This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/SyWBqT58dPR944ENyBXecfRLiu0.roa
File:                     SyWBqT58dPR944ENyBXecfRLiu0.roa (raw, json)
Hash identifier:          nvOaqw1yMGl0wbibTeGVu/RnctZfAeEqTXJajqdQujk=
Subject key identifier:   4B:25:81:A9:3E:7C:74:F4:7D:E3:81:0D:C8:15:DE:71:F4:4B:8A:ED
Certificate issuer:       /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial:       019B7B3543B323DD00395A83E6F6D28C5A1C
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/SyWBqT58dPR944ENyBXecfRLiu0.roa
Signing time:             Thu 01 Jan 2026 20:17:26 +0000
ROA not before:           Thu 01 Jan 2026 20:17:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208890
IP address blocks:        193.228.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:43:b3:23:dd:00:39:5a:83:e6:f6:d2:8c:5a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
        Validity
            Not Before: Jan  1 20:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b2581a93e7c74f47de3810dc815de71f44b8aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:33:10:5e:34:2b:10:41:34:a8:57:47:7b:
                    b5:bb:0c:c4:5a:fb:9a:0a:97:9c:7e:0c:84:d1:6e:
                    af:a9:bc:f4:8e:88:4e:0e:6d:e4:17:d8:9f:49:77:
                    16:ba:fa:ed:6a:f3:32:f4:a9:e0:3d:b5:c0:aa:e0:
                    33:c3:79:ed:a3:ca:62:e4:1b:30:21:11:5a:5d:68:
                    68:26:93:22:df:b7:15:ae:3d:53:88:6d:b1:3f:88:
                    72:d9:16:1f:f4:bf:47:75:f1:11:91:06:75:30:88:
                    de:c3:e8:2a:a3:64:8b:be:ee:fa:86:6a:d6:6e:94:
                    1a:d5:45:90:e7:26:ff:f5:77:77:f0:1a:d8:4f:0a:
                    ac:90:6e:f2:b0:89:bb:56:26:47:bb:8d:de:7e:2e:
                    d6:3c:58:e8:8b:0c:e9:49:2d:8c:70:bd:5d:87:86:
                    75:85:49:d5:e1:12:4c:64:b3:80:5b:44:c5:ce:c6:
                    b7:af:51:14:d0:b2:d5:79:73:f8:15:e2:6f:29:cb:
                    05:ba:6b:8e:8a:79:fa:72:e4:0d:6d:16:7a:8d:46:
                    0d:3e:42:92:0d:83:a0:d3:ec:14:31:f5:a7:99:ef:
                    29:c2:9a:d8:4e:15:d1:a5:fc:e2:f4:5b:c9:8c:86:
                    86:38:55:aa:3e:c7:29:9a:d4:98:e1:4e:cb:90:c5:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:25:81:A9:3E:7C:74:F4:7D:E3:81:0D:C8:15:DE:71:F4:4B:8A:ED
            X509v3 Authority Key Identifier:
                keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/SyWBqT58dPR944ENyBXecfRLiu0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:80:7b:1c:a5:cd:99:68:65:16:ee:61:aa:b4:7c:b2:2d:
         7f:56:0c:57:58:cb:7d:5f:a9:c1:94:8e:01:1a:8f:4d:bd:30:
         04:0f:67:d8:7c:de:14:ba:50:bd:13:ee:86:3f:b4:5e:aa:8e:
         1b:ee:6d:68:fc:86:1e:53:da:c2:fa:e1:3d:05:b3:07:91:d2:
         0e:81:73:c9:b3:f8:69:24:25:6e:78:c0:72:81:92:01:f8:a3:
         2f:4f:47:34:30:a4:9e:36:ae:87:fb:66:38:2f:bf:c2:9f:14:
         0d:7a:5a:46:17:fa:e1:bc:07:52:9e:16:8f:67:10:1e:b4:0b:
         20:69:ac:88:14:68:9f:8a:36:87:dd:51:04:cf:43:cc:6b:2d:
         ca:88:b7:e8:23:4d:b7:1a:09:be:0e:1d:d3:57:37:e6:06:68:
         c3:0b:61:41:86:1c:28:30:0c:a1:15:bb:f0:39:e2:34:c9:4c:
         65:3d:64:42:bc:20:ad:62:53:d7:f1:3e:ce:46:a4:ec:d0:08:
         81:ec:f5:0b:8c:f9:84:0a:d5:2c:97:c9:8c:54:46:6e:99:15:
         4b:f1:51:26:3b:fe:01:44:5e:15:e3:f1:76:97:98:a2:c2:59:
         fb:5c:3b:b2:20:f1:22:9d:70:0f:2f:42:51:80:14:c9:f2:16:
         33:24:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:49 2026 by rpki-client