This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/61rQFUGqJg0nLTLj-Rrzy9qHIPI.roa
File:                     61rQFUGqJg0nLTLj-Rrzy9qHIPI.roa (raw, json)
Hash identifier:          g3jur0hhvVqeoUrencrp2/jQZ48qi0hd7qQhX0ZdtvQ=
Subject key identifier:   EB:5A:D0:15:41:AA:26:0D:27:2D:32:E3:F9:1A:F3:CB:DA:87:20:F2
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED23EA5C437D3E6F723CE58729ADD1
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/61rQFUGqJg0nLTLj-Rrzy9qHIPI.roa
Signing time:             Thu 01 Jan 2026 14:19:02 +0000
ROA not before:           Thu 01 Jan 2026 14:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203508
IP address blocks:        194.181.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:23:ea:5c:43:7d:3e:6f:72:3c:e5:87:29:ad:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb5ad01541aa260d272d32e3f91af3cbda8720f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:37:45:92:59:fd:09:95:a2:61:be:bd:40:
                    f3:eb:3a:ca:8b:c6:51:83:f4:f6:7e:30:fa:9f:32:
                    83:85:18:88:fd:38:39:95:d4:5c:ba:e9:b1:21:3c:
                    c9:0a:e9:74:a1:3e:ef:1e:42:e4:33:47:ac:65:ef:
                    b5:c0:ce:01:e3:00:a6:fe:ca:9c:27:e8:d2:22:a1:
                    cb:40:b2:e1:f7:ce:10:3f:9e:1b:a0:a3:26:20:6f:
                    74:02:df:53:4f:6e:fb:5b:57:5c:d0:aa:20:43:97:
                    18:82:83:04:4a:dc:1d:9e:31:81:51:ac:62:ca:4a:
                    f2:38:ae:3a:12:fb:4b:9f:e2:7f:8b:96:68:d6:f0:
                    56:0a:b8:0b:f2:b1:ff:50:f9:a7:d0:9a:fd:20:11:
                    3f:de:00:dd:2b:da:d7:9d:f3:51:d1:31:5f:37:0f:
                    1e:84:2f:48:fc:1f:d0:2a:df:4c:1e:d6:48:d5:0e:
                    50:bb:69:35:2c:33:b2:79:30:6a:8b:c8:04:94:a5:
                    80:9c:95:a9:bf:5b:27:99:a6:d6:98:5f:6b:8d:35:
                    a7:02:ed:3d:23:8d:4c:b3:93:4f:81:ea:25:5e:38:
                    21:01:35:7b:81:bd:21:2e:5a:57:7b:8d:e3:4b:e6:
                    6b:57:11:0a:05:a2:8f:4d:9a:2c:49:bc:b1:33:eb:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5A:D0:15:41:AA:26:0D:27:2D:32:E3:F9:1A:F3:CB:DA:87:20:F2
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/61rQFUGqJg0nLTLj-Rrzy9qHIPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.181.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b8:1e:74:82:16:64:82:54:5c:99:30:8a:3d:98:0f:14:4a:
         cb:3d:d0:2d:74:33:02:8b:9a:d1:9f:57:2e:fc:43:13:c3:4d:
         12:d7:9f:da:8d:cd:5f:2b:41:3f:a8:b8:fd:ff:a4:b6:71:46:
         2b:1a:e3:73:8a:e4:e6:fb:dd:ab:35:e4:e1:fe:63:a5:1c:6f:
         3f:99:c6:c9:d2:00:36:9e:38:fb:56:83:e3:e1:e4:00:5f:a0:
         12:4c:b8:d2:69:8b:eb:e9:59:3d:c4:d3:9e:53:38:a0:15:c5:
         f5:a2:e5:60:c6:28:91:21:67:40:4f:29:17:08:9e:b7:a6:74:
         55:ca:33:eb:ad:6f:2f:95:8d:f7:b8:1e:96:80:6f:5c:e9:4c:
         04:c3:b1:54:18:08:f9:94:7f:af:76:c0:b8:4c:ef:22:5a:2f:
         58:6b:74:30:8b:6a:e3:f7:b7:31:6e:72:20:26:a5:18:b4:f2:
         5a:24:24:64:3b:73:86:f3:e4:a3:9a:e5:bd:35:cb:4c:ba:da:
         de:6f:46:f4:38:ed:d2:f8:54:84:2b:49:06:ed:9c:f3:07:d3:
         83:b7:7e:7b:06:cd:5d:53:bb:f2:dc:1e:0f:87:2b:9e:fa:4a:
         8d:b5:db:55:4f:81:cd:5f:91:b6:95:1e:80:88:22:c5:46:6b:
         1c:a4:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:37:50 2026 by rpki-client