This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PIySCIZkIgJ1WyTySPY0iQT26tY.roa
File:                     PIySCIZkIgJ1WyTySPY0iQT26tY.roa (raw, json)
Hash identifier:          MH9EbGnDDtkXwzoNaIYUyEkSyUYBKVr7Lhn/gzUTxyU=
Subject key identifier:   3C:8C:92:08:86:64:22:02:75:5B:24:F2:48:F6:34:89:04:F6:EA:D6
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C77B776F55811AF7D2C32173F2DE39
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PIySCIZkIgJ1WyTySPY0iQT26tY.roa
Signing time:             Thu 01 Jan 2026 04:18:40 +0000
ROA not before:           Thu 01 Jan 2026 04:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57101
IP address blocks:        195.136.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:7b:77:6f:55:81:1a:f7:d2:c3:21:73:f2:de:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3c8c920886642202755b24f248f6348904f6ead6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:ce:4a:dd:41:59:a3:4d:b1:31:c3:f0:5e:
                    0e:08:86:82:82:20:54:6f:aa:d8:76:cd:0c:36:65:
                    49:0b:0b:c9:1a:b5:29:70:9d:55:fd:d0:70:c8:0e:
                    35:fa:1b:86:1c:f3:f7:40:da:ac:54:97:88:2b:b3:
                    31:f1:98:fb:d9:01:18:f0:51:35:48:24:39:9c:83:
                    86:22:a9:f9:fa:ef:18:75:62:82:82:3f:bd:23:b9:
                    09:2b:03:04:c6:bb:0c:83:06:eb:47:9c:42:05:80:
                    0a:b7:83:97:df:59:53:c2:28:4e:24:03:4e:a0:23:
                    13:73:c6:b5:35:19:c8:71:4b:3f:8f:4a:84:1e:92:
                    0d:c1:40:e6:02:87:93:95:6e:03:fa:15:a8:49:dc:
                    58:e4:36:30:70:fc:60:f6:8f:e1:68:e9:47:4b:c5:
                    d3:be:7a:0e:b5:8d:36:bc:3e:6a:14:e0:8a:bf:f4:
                    fc:7a:5e:6d:cb:d7:47:ed:2e:4f:ec:da:54:76:12:
                    41:78:7c:29:61:88:05:e6:a1:3d:78:cd:76:97:a4:
                    93:d6:cc:4f:0e:d8:fd:00:85:10:10:99:46:dd:39:
                    a1:06:0d:b6:5c:89:a1:10:1d:06:8a:01:1d:60:68:
                    e9:28:20:67:55:bb:42:69:fd:19:75:96:35:f4:04:
                    51:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8C:92:08:86:64:22:02:75:5B:24:F2:48:F6:34:89:04:F6:EA:D6
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/PIySCIZkIgJ1WyTySPY0iQT26tY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.136.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:84:a6:82:ea:18:56:39:76:08:8c:e8:ff:34:12:91:c2:32:
         df:26:e8:e5:ca:a0:3f:d2:c2:2e:7b:33:26:bc:96:2b:a8:74:
         7f:8a:fc:4e:ce:3e:12:86:c7:26:be:b3:25:cc:d0:3a:13:31:
         16:df:9f:6d:8d:3a:12:dd:91:a9:8a:63:2c:b3:53:7b:9d:d5:
         91:4c:86:e0:1a:c2:ae:fc:7f:3c:db:b3:4f:64:4d:a3:4f:34:
         f0:94:ef:26:39:49:78:cd:c5:cd:6b:81:1e:0c:8e:a8:86:92:
         5e:7c:bd:32:a8:0c:6a:ff:3e:99:3c:07:44:fd:2c:e8:1c:ec:
         60:ab:6e:14:9a:b6:a8:25:83:5b:82:ec:f5:cc:d1:03:2d:a9:
         39:ec:2a:66:38:be:99:bb:79:ff:97:f6:47:47:c8:37:ba:57:
         a7:f5:38:c3:ee:27:08:16:3e:2b:fc:2b:20:e6:25:0f:d0:e0:
         13:a4:1d:79:ff:b1:0d:c9:af:b9:6d:fa:00:78:8c:db:b6:d7:
         4d:43:62:d5:9d:f6:0f:70:f9:f0:3f:cd:1a:5c:6f:a8:8c:56:
         99:9b:57:62:9e:05:0b:44:da:64:e1:6d:8a:59:b8:6d:07:2b:
         08:3a:4b:f6:83:67:b1:f8:2a:19:b1:9d:53:24:a5:03:0d:69:
         a5:3d:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:47 2026 by rpki-client