This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/sy590NoucmeuKdt3uviRlKJqtgA.roa
File:                     sy590NoucmeuKdt3uviRlKJqtgA.roa (raw, json)
Hash identifier:          YyYfPMJfnJJO0iQq9F/bcSqZYsZVe2j2aG3zx/pk1BI=
Subject key identifier:   B3:2E:7D:D0:DA:2E:72:67:AE:29:DB:77:BA:F8:91:94:A2:6A:B6:00
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       019B77C74868BAB831D8A14FB4B695895F9F
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/sy590NoucmeuKdt3uviRlKJqtgA.roa
Signing time:             Thu 01 Jan 2026 04:18:27 +0000
ROA not before:           Thu 01 Jan 2026 04:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201671
IP address blocks:        195.19.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:48:68:ba:b8:31:d8:a1:4f:b4:b6:95:89:5f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Jan  1 04:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b32e7dd0da2e7267ae29db77baf89194a26ab600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:26:15:6d:34:f0:05:ca:8b:ed:ca:47:b0:
                    52:a1:26:1a:7f:dd:ab:f2:40:3f:76:d5:f3:3d:59:
                    22:97:93:c2:ee:0b:10:26:66:8e:39:aa:ec:8b:c6:
                    19:fc:6f:60:db:45:8a:f2:e5:6f:7b:8d:8c:3c:f2:
                    81:5a:bb:f5:6c:1e:ba:28:6d:a4:72:4f:ed:23:24:
                    fc:53:da:db:81:b0:fe:73:ca:1a:fc:c4:a9:29:70:
                    b3:00:74:a6:a9:93:47:68:c2:97:9b:ba:ee:22:1c:
                    21:ec:fa:fc:05:42:8b:96:e5:18:da:48:2c:fb:ff:
                    11:d8:c2:bb:33:2f:a1:36:f2:df:e9:a5:3a:78:e6:
                    4a:b8:79:92:eb:91:c8:23:f6:e3:0b:a5:7e:c0:95:
                    1f:b6:79:de:77:50:6e:df:35:33:b6:b7:6d:72:da:
                    95:67:5f:f0:03:a1:72:88:09:e6:af:ca:dc:78:89:
                    57:0c:aa:79:94:87:c1:e9:ff:b3:00:d6:1a:7b:0b:
                    29:f4:a4:c6:a8:5e:94:7e:f1:9e:2e:6b:5f:32:c2:
                    44:50:ce:74:d6:a7:1f:7e:27:36:64:7d:31:e2:ff:
                    24:14:aa:12:65:9a:0d:6d:17:93:03:73:d4:85:84:
                    15:0d:af:e3:c9:a3:36:34:50:d1:42:1a:55:b6:20:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2E:7D:D0:DA:2E:72:67:AE:29:DB:77:BA:F8:91:94:A2:6A:B6:00
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/sy590NoucmeuKdt3uviRlKJqtgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.19.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:41:e8:a7:de:51:2b:0d:da:dd:85:b9:5e:0f:3a:0f:05:07:
         22:01:0c:e0:5b:fc:bd:30:7d:73:a5:15:96:46:61:cc:5f:1c:
         7c:e5:70:a2:8f:65:e8:12:db:a8:11:45:91:2b:b0:32:ca:0c:
         c0:99:4f:15:e1:96:52:40:a3:18:45:7c:00:fa:ac:e0:36:3d:
         2e:8b:a6:1c:1c:29:56:92:28:b2:7a:63:68:b8:ec:91:19:58:
         ae:22:fa:45:41:b5:c2:c3:1d:81:d7:ad:c9:fe:cf:dc:68:e0:
         31:0f:3a:e8:4e:e2:08:e0:4a:9c:9c:b5:68:d8:47:87:b5:85:
         71:d4:bd:0c:1a:8e:4f:8b:38:2f:d6:42:0d:98:c3:5a:81:dc:
         40:93:7d:80:e7:37:25:f5:d5:49:c3:aa:2d:61:f5:d4:69:d4:
         9d:82:2a:02:25:58:fa:76:7e:e9:39:a8:c6:b6:ed:b2:7f:f5:
         51:9c:3d:89:18:05:6c:ce:3b:bf:f5:f6:6a:a9:64:1e:dd:a1:
         56:11:50:f5:75:c0:fb:4d:88:7c:3a:f0:c0:85:39:03:3b:5e:
         35:f2:55:44:de:6f:64:50:b5:67:94:fb:6c:de:aa:3a:89:b4:
         32:27:3a:09:f1:93:92:39:6a:ea:24:0c:00:33:37:0d:df:1c:
         20:25:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:16:08 2026 by rpki-client