This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b1SYoSctQ6aIsIAy0MojkuPYIOk.roa
File:                     b1SYoSctQ6aIsIAy0MojkuPYIOk.roa (raw, json)
Hash identifier:          xgNc0NfLxyarAEUTAARhWGBOZXXjIfuwJ9TfgP17+Ss=
Subject key identifier:   6F:54:98:A1:27:2D:43:A6:88:B0:80:32:D0:CA:23:92:E3:D8:20:E9
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED1E30FB8CE9E5DBE49E9882C92E30
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b1SYoSctQ6aIsIAy0MojkuPYIOk.roa
Signing time:             Thu 01 Jan 2026 14:19:01 +0000
ROA not before:           Thu 01 Jan 2026 14:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199815
IP address blocks:        193.59.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:1e:30:fb:8c:e9:e5:db:e4:9e:98:82:c9:2e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f5498a1272d43a688b08032d0ca2392e3d820e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:69:21:b6:07:05:f5:f8:52:fc:2f:69:eb:
                    12:af:dc:c4:f3:ca:3b:d3:f4:2a:8b:33:b8:94:fb:
                    5d:65:35:b4:7a:7b:5a:a6:03:e5:7d:60:24:89:62:
                    a2:7a:81:27:0b:9e:5d:2f:1e:d2:8b:23:eb:d6:bc:
                    7f:37:a4:6c:9f:c6:0b:1c:e1:39:71:94:13:fe:7e:
                    15:1a:42:2e:88:d5:4a:fa:0b:dd:49:a8:61:9e:cf:
                    be:37:87:f3:60:a0:ab:11:62:22:f2:ce:37:39:51:
                    b0:9a:19:b9:56:14:77:5c:5a:b5:f8:2e:18:3b:a4:
                    1c:61:78:97:99:9f:00:9c:5c:df:8a:42:cb:bd:d5:
                    d1:16:28:bf:03:d2:4d:79:97:54:0c:76:71:05:3c:
                    6c:da:33:d2:0a:b9:94:9b:44:18:0d:61:ef:f3:74:
                    df:f1:a8:38:43:1e:46:87:5a:71:eb:61:f4:25:43:
                    de:03:97:0e:57:f4:e6:64:a6:f7:b6:50:cc:0f:f6:
                    e9:d3:ff:c4:76:68:28:c7:b3:0f:c3:b4:6c:96:05:
                    70:8f:95:9a:da:0b:05:f8:de:df:da:db:c3:36:7a:
                    1c:58:fc:21:4b:ee:21:ee:d3:37:20:25:23:28:a5:
                    7e:53:a6:06:ca:9e:7c:64:8a:2f:1f:d5:8e:8c:6b:
                    4b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:54:98:A1:27:2D:43:A6:88:B0:80:32:D0:CA:23:92:E3:D8:20:E9
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b1SYoSctQ6aIsIAy0MojkuPYIOk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e9:e1:27:a7:97:75:c0:2f:d4:7f:ed:86:92:84:95:67:d2:
         d8:62:9a:ab:d6:be:5c:dc:16:62:dd:69:90:08:bf:26:15:14:
         31:02:2f:9e:d8:91:f6:90:cd:27:fd:51:2c:b1:d9:8e:1c:4f:
         2d:f0:4b:33:96:fd:e6:cc:08:33:00:72:6c:7b:24:50:77:d5:
         c1:ff:4f:2a:b2:a8:d3:8a:9a:9a:89:38:13:50:11:62:ee:0a:
         2a:97:3b:c4:85:69:f0:8e:53:29:9f:34:e9:05:b9:1f:41:36:
         c7:5d:35:27:d4:f1:ed:e1:4f:e8:ed:98:bd:0d:27:36:ac:6e:
         4e:2d:a0:16:9b:77:30:e6:00:ea:83:1c:6c:4b:33:7e:90:58:
         65:a8:1f:3a:75:86:33:fe:7c:80:71:4a:a1:81:fb:91:0c:de:
         f7:10:5a:d4:72:8d:9d:fd:28:e1:86:63:48:df:4e:c8:e0:bd:
         13:96:ed:12:2b:d5:01:7b:ef:b6:6c:70:49:0a:4d:0a:53:10:
         8f:a8:78:99:d7:28:27:64:5e:56:01:10:48:12:ae:4f:c4:34:
         d2:15:ce:b4:4a:2a:ea:87:9e:0d:e5:77:0a:e9:ee:f5:21:50:
         2a:b6:dd:07:cb:d1:15:a2:e0:ca:c6:f0:9e:e8:56:70:bb:ad:
         3a:fc:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:37:48 2026 by rpki-client