This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/t79xap_1Ai1eIDAVN_obgOAxh8I.roa
File:                     t79xap_1Ai1eIDAVN_obgOAxh8I.roa (raw, json)
Hash identifier:          SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=
Subject key identifier:   B7:BF:71:6A:9F:F5:02:2D:5E:20:30:15:37:FA:1B:80:E0:31:87:C2
Certificate issuer:       /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial:       019B797DE37BA7F7A4C555EF5F1C7EF4DCB3
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/t79xap_1Ai1eIDAVN_obgOAxh8I.roa
Signing time:             Thu 01 Jan 2026 12:17:31 +0000
ROA not before:           Thu 01 Jan 2026 12:17:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134187
IP address blocks:        103.57.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:e3:7b:a7:f7:a4:c5:55:ef:5f:1c:7e:f4:dc:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
        Validity
            Not Before: Jan  1 12:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7bf716a9ff5022d5e20301537fa1b80e03187c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:b5:ef:8d:0b:55:47:c0:0e:80:41:51:8e:
                    0a:65:cc:96:4f:d2:d9:9a:69:68:07:93:c6:21:a4:
                    d8:e1:ce:07:51:0e:91:4b:23:89:c5:01:f5:a0:47:
                    9a:40:c6:5b:eb:cb:b8:89:f2:cb:4c:19:6c:28:97:
                    f8:1d:7f:0a:84:a0:a3:d7:2f:bc:13:48:dd:56:19:
                    d5:ee:e7:a9:99:18:3d:b5:c7:ec:69:a5:2f:be:2d:
                    5c:31:a1:5f:ab:e3:35:96:54:d3:2f:ba:24:62:93:
                    b3:78:b5:d1:0a:fa:d9:b9:ac:8f:82:74:d3:00:ab:
                    75:24:26:8f:32:2a:ff:22:63:2a:42:0b:2a:e9:1f:
                    a0:be:5d:ea:d3:bd:a4:36:24:35:9e:1d:85:a6:c9:
                    70:b0:fe:8e:28:67:9f:cd:6e:90:fe:a0:8d:8d:9f:
                    c5:12:1b:48:ff:4d:a5:7f:3b:65:d4:33:39:ad:2a:
                    63:59:2e:81:1f:4b:25:eb:77:80:d2:41:26:c4:1c:
                    ce:08:46:06:89:54:87:31:e5:91:3c:77:82:bb:dd:
                    34:8d:09:d4:6f:79:f8:8c:91:a7:e3:4e:2b:b0:10:
                    32:bd:5c:59:28:cc:2f:58:0f:9b:18:6e:20:2f:53:
                    e5:8a:69:d9:43:9f:be:81:52:9e:ba:d9:b6:0a:3b:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BF:71:6A:9F:F5:02:2D:5E:20:30:15:37:FA:1B:80:E0:31:87:C2
            X509v3 Authority Key Identifier:
                keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/t79xap_1Ai1eIDAVN_obgOAxh8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:13:8e:f9:9b:c4:43:f5:06:c3:b5:59:40:9f:44:e0:47:
         fa:9b:b5:ca:99:63:bf:1a:73:67:50:27:d9:ef:e3:f7:98:0e:
         96:d0:53:99:69:2b:3f:fb:41:1c:e3:1f:94:79:6e:0a:72:94:
         1e:49:3d:fe:84:7a:31:d4:bb:9b:ed:26:dc:d0:25:fd:cc:77:
         c9:56:2a:33:8b:f9:c4:39:3e:2f:dc:71:90:e7:7d:df:a7:8d:
         56:17:ce:0a:50:4d:88:11:ab:91:ce:25:8b:c4:bb:3d:49:3f:
         e2:d0:d0:a1:cc:ae:2c:8e:c0:d8:63:2c:0a:22:15:9c:a3:6a:
         8e:32:9e:64:90:99:1e:f4:e3:45:47:43:bf:64:43:cd:47:27:
         b4:4d:ff:8d:2e:c8:97:4a:22:c7:df:01:e7:08:61:b0:27:88:
         3f:2d:a7:9a:8b:39:a0:d8:1b:bf:c8:5b:92:f4:b8:36:80:e5:
         82:a1:15:e2:95:d2:20:ce:29:f7:d9:75:91:ca:9a:b1:66:e9:
         aa:08:a3:6c:20:c4:e4:8b:fd:a1:9f:38:0e:3e:5e:6f:b8:db:
         ef:92:99:2c:50:e6:8e:6b:55:b0:bc:e6:a2:56:e7:63:a3:20:
         b1:e8:f2:22:1e:1e:e7:5c:cc:5b:e5:f8:cc:45:3a:14:d2:7b:
         2a:da:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:18 2026 by rpki-client