This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rvyUzwy7RH80d_cYCnj-zNe_3qo.roa
File:                     rvyUzwy7RH80d_cYCnj-zNe_3qo.roa (raw, json)
Hash identifier:          MteSgXdLnhgZ+fSlsGTR94V9x6d43UQaTK/QDd7Z3Tw=
Subject key identifier:   AE:FC:94:CF:0C:BB:44:7F:34:77:F7:18:0A:78:FE:CC:D7:BF:DE:AA
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       019B7759559705D8AC354714EF368EFC5149
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rvyUzwy7RH80d_cYCnj-zNe_3qo.roa
Signing time:             Thu 01 Jan 2026 02:18:21 +0000
ROA not before:           Thu 01 Jan 2026 02:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50990
IP address blocks:        94.176.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:55:97:05:d8:ac:35:47:14:ef:36:8e:fc:51:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  1 02:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aefc94cf0cbb447f3477f7180a78feccd7bfdeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:c1:38:bd:02:fe:03:7a:a1:7c:b7:88:b0:
                    f7:33:9c:9c:02:1e:3b:ca:2a:00:d4:6e:af:17:c4:
                    dd:97:e1:43:3a:60:e6:64:34:2c:de:fe:7a:bf:6e:
                    3c:41:21:4f:6e:ba:8f:d0:2c:80:17:78:33:d0:83:
                    47:1d:2c:49:ac:7f:07:e6:5c:3d:06:e9:79:c7:58:
                    34:bc:72:f6:54:b7:3a:9f:c6:a0:f9:09:00:a8:b4:
                    0f:43:0c:d7:27:01:84:a9:ee:40:b3:9b:f6:c5:6c:
                    79:14:d4:71:50:02:a6:44:f8:f0:a9:a0:90:e6:4a:
                    b4:d5:e2:8c:ad:8a:b9:1a:bc:59:2b:78:b6:c0:38:
                    d7:3c:0a:46:2c:4e:ad:0f:21:78:6e:6e:4c:61:1f:
                    82:0e:8e:de:3e:21:e7:2b:a5:ca:74:a5:bd:45:4b:
                    b4:09:ed:66:24:f3:7d:44:87:73:53:e3:6a:dc:01:
                    ee:45:d0:7d:92:a3:31:bd:34:84:28:b6:06:8a:97:
                    3c:ab:27:26:21:2d:58:96:0f:6f:c3:a6:ba:10:cd:
                    41:88:ba:02:88:f3:ef:26:3a:3d:e5:44:c3:5d:06:
                    9c:54:d3:55:3e:0d:34:9e:e1:b3:33:3a:9d:06:20:
                    79:a4:05:95:37:59:01:14:a3:02:85:e8:eb:0d:31:
                    83:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FC:94:CF:0C:BB:44:7F:34:77:F7:18:0A:78:FE:CC:D7:BF:DE:AA
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rvyUzwy7RH80d_cYCnj-zNe_3qo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:2d:8f:87:19:ce:a3:66:07:1b:ec:aa:0f:a5:11:fd:05:15:
         78:29:aa:de:d4:b5:f5:67:a6:f4:cf:d7:8c:e5:b1:9d:87:a8:
         f3:4e:b9:4a:9b:0d:e7:32:4e:3a:f1:2d:ea:0c:65:cf:87:ba:
         69:ca:cd:bb:81:e3:ad:0a:17:20:02:d9:e0:02:0f:09:10:33:
         65:64:df:b8:91:b0:d3:35:ed:01:5e:d1:f9:df:62:45:c4:0b:
         04:e6:1c:e7:5e:82:db:64:02:1d:92:d8:a1:08:ba:df:2c:b6:
         87:6e:e0:26:94:7a:ce:1e:a8:6a:74:ae:32:74:f9:90:53:0c:
         f5:82:11:8f:ca:e5:d1:b6:7b:cd:6b:ba:dd:bf:1f:15:d5:8c:
         74:e4:c4:d8:8e:10:cb:48:51:3d:66:30:37:44:b7:0f:9e:ce:
         16:12:b9:ee:72:a8:dd:17:79:a7:09:c2:d6:73:4a:83:fe:c3:
         de:9b:cf:de:89:1a:ae:ec:76:4d:38:16:7e:78:3d:f1:21:4a:
         c4:18:2c:a0:26:74:fd:a4:90:70:ad:34:6b:e0:cc:e7:01:a9:
         a6:6e:95:0c:7c:d4:1d:64:60:97:4b:54:0c:6a:71:9c:90:43:
         99:c2:d9:01:53:09:9f:ac:70:6c:b1:94:31:97:fe:a4:50:e3:
         a4:18:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:47:23 2026 by rpki-client