This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/9eWyQcwhhtcWSOgLAyvjVSN69_0.roa
File:                     9eWyQcwhhtcWSOgLAyvjVSN69_0.roa (raw, json)
Hash identifier:          WQam9mNIAyIv9GJMj3n6lEuVNq1iCgTWLcCsWIhP4W4=
Subject key identifier:   F5:E5:B2:41:CC:21:86:D7:16:48:E8:0B:03:2B:E3:55:23:7A:F7:FD
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       019B7A5B1BDF7F1A077233989FC8A0B5FD9A
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/9eWyQcwhhtcWSOgLAyvjVSN69_0.roa
Signing time:             Thu 01 Jan 2026 16:19:09 +0000
ROA not before:           Thu 01 Jan 2026 16:19:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        185.155.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:1b:df:7f:1a:07:72:33:98:9f:c8:a0:b5:fd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Jan  1 16:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5e5b241cc2186d71648e80b032be355237af7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:cd:ea:d9:eb:2e:e2:fb:09:f7:6e:ba:b9:
                    d6:ab:67:2d:ee:97:1d:83:4a:a8:bf:f7:c0:52:83:
                    fe:6d:cd:fe:0b:14:bf:e2:f2:d0:9b:67:d1:c2:81:
                    c3:ac:bd:c1:dd:6f:6b:23:71:eb:0b:2d:32:7f:3c:
                    1f:23:82:54:87:3a:85:cc:9b:5d:12:04:13:47:15:
                    0c:24:de:a7:26:6e:f4:b6:da:99:e6:88:94:b5:58:
                    03:3e:3e:95:1f:89:2b:30:4f:ca:0b:85:9a:22:d1:
                    c5:cd:13:93:95:f9:2a:19:82:8b:28:b6:4d:63:50:
                    66:89:11:53:de:5d:1e:89:8a:75:6d:ad:f5:09:04:
                    09:50:b7:b7:2a:6d:2a:29:61:35:16:0d:37:89:24:
                    e9:6f:31:35:a6:e4:88:e5:ec:ed:b4:17:17:b3:17:
                    a2:45:5e:a9:82:6b:74:96:8c:c8:f0:ba:7a:3b:c7:
                    12:28:b9:b1:c1:be:e8:2c:73:69:e0:25:26:2e:fd:
                    10:43:a9:c9:7d:bf:31:b8:27:81:dc:e4:2a:6e:80:
                    97:6b:a0:89:76:d4:56:d7:96:b3:bb:70:5b:33:c2:
                    e2:a4:8b:b3:1c:dd:e3:f5:aa:32:36:f6:1e:ab:30:
                    c1:74:7b:41:59:62:d9:d8:d7:3b:46:74:5c:af:73:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E5:B2:41:CC:21:86:D7:16:48:E8:0B:03:2B:E3:55:23:7A:F7:FD
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/9eWyQcwhhtcWSOgLAyvjVSN69_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:67:97:30:99:75:fd:8c:34:5b:47:aa:14:a6:cb:a8:b1:9a:
         89:9c:59:d6:64:18:5d:3c:7d:55:2b:f6:78:25:e9:4e:34:5e:
         6e:c4:83:4b:0a:3f:ce:33:94:8e:a7:c8:9d:30:02:77:e2:60:
         d5:30:70:e8:f2:e7:be:38:6d:33:76:46:63:9c:4b:b1:c6:fd:
         e8:31:a1:37:3f:1e:7e:3f:65:cc:7c:a3:4e:08:90:53:1a:70:
         53:07:5f:be:05:74:4c:8b:d8:85:95:94:63:60:7b:e4:f3:80:
         e7:6b:07:01:23:2f:b5:47:10:45:8e:a0:3d:3c:86:6e:92:d5:
         91:c2:17:f9:34:55:ae:fa:4b:e0:3b:f9:32:e3:bd:61:a7:0f:
         98:cd:f5:bf:4f:e7:5e:83:5a:bb:df:b2:08:c9:f8:df:3f:26:
         ce:94:30:71:fa:2e:cd:84:23:78:96:f2:09:dd:00:40:ce:dc:
         38:ab:ea:6c:ca:e3:a4:17:83:de:19:61:24:31:49:ac:ad:ce:
         d1:b3:83:4a:84:7a:22:55:62:04:3e:db:95:56:44:44:c7:10:
         e4:b4:6c:ef:1e:76:5a:e8:97:3d:83:25:2e:00:36:db:73:29:
         da:b2:1e:15:b4:ec:df:96:02:19:9f:ae:72:09:c7:7a:ad:e9:
         f2:0c:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:50 2026 by rpki-client