This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/g9AVu06_Q4WU5cWW9_ns2zOeruY.roa
File:                     g9AVu06_Q4WU5cWW9_ns2zOeruY.roa (raw, json)
Hash identifier:          MshMHXaQOpksxof8uOqYOWVufG7jEPpOyFRZONQHAc0=
Subject key identifier:   83:D0:15:BB:4E:BF:43:85:94:E5:C5:96:F7:F9:EC:DB:33:9E:AE:E6
Certificate issuer:       /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial:       019B7B365A47EBC48EB4477D1A638B73D7D6
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/g9AVu06_Q4WU5cWW9_ns2zOeruY.roa
Signing time:             Thu 01 Jan 2026 20:18:38 +0000
ROA not before:           Thu 01 Jan 2026 20:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48529
IP address blocks:        144.56.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:5a:47:eb:c4:8e:b4:47:7d:1a:63:8b:73:d7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
        Validity
            Not Before: Jan  1 20:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=83d015bb4ebf438594e5c596f7f9ecdb339eaee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:33:61:e9:09:c5:6e:40:1c:08:26:a8:78:
                    a4:4f:28:f4:57:a5:18:7d:37:22:64:ef:1d:e3:ef:
                    64:f0:90:88:29:0e:3a:6a:b8:cd:64:a3:68:fa:85:
                    2a:b8:70:12:83:0f:9b:35:73:03:f8:c0:79:68:e0:
                    f3:e5:ec:34:f2:9c:81:70:23:02:26:57:e8:18:f4:
                    21:33:54:25:3c:4d:fb:5d:98:7a:ac:10:b0:02:8f:
                    f2:e2:54:43:7d:3b:48:7c:bf:cc:72:ad:eb:85:fc:
                    0d:c7:c5:7d:68:0c:9c:6d:a1:c3:6c:b3:0d:72:ec:
                    f5:ea:6a:c7:b2:22:e6:fa:a8:17:13:63:c6:c0:25:
                    1e:3a:68:3c:92:f1:e1:0f:58:c5:1c:51:86:f7:dd:
                    1c:c4:fe:3a:82:97:ee:97:c2:a8:c1:a2:82:e7:aa:
                    26:c5:d7:eb:59:68:0e:b6:2e:4c:7d:e2:21:75:ab:
                    23:89:99:91:6d:48:a6:c3:34:71:e6:12:02:b2:5c:
                    de:6b:e8:94:1c:7a:f6:d2:90:65:28:46:68:54:0d:
                    57:20:8d:a0:0e:dd:34:b5:05:65:e0:43:0b:1b:88:
                    a3:27:8b:22:63:6c:ca:43:d8:62:8c:7b:02:fb:b7:
                    d3:39:6a:59:2b:2f:f0:bf:b0:f5:51:7e:c6:97:cd:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D0:15:BB:4E:BF:43:85:94:E5:C5:96:F7:F9:EC:DB:33:9E:AE:E6
            X509v3 Authority Key Identifier:
                keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/g9AVu06_Q4WU5cWW9_ns2zOeruY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.56.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8a:e3:a3:75:cf:79:b3:ab:d5:59:01:8b:22:c4:56:2b:a6:
         fd:cc:5d:ad:95:d6:f7:59:51:97:5a:18:f0:34:5c:89:2c:4b:
         58:34:91:1d:a8:bf:f4:35:97:3e:61:94:02:c8:eb:a1:04:c3:
         00:7b:74:1a:c4:ec:15:63:20:d5:95:2b:8d:2f:dc:b6:7f:a5:
         ee:9c:39:a3:ea:41:03:c6:c8:4f:0c:ce:7b:d8:0c:c2:6c:02:
         f3:d9:12:0f:2c:ec:ae:ad:31:ed:d4:ca:85:ea:7d:9d:33:d8:
         20:69:0c:0a:05:d0:33:48:ae:3b:3e:38:9d:ca:46:1f:67:59:
         f7:ff:0a:fa:7c:44:82:c3:a6:cc:f1:77:59:76:dc:1f:c5:fb:
         b2:3b:b2:75:5c:98:fd:ca:d1:c5:d2:07:e1:4f:e6:f3:fc:2b:
         ab:03:4d:9b:34:a1:b9:25:3f:4d:5c:f1:e9:60:8d:ea:de:d4:
         59:51:f6:aa:2c:91:55:00:9a:52:23:84:43:b1:be:d9:13:04:
         56:c2:87:bf:b7:fd:65:b1:3e:a9:d0:8c:c8:2c:af:78:bf:fd:
         35:9e:79:c0:f6:f2:e1:8c:ee:a1:fd:84:ab:22:38:39:7f:9f:
         e4:38:c7:6c:fb:8d:43:f2:30:f2:a6:3a:e5:ef:74:2e:3d:10:
         07:ce:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:06 2026 by rpki-client