This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/SyTECHnKame2pR-WzzBACELK5so.roa
File:                     SyTECHnKame2pR-WzzBACELK5so.roa (raw, json)
Hash identifier:          D6uyq3R4sjj51J6VyJImEhA7sRnaGFtlHuGJYpVGBBM=
Subject key identifier:   4B:24:C4:08:79:CA:6A:67:B6:A5:1F:96:CF:30:40:08:42:CA:E6:CA
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       019B77C7664FBB466656687BAE6F7C281CC1
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/SyTECHnKame2pR-WzzBACELK5so.roa
Signing time:             Thu 01 Jan 2026 04:18:35 +0000
ROA not before:           Thu 01 Jan 2026 04:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31224
IP address blocks:        31.173.96.0/24 maxlen: 24
                          31.173.97.0/24 maxlen: 24
                          31.173.99.0/24 maxlen: 24
                          31.173.100.0/23 maxlen: 23
                          31.173.100.0/24 maxlen: 24
                          31.173.101.0/24 maxlen: 24
                          31.173.102.0/24 maxlen: 24
                          31.173.103.0/24 maxlen: 24
                          31.173.120.0/24 maxlen: 24
                          31.173.121.0/24 maxlen: 24
                          31.173.122.0/24 maxlen: 24
                          31.173.123.0/24 maxlen: 24
                          31.173.124.0/24 maxlen: 24
                          31.173.125.0/24 maxlen: 24
                          31.173.126.0/24 maxlen: 24
                          31.173.127.0/24 maxlen: 24
                          37.29.44.0/22 maxlen: 22
                          46.229.132.0/22 maxlen: 22
                          78.25.88.0/22 maxlen: 22
                          80.253.8.0/24 maxlen: 24
                          80.253.9.0/24 maxlen: 24
                          83.149.32.0/22 maxlen: 22
                          83.149.34.0/24 maxlen: 24
                          83.149.36.0/22 maxlen: 22
                          83.149.37.0/24 maxlen: 24
                          83.149.39.0/24 maxlen: 24
                          83.169.216.0/24 maxlen: 24
                          85.26.192.0/22 maxlen: 22
                          128.204.68.0/24 maxlen: 24
                          128.204.69.0/24 maxlen: 24
                          178.176.104.0/21 maxlen: 21
                          178.176.112.0/24 maxlen: 24
                          178.176.113.0/24 maxlen: 24
                          178.178.88.0/22 maxlen: 22
                          178.178.92.0/22 maxlen: 22
                          178.178.229.0/24 maxlen: 24
                          178.178.230.0/24 maxlen: 24
                          2a03:d000:5000::/40 maxlen: 40
                          2a03:d000:5000::/41 maxlen: 41
                          2a03:d000:5080::/41 maxlen: 41
                          2a03:d000:5100::/40 maxlen: 40
                          2a03:d000:5100::/41 maxlen: 41
                          2a03:d000:5180::/41 maxlen: 41
                          2a03:d000:5200::/41 maxlen: 41
                          2a03:d000:5270::/44 maxlen: 44
                          2a03:d000:5280::/41 maxlen: 41
                          2a03:d000:52f0::/44 maxlen: 44
                          2a03:d000:5301::/48 maxlen: 48
                          2a03:d000:5302::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:66:4f:bb:46:66:56:68:7b:ae:6f:7c:28:1c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan  1 04:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b24c40879ca6a67b6a51f96cf30400842cae6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:b2:94:e2:a4:e8:cf:3d:88:60:01:15:f7:
                    16:cd:5c:02:1f:c4:f8:e5:8e:70:ca:d3:1f:7b:17:
                    00:ca:97:9c:f9:92:a6:07:8e:db:ca:bf:75:50:a2:
                    9f:c5:b3:ff:9b:58:da:5a:80:12:08:ec:0d:61:f3:
                    57:7d:b2:d7:d9:db:2a:1f:b1:e1:f6:4b:4e:c3:5b:
                    66:83:10:3c:ec:f7:e2:c6:25:5b:83:45:32:2f:99:
                    6d:5e:6c:63:06:58:66:c3:6b:8b:4b:77:b9:0a:dc:
                    12:19:a8:e6:28:6b:7c:50:53:ea:cc:31:79:56:35:
                    36:5a:33:04:b3:e3:ab:14:5e:0b:6b:9f:71:56:58:
                    0f:a2:12:18:42:63:27:61:50:03:6e:09:b7:8f:9c:
                    61:fd:d7:b9:4b:1d:77:04:7a:ee:e7:ca:a7:a2:18:
                    d0:31:aa:07:d8:db:c6:df:6d:00:c5:17:f1:95:c4:
                    a9:21:8c:75:3c:b0:4c:42:22:ac:c8:65:7e:5f:29:
                    72:6e:9a:44:f8:f5:7c:db:9e:b9:e2:33:fc:9c:6e:
                    51:4e:20:43:da:17:97:24:8b:4e:fd:6c:97:48:0b:
                    65:cb:27:96:5d:6f:f3:2f:4e:d7:1d:7d:75:fd:88:
                    be:53:22:7d:58:b2:bc:e4:7b:e8:d0:8c:b0:74:6d:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:24:C4:08:79:CA:6A:67:B6:A5:1F:96:CF:30:40:08:42:CA:E6:CA
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/SyTECHnKame2pR-WzzBACELK5so.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.96.0/23
                  31.173.99.0-31.173.103.255
                  31.173.120.0/21
                  37.29.44.0/22
                  46.229.132.0/22
                  78.25.88.0/22
                  80.253.8.0/23
                  83.149.32.0/21
                  83.169.216.0/24
                  85.26.192.0/22
                  128.204.68.0/23
                  178.176.104.0-178.176.113.255
                  178.178.88.0/21
                  178.178.229.0-178.178.230.255
                IPv6:
                  2a03:d000:5000::-2a03:d000:52ff:ffff:ffff:ffff:ffff:ffff
                  2a03:d000:5301::-2a03:d000:5302:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         01:25:83:18:d3:c8:f0:05:6b:d8:be:41:01:77:e6:40:60:68:
         62:41:63:46:72:30:0f:77:a3:23:a8:de:4b:de:31:6c:a8:e3:
         01:07:62:51:81:73:56:c3:ec:b5:56:a4:49:86:82:4d:85:f5:
         92:de:cf:b3:a8:51:77:2c:ab:81:71:36:06:60:9c:76:05:2f:
         a2:1f:28:5c:10:8d:e3:3e:de:69:ac:bd:46:7f:78:bf:52:2f:
         3a:7c:68:dc:dd:71:73:b0:ec:77:77:fd:26:ad:64:32:f4:be:
         db:36:4e:d1:1c:d3:6f:25:33:68:d2:73:46:b7:a0:c0:03:74:
         ff:1b:89:12:36:7c:10:f7:b9:a2:f1:b9:b7:16:8c:a4:0d:92:
         91:e7:7c:a5:74:fa:53:29:e8:4e:be:f8:c8:b4:f7:12:d0:9e:
         0a:cd:51:0f:45:dc:32:e2:e2:dd:d8:2a:5b:29:e1:5a:ca:46:
         b4:58:b3:43:32:ce:aa:4b:f3:3f:52:d8:c2:74:26:fb:57:31:
         c5:fd:c2:ef:60:98:30:74:17:fd:c9:eb:e8:8e:2b:03:14:a4:
         4f:01:4a:6c:7c:c0:51:99:1c:5a:dd:64:99:cf:9a:e8:38:bd:
         04:a3:1a:85:0b:b3:7f:f8:cf:9a:65:66:45:c4:f4:38:22:30:
         9e:a2:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:06 2026 by rpki-client