This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Zd993WlIhsVH-6E1AyOu45fT5aY.roa
File:                     Zd993WlIhsVH-6E1AyOu45fT5aY.roa (raw, json)
Hash identifier:          IzAGVx0DskyDrwVDI+0Zt4UOQJIdtYmOHtSk+L+kG6M=
Subject key identifier:   65:DF:7D:DD:69:48:86:C5:47:FB:A1:35:03:23:AE:E3:97:D3:E5:A6
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       019B2678CDC5CA3DCD5A4B4265A39072F3E7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Zd993WlIhsVH-6E1AyOu45fT5aY.roa
Signing time:             Tue 16 Dec 2025 09:23:29 +0000
ROA not before:           Tue 16 Dec 2025 09:23:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9009
IP address blocks:        195.177.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:78:cd:c5:ca:3d:cd:5a:4b:42:65:a3:90:72:f3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: Dec 16 09:23:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=65df7ddd694886c547fba1350323aee397d3e5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:94:60:dc:a9:6d:8f:e1:54:67:37:50:a5:
                    64:d1:79:04:c3:59:fc:6f:a0:db:1f:9f:91:ec:fa:
                    13:b5:ec:b2:00:b6:96:61:91:dc:d5:fc:8c:2c:47:
                    8e:a8:7e:3b:84:42:00:2a:d1:5b:d5:6e:0d:50:6e:
                    6a:20:fc:e6:24:49:94:c8:6f:db:9f:b3:63:0f:96:
                    b8:9c:78:e0:c3:76:8a:86:8e:bc:39:42:75:1d:42:
                    d0:33:20:e9:63:55:f0:03:23:ad:0b:16:8e:d5:e9:
                    b6:4c:aa:60:87:44:1e:1a:9d:b7:59:a9:49:64:39:
                    1e:ef:7e:2c:d0:f1:b6:05:32:1b:3a:b5:ab:0f:f9:
                    de:78:ab:6d:6c:00:71:d7:a5:00:a8:94:db:c6:af:
                    c5:c1:70:5e:c9:35:86:f0:8a:2c:5f:a9:9e:c4:f2:
                    fe:2e:b7:ea:a7:12:b4:c7:31:23:47:ea:55:9b:fe:
                    63:6f:d8:30:fd:96:ff:1d:a3:1c:b7:62:29:89:80:
                    f3:5c:63:ef:9c:cf:78:14:87:eb:38:4d:77:1e:9f:
                    b5:34:85:f8:82:cc:70:c8:0a:c9:0d:bc:c6:e6:e5:
                    9b:79:c5:37:11:ea:10:1c:7e:68:79:ad:71:e4:78:
                    38:9f:1b:da:65:bb:33:7e:d4:8e:67:26:01:6a:93:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:7D:DD:69:48:86:C5:47:FB:A1:35:03:23:AE:E3:97:D3:E5:A6
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Zd993WlIhsVH-6E1AyOu45fT5aY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.177.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:9b:03:81:9a:7d:33:ad:68:57:74:37:70:16:28:69:a4:
         cf:f0:12:e7:0f:98:e2:eb:9d:3f:e6:23:6d:64:df:33:c6:67:
         68:90:82:c8:5a:a4:3d:99:27:f7:1f:a1:40:fc:b8:51:c0:3c:
         6e:dd:a9:c3:2d:a6:c1:de:4f:3a:f9:fc:b8:c5:c8:56:2a:4d:
         99:8c:f6:39:86:ea:98:88:98:15:ed:d7:0b:97:23:dd:d5:d8:
         91:e3:0c:be:e0:18:d4:b9:48:6c:38:c3:ba:80:67:13:95:7d:
         e5:27:e7:8c:c1:0c:98:a7:9b:05:43:43:d1:d2:83:69:49:45:
         67:dd:66:0f:ce:65:d6:70:00:73:d2:75:46:13:81:80:32:0a:
         d2:e6:28:e9:30:d0:a4:ae:81:1b:68:d8:55:62:f7:40:a8:25:
         b1:7e:86:f7:f7:1f:8c:df:32:91:ef:01:2d:5d:e1:99:08:3e:
         0b:81:01:3b:d1:ba:50:e9:fb:ad:02:9c:28:5b:2c:7f:1b:c8:
         ed:f2:70:44:60:08:7a:6a:aa:40:a1:b5:e7:f2:45:25:7c:e4:
         0f:ff:71:65:6d:10:f4:a2:44:63:b7:68:b3:8d:5d:d6:cd:92:
         37:96:30:da:37:e6:42:d8:64:82:6d:90:a0:3a:1b:1a:59:b5:
         b1:b0:6d:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZsmeM3Fyj3NWktCZaOQcvPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUxMjE2MDkyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWRmN2RkZDY5NDg4NmM1NDdmYmExMzUwMzIzYWVlMzk3ZDNlNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdaUYNypbY/hVGc3UKVk0XkEw1n8
b6DbH5+R7PoTteyyALaWYZHc1fyMLEeOqH47hEIAKtFb1W4NUG5qIPzmJEmUyG/b
n7NjD5a4nHjgw3aKho68OUJ1HULQMyDpY1XwAyOtCxaO1em2TKpgh0QeGp23WalJ
ZDke734s0PG2BTIbOrWrD/neeKttbABx16UAqJTbxq/FwXBeyTWG8IosX6mexPL+
LrfqpxK0xzEjR+pVm/5jb9gw/Zb/HaMct2IpiYDzXGPvnM94FIfrOE13Hp+1NIX4
gsxwyArJDbzG5uWbecU3EeoQHH5oea1x5Hg4nxvaZbszftSOZyYBapNfXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXffd1pSIbFR/uhNQMjruOX0+WmMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvWmQ5OTNXbEloc1ZILTZFMUF5T3U0NWZUNWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7FdMA0G
CSqGSIb3DQEBCwUAA4IBAQCOypsDgZp9M61oV3Q3cBYoaaTP8BLnD5ji650/5iNt
ZN8zxmdokILIWqQ9mSf3H6FA/LhRwDxu3anDLabB3k86+fy4xchWKk2ZjPY5huqY
iJgV7dcLlyPd1diR4wy+4BjUuUhsOMO6gGcTlX3lJ+eMwQyYp5sFQ0PR0oNpSUVn
3WYPzmXWcABz0nVGE4GAMgrS5ijpMNCkroEbaNhVYvdAqCWxfob39x+M3zKR7wEt
XeGZCD4LgQE70bpQ6futApwoWyx/G8jt8nBEYAh6aqpAobXn8kUlfOQP/3FlbRD0
okRjt2izjV3WzZI3ljDaN+ZC2GSCbZCgOhsaWbWxsG1R
-----END CERTIFICATE-----
Generated at Fri Dec 19 15:42:13 2025 by rpki-client