This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/SY2RUPr2I46mE_ozmympoAhaX-w.roa
File:                     SY2RUPr2I46mE_ozmympoAhaX-w.roa (raw, json)
Hash identifier:          p/god/upKn8qp+kQ4G0jUS1vVblFxTRCzcmR7IGieAw=
Subject key identifier:   49:8D:91:50:FA:F6:23:8E:A6:13:FA:33:9B:29:A9:A0:08:5A:5F:EC
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       019B7BA53CA2E305909F4ADF8D683D730EEE
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/SY2RUPr2I46mE_ozmympoAhaX-w.roa
Signing time:             Thu 01 Jan 2026 22:19:45 +0000
ROA not before:           Thu 01 Jan 2026 22:19:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60079
IP address blocks:        94.45.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:3c:a2:e3:05:90:9f:4a:df:8d:68:3d:73:0e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Jan  1 22:19:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=498d9150faf6238ea613fa339b29a9a0085a5fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:72:00:74:91:04:79:22:dd:3c:9f:8f:cc:
                    d7:ed:19:32:7b:99:b0:79:35:75:95:67:db:67:9e:
                    a1:3a:2f:38:4f:4b:a4:81:a1:26:0c:81:5b:30:e9:
                    5b:f9:31:21:39:b8:71:96:a5:d4:6f:bf:4f:83:bc:
                    d0:5d:09:a6:79:c4:fd:f9:85:04:ec:7f:f4:2d:7f:
                    b0:70:bf:cd:ef:34:34:04:76:9e:06:4a:b0:c4:cb:
                    9a:89:0f:da:18:3a:c0:f2:66:a3:58:df:cb:1b:d6:
                    6e:c1:bf:ad:58:15:48:3e:4e:c8:32:66:b7:ad:49:
                    31:1f:bb:cc:53:5f:33:50:8c:8a:88:98:94:a9:64:
                    37:a1:36:74:5f:69:f1:9d:7d:44:e9:8b:58:2b:a7:
                    27:ef:71:bc:60:49:20:75:37:e5:28:77:45:3a:b3:
                    44:6b:bf:ee:80:c5:3b:9c:55:27:ce:20:99:ee:68:
                    71:e2:5a:50:80:e5:69:8e:f2:d3:9e:f9:24:38:06:
                    84:32:c5:97:58:be:b1:9d:03:59:c0:18:57:ba:10:
                    fc:83:46:1d:83:96:b4:6d:f0:55:52:d3:f6:ef:da:
                    67:5c:f5:69:0d:a0:38:78:a7:c4:bf:dc:be:39:e8:
                    b7:e1:fb:e3:ac:97:e4:85:62:ce:b9:ad:d5:82:24:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8D:91:50:FA:F6:23:8E:A6:13:FA:33:9B:29:A9:A0:08:5A:5F:EC
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/SY2RUPr2I46mE_ozmympoAhaX-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:36:50:3c:aa:6b:12:0c:4e:3b:cf:33:c6:8d:3f:20:f0:63:
         90:cb:c7:7e:39:ec:66:76:a0:c2:9c:ac:e0:2c:f0:99:1f:04:
         22:3d:d3:94:d5:69:16:a1:1c:b7:5e:56:99:9b:4a:af:66:46:
         7e:70:d7:9e:40:28:6e:84:f0:ad:eb:77:8e:cc:31:3f:2c:9a:
         c4:1f:c5:9d:07:40:b3:b2:f1:5f:b2:b1:d4:b5:4c:01:fd:8c:
         84:87:9b:0f:c4:43:a7:90:23:0f:c2:2d:6b:c2:f8:db:7f:a3:
         20:c8:30:99:2b:bf:15:e4:96:5c:59:0b:49:4e:97:ae:a1:59:
         2e:1e:df:d7:71:f1:dc:0a:7a:a3:44:7e:6a:00:f2:30:d9:72:
         ff:cc:9f:26:55:97:5f:b6:b3:2d:09:d4:aa:af:87:14:9c:85:
         1d:bc:5a:87:75:fc:78:86:7a:18:04:b7:6b:14:9a:2d:12:95:
         f4:d9:5c:b2:9f:0d:df:fd:a2:e3:ae:fa:8c:c7:ed:54:82:10:
         d7:4b:26:8f:d1:4a:2b:23:1e:a4:5c:ae:e7:ee:4b:bd:6e:c5:
         83:7f:78:fd:cd:f8:eb:24:ce:53:6f:09:97:82:71:05:3d:53:
         c6:e3:f2:65:91:1f:3b:60:e4:1e:da:3c:4d:c6:38:09:61:30:
         6e:d2:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:05:54 2026 by rpki-client