This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/9yzkMZa76suy_xBf-fnkwVSYimM.roa
File:                     9yzkMZa76suy_xBf-fnkwVSYimM.roa (raw, json)
Hash identifier:          i3WGO4QDKM02YiC5j5wc43Wp3vFSY3zhmPS5smAe9dE=
Subject key identifier:   F7:2C:E4:31:96:BB:EA:CB:B2:FF:10:5F:F9:F9:E4:C1:54:98:8A:63
Certificate issuer:       /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial:       019B7F153BC588DB64F21E43CD7A09BACF52
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/9yzkMZa76suy_xBf-fnkwVSYimM.roa
Signing time:             Fri 02 Jan 2026 14:20:56 +0000
ROA not before:           Fri 02 Jan 2026 14:20:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13030
IP address blocks:        185.167.79.0/24 maxlen: 24
                          2a13:182::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:3b:c5:88:db:64:f2:1e:43:cd:7a:09:ba:cf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
        Validity
            Not Before: Jan  2 14:20:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f72ce43196bbeacbb2ff105ff9f9e4c154988a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:9b:7c:d2:29:7c:09:c4:00:77:80:c3:38:
                    42:bb:c3:c1:6e:e9:96:3b:f7:44:ee:41:2f:da:64:
                    e9:10:b6:cd:c4:94:b5:7f:8a:81:c6:d3:c3:57:4f:
                    db:ad:f0:27:4d:27:c0:98:81:26:f2:3d:77:7f:78:
                    44:97:c5:eb:4a:06:c0:da:c0:f3:77:29:40:84:b5:
                    b8:6f:88:f1:c6:48:76:9a:34:15:7f:44:68:b8:96:
                    34:ff:37:15:48:a1:f3:7b:eb:53:28:9d:d3:3c:c9:
                    0e:c3:7f:89:a8:39:3a:9c:a5:4f:bc:8e:e4:6f:09:
                    0d:d9:2b:ad:68:cd:f5:cb:e2:1b:60:9e:5d:d4:5f:
                    ca:08:c1:70:78:35:f0:bd:ec:ee:8e:62:6f:b5:a3:
                    93:e0:78:bf:f2:a6:81:87:bc:31:68:9a:18:fa:3a:
                    ae:52:d0:a0:cd:dc:ff:04:af:2e:0b:13:21:c2:d3:
                    e9:df:a2:3a:33:65:51:81:27:83:03:18:bc:fc:00:
                    c8:b4:2a:28:b9:31:13:0a:ff:a5:27:3d:64:28:b1:
                    a0:a6:3b:19:a7:d5:c9:b6:5f:df:04:e4:89:45:fc:
                    12:4d:93:74:94:27:17:eb:8e:29:a1:b3:49:5f:b7:
                    17:ec:8c:70:bf:1e:df:37:d7:7e:20:d5:0d:38:5c:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2C:E4:31:96:BB:EA:CB:B2:FF:10:5F:F9:F9:E4:C1:54:98:8A:63
            X509v3 Authority Key Identifier:
                keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/9yzkMZa76suy_xBf-fnkwVSYimM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.79.0/24
                IPv6:
                  2a13:182::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:d7:cc:9a:d6:c3:91:ef:ca:07:82:8b:3a:bd:48:cc:2e:
         29:ae:e9:99:13:4d:7b:ec:af:d7:da:ba:c2:0b:dd:cf:90:26:
         52:4d:f1:45:26:78:e5:be:c1:97:01:dd:23:c1:4d:32:d8:5d:
         9a:6d:da:11:d5:45:0f:e6:3d:f1:cb:df:4d:de:b2:45:49:4b:
         3e:bd:8a:21:9a:49:05:f5:60:77:bb:03:a3:b5:1c:c7:e6:05:
         e8:78:20:ac:6b:d2:07:9f:12:fd:ff:a5:40:78:f7:e1:be:c4:
         ea:aa:ca:93:16:86:cf:20:43:90:dc:18:3d:6c:9d:98:4f:ba:
         5c:4a:c6:55:cf:bb:08:b7:c6:38:9f:95:b5:6a:68:0a:da:09:
         f7:92:38:c1:60:d5:83:23:c0:a5:74:bc:40:69:75:aa:95:b8:
         7a:d0:09:c1:75:9a:90:35:5f:42:f1:9e:65:eb:af:84:27:3b:
         9d:32:ff:1c:d5:f0:f0:54:5f:34:db:85:d9:3f:de:87:1b:d9:
         0a:42:72:ed:62:0f:37:a8:bb:7a:76:da:40:ab:a2:8a:d6:84:
         c2:32:cb:35:c0:d6:b2:16:f2:03:40:54:32:40:41:1e:13:38:
         5c:10:a3:a5:c7:fb:24:f0:60:ca:3c:1f:6a:e2:ee:9c:fe:13:
         17:9e:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:39 2026 by rpki-client