This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/sIprs8LVIcyiMcz81LY2NhiKYts.roa
File:                     sIprs8LVIcyiMcz81LY2NhiKYts.roa (raw, json)
Hash identifier:          mjYijXz3DtiSejRuyhAqi38hswzDQ1HzzVW4Zmiej7w=
Subject key identifier:   B0:8A:6B:B3:C2:D5:21:CC:A2:31:CC:FC:D4:B6:36:36:18:8A:62:DB
Certificate issuer:       /CN=150183623fc16dc74cb775462c36d31016a40ac1
Certificate serial:       019B791042FAA7DD1570758CDC338291E5AF
Authority key identifier: 15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/sIprs8LVIcyiMcz81LY2NhiKYts.roa
Signing time:             Thu 01 Jan 2026 10:17:47 +0000
ROA not before:           Thu 01 Jan 2026 10:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49832
IP address blocks:        185.16.24.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:42:fa:a7:dd:15:70:75:8c:dc:33:82:91:e5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150183623fc16dc74cb775462c36d31016a40ac1
        Validity
            Not Before: Jan  1 10:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b08a6bb3c2d521cca231ccfcd4b63636188a62db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:3b:c4:4b:7f:9b:16:cb:90:e8:d8:35:79:
                    d9:fa:76:20:3d:46:da:30:eb:b0:27:85:a4:2a:7e:
                    bf:48:18:d7:72:db:40:85:5c:c0:fe:47:fa:f8:a6:
                    6c:52:2a:6b:a2:85:1a:04:24:e8:0e:cc:e9:01:f6:
                    1b:45:06:79:2d:da:34:a9:95:6b:ba:0d:16:95:0c:
                    d2:de:d1:27:ba:ce:19:8c:d9:f3:a3:c1:5f:17:f2:
                    a0:e1:11:fa:8c:83:af:de:f2:d7:50:f9:17:78:ef:
                    bf:b3:6e:4b:0d:e5:f9:09:69:6a:75:4b:8c:bf:ba:
                    28:32:99:d0:34:88:45:f4:c7:c9:ef:a2:b2:52:87:
                    ad:a5:33:93:e3:d3:bb:98:31:2b:87:5f:8b:35:02:
                    24:34:77:7d:b8:1b:53:11:e4:a8:36:64:c4:d4:cd:
                    a8:70:e0:0f:47:f7:7e:d2:a4:d2:0e:6c:35:7e:f5:
                    81:55:d8:bd:43:bf:5d:96:61:82:4d:1f:93:a2:09:
                    c9:33:ec:d0:bf:e1:db:4d:9f:1e:d2:96:32:51:ba:
                    65:4d:ab:e1:c3:90:7c:bd:8b:ba:2a:07:3e:a9:da:
                    25:bf:5c:1d:b6:94:1d:24:e1:02:2c:2f:63:2d:7d:
                    6a:ff:85:d0:9a:03:ad:0d:b8:23:bc:0d:ce:b0:be:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8A:6B:B3:C2:D5:21:CC:A2:31:CC:FC:D4:B6:36:36:18:8A:62:DB
            X509v3 Authority Key Identifier:
                keyid:15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/sIprs8LVIcyiMcz81LY2NhiKYts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.16.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:6e:06:98:c0:f0:c8:a7:1b:df:c8:31:b6:a3:2d:90:57:4f:
         03:1c:19:e2:51:8b:ba:25:e5:99:98:a8:eb:31:03:f4:e8:f8:
         d1:5c:ea:4e:47:58:6f:c7:03:92:63:7e:95:43:f0:73:75:3e:
         df:4d:cf:20:a8:36:e1:11:c4:5e:39:b0:e6:d7:71:4e:f7:c2:
         90:3a:26:ed:77:f3:f4:a9:ca:f2:9b:da:c3:e1:5c:c4:b6:56:
         c3:fd:d6:e9:32:34:22:fb:91:f7:da:50:80:7d:a4:0a:63:f6:
         59:95:bd:54:64:94:f6:9f:2b:14:e6:0d:18:e2:63:fe:7a:04:
         27:5c:45:5a:57:dd:82:b5:a0:37:23:53:94:d0:9a:ec:fd:6d:
         d4:48:3b:3b:3e:36:c3:a5:eb:39:77:f4:cd:cc:26:e3:37:6f:
         91:72:4c:9e:cb:fb:15:ab:9c:d3:d2:2a:3a:f6:43:d3:0a:7c:
         1c:d0:91:58:f7:c8:11:9b:c1:cc:a1:04:21:3b:75:44:52:c4:
         4f:98:97:8a:af:88:e8:4d:9c:4c:24:a5:f4:fe:d5:27:40:4f:
         41:9a:f5:70:f0:e8:5a:af:a8:b3:09:a1:5a:8d:e9:75:36:77:
         49:e9:fe:4e:7a:96:f1:3c:4b:d0:cd:3f:5f:41:fa:07:c7:03:
         2d:73:1b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:51:34 2026 by rpki-client