This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SCSGmSFpmNjjJdaQ_vno9yNLrgI.roa
File:                     SCSGmSFpmNjjJdaQ_vno9yNLrgI.roa (raw, json)
Hash identifier:          ZImzm/IQynbT6s38zsw1H7Q6NWdqrEvpBONUAwTAfkg=
Subject key identifier:   48:24:86:99:21:69:98:D8:E3:25:D6:90:FE:F9:E8:F7:23:4B:AE:02
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       019B775957C95AB8D1A06443D3AC2CE0E4BB
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SCSGmSFpmNjjJdaQ_vno9yNLrgI.roa
Signing time:             Thu 01 Jan 2026 02:18:22 +0000
ROA not before:           Thu 01 Jan 2026 02:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56570
IP address blocks:        89.36.79.0/24 maxlen: 24
                          93.114.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:57:c9:5a:b8:d1:a0:64:43:d3:ac:2c:e0:e4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  1 02:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48248699216998d8e325d690fef9e8f7234bae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:65:43:ec:29:5b:50:65:5b:0d:c1:94:bb:
                    cc:64:c6:6a:98:01:db:8d:8b:4f:00:75:a6:7e:0f:
                    e8:c7:90:4c:0e:00:44:01:51:41:10:20:1e:2d:4d:
                    95:74:ce:b0:64:1c:d7:36:f6:f3:f9:2e:ee:56:45:
                    b3:dd:76:9d:48:84:eb:4a:4f:08:62:a2:8c:d6:fe:
                    8e:e6:2f:02:7f:c1:68:69:ea:ab:c9:19:5e:d2:71:
                    75:2a:62:0c:f9:d6:7d:02:bd:b6:5d:b6:26:d9:4e:
                    97:4a:f8:d1:79:d9:d4:be:8e:98:84:c7:53:68:a5:
                    67:3a:24:f5:15:06:dc:66:d0:94:58:7f:36:c3:7f:
                    17:30:d5:14:5c:39:ed:83:e4:de:a5:29:ee:de:64:
                    ba:aa:e3:60:b5:95:21:6e:ac:a5:ff:27:23:10:d5:
                    1a:13:72:f7:ea:da:c2:bb:7c:37:48:f5:fb:05:c6:
                    69:ad:2e:15:9a:01:1d:32:31:41:c3:2a:98:db:7e:
                    0f:c3:48:9e:cb:59:a9:17:c5:15:e5:1c:9d:db:46:
                    e0:aa:3a:cd:42:45:c4:6d:7f:83:4a:ce:8c:04:49:
                    d4:a4:1e:9d:5d:06:1a:3d:94:6f:14:67:8a:7b:b4:
                    2c:25:c3:fb:ce:53:25:42:6f:c8:0e:41:91:0d:47:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:24:86:99:21:69:98:D8:E3:25:D6:90:FE:F9:E8:F7:23:4B:AE:02
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/SCSGmSFpmNjjJdaQ_vno9yNLrgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.36.79.0/24
                  93.114.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:76:03:91:21:a2:1d:a8:dc:a7:c3:63:0f:9f:e1:86:31:5f:
         2b:08:42:fd:5c:aa:0c:19:e5:65:2c:58:0d:55:ca:46:d5:3f:
         ea:09:ad:fa:7e:e4:b3:8a:b6:58:ed:2b:1b:49:eb:3c:f9:2b:
         02:c3:78:49:85:8a:4a:90:f0:f1:11:1e:9e:cb:27:4c:e9:36:
         0b:41:65:eb:9c:d7:9b:43:96:65:75:0f:92:f8:8f:d8:5c:1f:
         5c:5d:90:f8:48:3c:10:eb:42:43:8e:43:4a:3d:1d:bf:77:c0:
         21:fe:50:23:4a:0e:06:c7:e9:73:6a:2d:e6:31:55:08:0d:eb:
         01:40:90:3a:65:85:e1:73:73:48:c9:61:f6:57:b0:07:bf:fb:
         91:0a:d6:9d:16:09:ff:bc:3e:26:da:44:14:15:d0:17:a0:5d:
         f7:af:ae:66:e5:65:b9:8e:a3:05:6b:65:3a:19:03:8a:25:12:
         72:3e:98:11:83:12:d6:d2:3b:7d:97:51:84:7e:3d:e7:e3:df:
         49:9a:6c:38:8c:80:ac:4c:1b:f4:71:d6:04:78:11:8d:aa:4d:
         dd:e1:6a:19:5c:02:52:14:42:ac:2c:85:17:15:fa:ad:48:bf:
         cb:c9:c5:89:e5:dc:1a:16:d0:a0:92:f4:e7:91:c6:c8:8b:da:
         71:af:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:22 2026 by rpki-client