This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/syri4gMUyb6a13KvMROJjwlBhZg.roa
File:                     syri4gMUyb6a13KvMROJjwlBhZg.roa (raw, json)
Hash identifier:          /QXVuiiMa3wjoFyt1XhRqNNgHTeCl2azKO31l+7RS+0=
Subject key identifier:   B3:2A:E2:E2:03:14:C9:BE:9A:D7:72:AF:31:13:89:8F:09:41:85:98
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       019B76EB669EEA5CBB306138C9E8B1AF874B
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/syri4gMUyb6a13KvMROJjwlBhZg.roa
Signing time:             Thu 01 Jan 2026 00:18:17 +0000
ROA not before:           Thu 01 Jan 2026 00:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206483
IP address blocks:        5.180.188.0/22 maxlen: 24
                          185.185.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:66:9e:ea:5c:bb:30:61:38:c9:e8:b1:af:87:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Jan  1 00:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b32ae2e20314c9be9ad772af3113898f09418598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:42:f3:3d:11:27:18:ff:1f:5a:1a:a9:79:
                    6c:1f:9b:fe:32:d7:a2:eb:15:a5:6c:69:3c:7a:01:
                    26:f1:c4:68:1c:f2:34:a8:b0:be:41:f6:fb:c1:78:
                    5d:3f:7f:4b:f8:34:28:40:79:3e:cd:c7:ec:02:5d:
                    72:6d:76:9a:e2:7b:62:d2:c3:42:82:86:e0:a3:02:
                    54:a9:8b:7d:b8:18:c0:71:0f:b4:89:d4:9b:da:4b:
                    fd:7b:0d:c4:61:6c:89:91:44:93:77:58:d7:3d:11:
                    39:ef:82:f5:9f:04:9e:c4:a3:45:0a:7f:92:7c:92:
                    41:93:cc:c7:1d:c9:83:b6:24:50:0a:59:6c:f9:eb:
                    a5:21:26:b4:db:f8:6e:d8:c1:16:5d:08:6b:4a:e5:
                    3e:00:56:91:26:0d:31:6f:b0:76:a9:3d:e2:89:55:
                    b1:5e:57:e8:b3:aa:1e:43:3f:d5:2c:3e:3a:21:b0:
                    6a:65:7a:e7:e6:b7:48:9f:ed:6f:3c:63:85:5b:55:
                    0c:85:dd:6a:44:ac:ba:61:40:d7:4c:31:9f:49:0e:
                    1c:6e:38:f9:72:72:0a:7d:ee:55:6d:29:43:e5:31:
                    9c:26:86:40:0f:5c:62:47:e1:70:7e:f2:d4:5a:80:
                    11:ed:f4:00:06:b1:7c:79:cd:39:d1:74:3c:5f:8c:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2A:E2:E2:03:14:C9:BE:9A:D7:72:AF:31:13:89:8F:09:41:85:98
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/syri4gMUyb6a13KvMROJjwlBhZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.188.0/22
                  185.185.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:cd:8b:65:9b:cf:50:db:d2:f3:27:1f:41:18:1a:0b:f8:80:
         fe:ed:46:ab:d6:9d:7f:97:65:e8:67:e0:1e:9d:05:74:66:71:
         e2:cf:56:0d:42:a5:63:9d:f4:8b:41:fd:8b:66:09:81:37:70:
         e6:9d:fc:a9:94:36:d0:ba:c2:e1:00:c5:4d:78:9b:70:d1:ea:
         54:72:b8:66:0f:fe:c2:34:b3:d2:52:2a:ae:52:a0:55:1f:ee:
         0c:b3:6d:c3:8d:02:62:11:82:3e:d7:09:f6:73:b8:4d:ea:cc:
         ff:18:d1:80:8d:4c:93:db:ad:b7:1f:12:cc:34:a3:84:2c:18:
         bc:7b:cf:db:a0:f0:7e:65:11:4d:bc:3d:a3:4c:bf:07:ab:fe:
         31:a5:3f:f8:05:d1:69:bb:4f:f2:41:6a:67:1c:70:9a:4c:cc:
         d8:4d:f2:3e:b5:c8:a9:0a:01:02:26:9d:47:1d:7a:39:06:51:
         07:9c:fc:a6:b7:c9:4a:0e:1c:9f:b5:49:1a:a1:a0:4c:18:ab:
         2e:7c:e5:9e:38:6e:48:f3:34:46:2f:94:96:1a:68:49:71:57:
         62:b4:ba:2e:b1:27:b6:73:4e:e0:47:6c:8e:75:78:98:93:e5:
         7e:fd:74:41:ca:eb:06:1f:c6:68:01:e9:1c:c7:4a:8d:38:4d:
         56:22:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:16:08 2026 by rpki-client