This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mSyodXu8VenvTrUktd7spZVLm6E.roa
File:                     mSyodXu8VenvTrUktd7spZVLm6E.roa (raw, json)
Hash identifier:          gTZ9eSYSNQkPtjj6d/+ziToT1/tHJOxvg3Oh548f7gs=
Subject key identifier:   99:2C:A8:75:7B:BC:55:E9:EF:4E:B5:24:B5:DE:EC:A5:95:4B:9B:A1
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       019B7F8547DDCE0765345D12350E1AE5B3C8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mSyodXu8VenvTrUktd7spZVLm6E.roa
Signing time:             Fri 02 Jan 2026 16:23:19 +0000
ROA not before:           Fri 02 Jan 2026 16:23:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34549
IP address blocks:        194.87.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:47:dd:ce:07:65:34:5d:12:35:0e:1a:e5:b3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  2 16:23:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=992ca8757bbc55e9ef4eb524b5deeca5954b9ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:43:74:96:f5:65:c0:bd:ec:59:a1:87:e2:
                    07:e6:2f:c0:4e:8c:7d:b5:7e:d3:d8:aa:fd:c0:bb:
                    63:14:d9:e2:ee:15:f3:36:15:0a:83:3c:a3:90:6a:
                    18:e3:27:f0:84:d2:38:e8:27:d8:53:cc:5c:45:c1:
                    42:59:f3:69:3a:ec:7d:1a:82:f0:81:3a:3e:f5:29:
                    02:80:46:dc:9c:eb:39:f5:81:f3:03:a2:4d:3d:3f:
                    9c:88:85:36:4f:2b:b9:db:c8:07:ba:99:a7:07:f4:
                    81:d9:04:70:ec:14:b3:81:94:0a:34:af:c2:ac:81:
                    a8:d5:67:5e:76:e0:ac:0e:6d:6c:0e:7e:24:99:f9:
                    00:9b:5d:81:ab:1f:45:e5:10:9e:0a:d6:20:73:02:
                    48:21:38:7a:b3:96:e0:6c:09:3c:91:ca:25:ac:7e:
                    26:87:5a:5d:ba:69:30:e8:aa:32:8e:27:ee:56:e7:
                    99:40:a4:52:b7:1c:07:43:4e:02:20:46:05:b0:30:
                    98:0d:73:ef:7b:38:f7:0e:61:e2:0f:99:99:20:df:
                    c1:2b:31:59:8b:06:43:31:59:46:ce:2a:a3:a9:fe:
                    03:79:e5:29:f3:ee:26:86:df:09:8a:74:af:9a:32:
                    31:49:6a:7d:9d:bb:13:0e:ac:76:ef:a6:48:ab:3c:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2C:A8:75:7B:BC:55:E9:EF:4E:B5:24:B5:DE:EC:A5:95:4B:9B:A1
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mSyodXu8VenvTrUktd7spZVLm6E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:88:b9:07:94:e9:75:8b:13:17:ea:d8:3b:60:e4:75:cc:3c:
         3e:a6:46:60:5e:1a:65:5f:41:39:a7:7f:fc:19:20:9f:ae:d8:
         ae:d2:6e:88:5b:d7:b6:c2:b1:9e:2c:9f:d3:b2:86:9e:5a:b8:
         bc:22:99:77:cb:4a:24:1c:53:d7:1f:0f:69:a8:36:e8:5e:52:
         07:7b:1a:de:6b:fb:f5:90:18:2b:84:ef:7c:e4:22:ab:bd:6c:
         02:fb:e9:ab:8f:5b:e8:65:2a:1e:9d:29:38:26:38:0e:05:81:
         4e:00:e2:c2:d9:33:77:74:e1:9f:81:62:80:3d:6f:7f:13:e7:
         05:88:64:85:f3:f6:e3:a6:4f:7a:49:c5:32:93:9d:5b:8f:76:
         a7:25:9a:62:5b:dd:43:c2:7a:7e:8f:57:89:62:7f:ed:e6:33:
         c6:0c:4b:b0:50:ca:51:a4:c9:d4:08:53:40:a7:0b:89:67:60:
         10:be:ad:f6:c4:41:e6:da:d6:f1:02:4c:69:1f:dd:fb:31:9f:
         40:ac:88:08:0d:5c:04:8a:45:78:fe:2a:39:85:86:a1:79:23:
         6f:36:42:e5:6c:56:98:73:63:14:13:30:79:ba:e0:55:7e:cd:
         26:c7:54:5d:a4:e7:9b:f2:1b:17:0d:9c:69:d3:78:64:24:9c:
         f5:ea:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:57:53 2026 by rpki-client