:58:56:e7:e9:c4:a1:79:
         f8:cc:6d:fe:14:e9:45:0f:c9:ea:84:48:d1:06:d7:63:d3:42:
         8b:ee:56:12:6d:80:c9:42:cf:50:49:86:fb:9e:45:13:29:4e:
         fe:b5:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:20:39 2025 by rpki-client