This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/SjYtnUoE1MgNRJfs8RlW1nH9kvs.roa
File:                     SjYtnUoE1MgNRJfs8RlW1nH9kvs.roa (raw, json)
Hash identifier:          ibPfNo9LyproDwVJGqgqacCTQtp2ocsIAhs9rvVW+Cg=
Subject key identifier:   4A:36:2D:9D:4A:04:D4:C8:0D:44:97:EC:F1:19:56:D6:71:FD:92:FB
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019B7C804C407F63FA2FFD3E76C99459698E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/SjYtnUoE1MgNRJfs8RlW1nH9kvs.roa
Signing time:             Fri 02 Jan 2026 02:19:01 +0000
ROA not before:           Fri 02 Jan 2026 02:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9123
IP address blocks:        80.242.57.0/24 maxlen: 24
                          92.63.176.0/22 maxlen: 22
                          92.63.176.0/24 maxlen: 24
                          92.63.177.0/24 maxlen: 24
                          92.63.178.0/24 maxlen: 24
                          92.63.179.0/24 maxlen: 24
                          109.196.98.0/24 maxlen: 24
                          109.196.99.0/24 maxlen: 24
                          109.196.100.0/24 maxlen: 24
                          109.196.101.0/24 maxlen: 24
                          109.196.102.0/24 maxlen: 24
                          109.196.103.0/24 maxlen: 24
                          185.42.14.0/24 maxlen: 24
                          217.78.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:4c:40:7f:63:fa:2f:fd:3e:76:c9:94:59:69:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 02:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a362d9d4a04d4c80d4497ecf11956d671fd92fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:db:46:7b:6f:c7:42:bb:0d:c7:7c:a1:1a:
                    02:3d:da:64:a6:2b:f5:55:4e:72:32:c5:ac:22:c7:
                    54:b9:91:6a:1f:b9:22:bb:37:2e:17:81:59:5c:ad:
                    33:40:79:88:d5:6d:a3:e2:90:1e:fd:c8:ad:7f:62:
                    77:77:47:3a:bf:3d:a7:c5:70:99:fd:53:9d:ab:c2:
                    02:75:95:56:53:4f:e7:d7:3a:1a:2a:54:0c:79:04:
                    19:d9:b5:50:f6:5b:c5:5a:53:e0:d8:0b:ee:b9:c6:
                    46:cb:57:8f:cc:5e:29:2f:51:e4:82:4d:21:b9:fd:
                    c4:07:b9:c0:67:ba:a9:60:48:b7:f1:75:ab:d7:2e:
                    6a:2f:d6:56:28:88:7c:33:fe:a6:19:0b:56:ca:59:
                    5e:92:e4:27:e5:f9:96:83:43:d8:e4:44:67:1c:8f:
                    f3:4c:84:d5:f2:a5:d7:c1:b6:e9:ff:42:1c:93:be:
                    59:f6:27:80:b4:70:ac:51:4d:5e:11:8b:ba:e6:ac:
                    66:e0:c6:06:a4:8c:81:50:08:7a:6b:a8:5e:e4:95:
                    b9:3e:76:62:04:dc:21:61:a6:60:20:98:c2:10:f6:
                    45:42:99:75:28:59:60:b8:82:e1:c1:7b:df:c0:3e:
                    38:ea:f6:6b:e7:01:11:6c:a7:9a:c1:ee:bb:35:53:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:2D:9D:4A:04:D4:C8:0D:44:97:EC:F1:19:56:D6:71:FD:92:FB
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/SjYtnUoE1MgNRJfs8RlW1nH9kvs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.242.57.0/24
                  92.63.176.0/22
                  109.196.98.0-109.196.103.255
                  185.42.14.0/24
                  217.78.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:78:98:27:3b:aa:9c:b0:06:a5:82:49:31:a8:97:c2:c9:e9:
         4e:b0:50:85:8c:35:27:4e:63:9e:5c:7f:50:21:33:04:44:0b:
         ed:24:a8:b5:b9:7d:ca:52:27:72:73:7c:a0:fd:45:b0:60:b0:
         1b:6f:2c:34:ec:7d:96:59:0b:80:37:bc:70:b3:b6:8c:09:0d:
         4b:ef:96:48:e2:70:b2:46:d8:b2:c8:82:2e:44:4e:10:ad:05:
         fc:7d:ba:bc:cd:93:a8:a9:c7:8a:a6:7f:c1:d0:07:cb:f1:cd:
         69:2d:dd:ca:f5:14:48:26:93:34:c7:07:d6:2b:71:75:b0:5f:
         6a:aa:07:03:27:0b:b9:dc:80:2f:c0:fd:c4:48:b5:c0:eb:f8:
         ae:9e:c0:8a:f1:3c:40:ec:d9:46:b0:e9:c1:75:f6:02:e0:57:
         cf:b4:2b:c1:b3:83:b7:90:36:11:2c:97:9a:68:2a:ed:16:60:
         38:4b:5f:f0:9b:54:a5:42:4b:fe:b0:40:86:42:f7:75:99:65:
         8f:0a:56:06:32:64:41:7c:35:82:9e:3b:98:b7:5d:b8:9a:54:
         70:18:74:12:aa:2d:81:83:fd:98:3a:b5:8d:51:c1:85:dc:50:
         46:81:6f:61:54:95:e2:fa:73:d5:48:3d:e6:22:0d:97:1e:e3:
         bb:f7:9e:57
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZt8gExAf2P6L/0+dsmUWWmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTM2MmQ5ZDRhMDRkNGM4MGQ0NDk3ZWNmMTE5NTZkNjcxZmQ5MmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6PbRntvx0K7Dcd8oRoCPdpkpiv1
VU5yMsWsIsdUuZFqH7kiuzcuF4FZXK0zQHmI1W2j4pAe/citf2J3d0c6vz2nxXCZ
/VOdq8ICdZVWU0/n1zoaKlQMeQQZ2bVQ9lvFWlPg2AvuucZGy1ePzF4pL1Hkgk0h
uf3EB7nAZ7qpYEi38XWr1y5qL9ZWKIh8M/6mGQtWyllekuQn5fmWg0PY5ERnHI/z
TITV8qXXwbbp/0Ick75Z9ieAtHCsUU1eEYu65qxm4MYGpIyBUAh6a6he5JW5PnZi
BNwhYaZgIJjCEPZFQpl1KFlguILhwXvfwD446vZr5wERbKeawe67NVMy3wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFEo2LZ1KBNTIDUSX7PEZVtZx/ZL7MB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvU2pZdG5Vb0UxTWdOUkpmczhSbFcxbkg5a3ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAUPI5AwQC
XD+wMAwDBAFtxGIDBANtxGADBAC5Kg4DBADZTuowDQYJKoZIhvcNAQELBQADggEB
AI94mCc7qpywBqWCSTGol8LJ6U6wUIWMNSdOY55cf1AhMwREC+0kqLW5fcpSJ3Jz
fKD9RbBgsBtvLDTsfZZZC4A3vHCztowJDUvvlkjicLJG2LLIgi5EThCtBfx9urzN
k6ipx4qmf8HQB8vxzWkt3cr1FEgmkzTHB9YrcXWwX2qqBwMnC7ncgC/A/cRItcDr
+K6ewIrxPEDs2Uaw6cF19gLgV8+0K8Gzg7eQNhEsl5poKu0WYDhLX/CbVKVCS/6w
QIZC93WZZY8KVgYyZEF8NYKeO5i3XbiaVHAYdBKqLYGD/Zg6tY1RwYXcUEaBb2FU
leL6c9VIPeYiDZce47v3nlc=
-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:48 2026 by rpki-client