This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/T3r4X-g7jzTs2RTxvMHymE54Dy0.roa
File:                     T3r4X-g7jzTs2RTxvMHymE54Dy0.roa (raw, json)
Hash identifier:          1TWftgoniVP/b+SSybUJwM2lrnV72ClJ/WNZwLS9HrM=
Subject key identifier:   4F:7A:F8:5F:E8:3B:8F:34:EC:D9:14:F1:BC:C1:F2:98:4E:78:0F:2D
Certificate issuer:       /CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Certificate serial:       019B7758999AA3EE5686684186780D5AC16E
Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/T3r4X-g7jzTs2RTxvMHymE54Dy0.roa
Signing time:             Thu 01 Jan 2026 02:17:33 +0000
ROA not before:           Thu 01 Jan 2026 02:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34984
IP address blocks:        5.181.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:99:9a:a3:ee:56:86:68:41:86:78:0d:5a:c1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935
        Validity
            Not Before: Jan  1 02:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4f7af85fe83b8f34ecd914f1bcc1f2984e780f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:50:de:41:74:10:1f:a5:cb:6c:e7:0d:cb:
                    4a:21:09:d0:31:19:54:0c:4f:92:45:8b:88:04:81:
                    d7:69:bc:4c:a5:72:4c:f7:58:72:be:83:83:ef:cf:
                    84:25:85:74:74:87:c5:88:d0:4a:3a:7c:f0:43:6f:
                    50:10:fd:dd:b9:0b:41:93:c8:d6:c3:dc:8a:e3:02:
                    73:5c:d7:0f:65:91:77:b1:77:ed:4f:4d:bc:c8:e0:
                    61:43:21:a6:f9:66:4d:74:bf:fd:df:0b:67:8b:03:
                    12:6a:03:fe:4c:10:65:85:69:b8:27:24:a0:01:2f:
                    3b:6b:33:77:51:2e:54:78:2d:46:a2:a5:31:19:88:
                    34:de:ab:3b:20:73:e1:06:3b:b3:63:17:f3:b7:7c:
                    23:9b:32:9a:56:28:5f:97:dc:cb:39:15:7c:53:46:
                    03:0f:af:80:13:19:5a:00:9f:75:a4:fc:23:38:fc:
                    0f:c5:46:64:77:75:54:80:7f:7b:2f:c2:a3:31:22:
                    2d:de:83:47:63:35:96:c2:01:73:d9:ea:ee:24:ce:
                    57:db:f1:54:46:8d:8f:d0:9a:fc:13:37:cd:9d:ee:
                    d6:34:fe:ed:8d:bd:33:9e:e5:98:46:35:92:61:9e:
                    c5:27:ed:70:bf:7a:b3:4d:88:8d:e3:42:60:70:61:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:F8:5F:E8:3B:8F:34:EC:D9:14:F1:BC:C1:F2:98:4E:78:0F:2D
            X509v3 Authority Key Identifier:
                keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/T3r4X-g7jzTs2RTxvMHymE54Dy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:24:c0:88:ff:44:53:15:c5:93:49:53:12:f3:07:86:dd:a2:
         f0:a7:cd:e6:dd:66:42:d8:fa:bc:bc:64:cf:43:7e:a7:31:21:
         1e:53:00:90:a3:61:ac:a3:9a:24:1c:90:f2:f8:80:31:04:98:
         82:9b:ab:13:eb:3b:a8:83:69:f6:e7:e4:86:0f:f2:e3:ab:fb:
         f5:08:78:08:fa:1e:fa:f5:0e:f9:2d:08:5d:74:f3:ec:cf:5c:
         d0:bb:4a:ea:db:03:09:f0:7f:61:20:e5:8b:17:cc:d5:63:67:
         17:47:d0:3b:2c:5a:d6:4e:f9:e9:6f:bd:09:2a:b9:be:6c:00:
         d3:58:3e:e7:2b:69:b9:3c:d0:c4:fa:75:39:1b:aa:34:3e:e0:
         32:83:19:62:68:6e:6c:f3:08:87:be:63:87:a3:72:f9:5d:cf:
         64:78:59:ab:95:2e:43:f4:a4:e2:0f:00:f7:53:b7:69:a4:8b:
         0a:e9:59:fe:8c:7d:5b:4e:88:3b:0c:89:77:bd:d8:6d:52:b2:
         aa:a8:59:30:f5:7f:f5:11:2d:1e:ca:75:32:c3:47:04:2f:ce:
         c8:82:9d:d6:10:cf:b6:d1:34:ce:aa:af:d4:d2:c1:33:2e:a5:
         71:5a:82:6a:d0:23:9a:2d:5c:98:86:da:ec:15:e3:f7:c5:54:
         64:d9:e9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:03:53 2026 by rpki-client