This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/18Szc_NOHV7yuL-RPwFFVIdly00.roa
File:                     18Szc_NOHV7yuL-RPwFFVIdly00.roa (raw, json)
Hash identifier:          ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=
Subject key identifier:   D7:C4:B3:73:F3:4E:1D:5E:F2:B8:BF:91:3F:01:45:54:87:65:CB:4D
Certificate issuer:       /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial:       019B783562373542F530AEE44FEA7B89D8B3
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/18Szc_NOHV7yuL-RPwFFVIdly00.roa
Signing time:             Thu 01 Jan 2026 06:18:43 +0000
ROA not before:           Thu 01 Jan 2026 06:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     22773
IP address blocks:        203.81.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:62:37:35:42:f5:30:ae:e4:4f:ea:7b:89:d8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
        Validity
            Not Before: Jan  1 06:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7c4b373f34e1d5ef2b8bf913f0145548765cb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:cf:43:9a:7a:47:e1:fd:81:36:34:2c:65:
                    95:b7:88:8e:fb:3d:0c:07:71:c2:8b:c0:b6:60:a8:
                    27:ba:ba:e2:cf:a9:04:fa:3c:fe:fd:38:6c:d7:cc:
                    20:49:ed:ed:31:e9:b8:8f:3c:91:60:4a:6f:4b:fe:
                    95:6d:f9:18:ad:68:61:dc:f6:fd:ff:a8:27:71:43:
                    04:0c:69:8e:47:96:6e:8d:ab:ae:e8:7f:3a:53:c2:
                    dd:92:67:60:fe:cc:d1:e7:98:17:6d:37:8d:93:75:
                    87:99:0b:4f:7f:e7:af:3d:dc:86:32:7a:47:01:25:
                    7c:81:45:9a:11:e7:3a:b8:09:3d:29:c5:22:c8:7e:
                    70:fa:a3:98:c2:ab:1e:15:14:fa:31:a0:aa:b5:fb:
                    27:02:20:de:e3:7c:6c:67:b5:a1:94:91:62:fe:b5:
                    89:89:b8:9d:64:27:3b:fe:b1:0f:8f:f0:ea:52:b8:
                    e0:00:cb:94:50:92:25:06:fb:14:2c:36:0b:f8:b1:
                    8a:0e:02:2e:ae:c0:c2:ca:b7:0f:d3:4c:2c:a9:2b:
                    c6:78:5a:5b:03:82:8c:55:b6:b8:f4:a3:58:86:cb:
                    3b:12:42:b2:e5:f5:48:70:91:21:73:52:9f:0d:14:
                    73:65:6c:f1:6c:9f:7a:da:ed:23:2c:8c:72:d3:8b:
                    d2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C4:B3:73:F3:4E:1D:5E:F2:B8:BF:91:3F:01:45:54:87:65:CB:4D
            X509v3 Authority Key Identifier:
                keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/18Szc_NOHV7yuL-RPwFFVIdly00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.81.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:02:13:1d:37:b3:99:48:a6:f5:58:06:4e:34:b9:36:a7:
         28:c1:41:83:4c:33:24:3b:00:a5:ab:1f:4e:e1:30:82:d0:4a:
         9d:66:06:bb:35:4a:6a:08:ad:3e:36:cc:b9:36:0c:a3:b3:10:
         c6:99:8b:4c:aa:6a:5f:89:5b:38:03:73:67:f3:df:bb:30:3a:
         99:7a:f9:0f:5a:7b:bb:61:4d:39:63:64:78:af:ee:95:9d:88:
         7f:5a:f1:40:a9:4f:a8:36:4d:5d:01:a6:30:9c:55:15:60:7d:
         01:92:18:01:fa:1b:8b:d0:31:3c:c7:0b:b4:f6:eb:a2:ff:f6:
         b7:71:83:d3:ad:49:29:a6:c7:10:2a:21:ce:61:08:9f:32:f2:
         b4:5b:c7:f0:55:57:7a:a8:7d:3c:d9:cd:3f:7c:87:81:fc:0a:
         df:b0:b3:fc:d8:e8:78:ce:fa:ab:96:af:81:47:ee:06:3b:15:
         60:60:6f:ce:ea:cd:0a:a5:d7:87:7c:7d:d1:50:15:f8:b1:2e:
         8c:f6:fe:39:21:ed:af:f0:d8:19:ef:06:3e:81:f1:82:e7:4a:
         9e:e7:37:5a:11:22:59:f8:fa:3e:3b:47:dd:72:1a:12:6a:f5:
         da:96:f1:ef:23:af:18:82:c0:01:1f:74:e7:4e:88:0a:f2:02:
         04:15:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:49:57 2026 by rpki-client