This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RkV3Run-RVR0s8CLAP2-1tdryDg.roa
File:                     RkV3Run-RVR0s8CLAP2-1tdryDg.roa (raw, json)
Hash identifier:          kG15jRP1/+ZgrhnWIUKP3FUaw3ys/6j4AfWPdjj1iYs=
Subject key identifier:   46:45:77:46:E9:FE:45:54:74:B3:C0:8B:00:FD:BE:D6:D7:6B:C8:38
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A2FA9B55CA666C2457630B56159F86
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RkV3Run-RVR0s8CLAP2-1tdryDg.roa
Signing time:             Thu 01 Jan 2026 08:18:25 +0000
ROA not before:           Thu 01 Jan 2026 08:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43391
IP address blocks:        194.180.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:fa:9b:55:ca:66:6c:24:57:63:0b:56:15:9f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46457746e9fe455474b3c08b00fdbed6d76bc838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:9f:87:33:7f:16:10:dc:58:31:60:a8:79:
                    39:1d:9f:fc:f8:62:23:41:35:91:0a:09:f5:b7:bb:
                    af:52:79:f8:e5:63:5b:57:60:63:21:0a:24:d3:35:
                    bc:e3:c9:f1:bb:ed:e9:fa:b4:38:64:39:57:f2:9f:
                    2b:0f:1d:71:eb:58:3f:9c:63:28:90:c0:4b:d4:9e:
                    af:88:0d:76:ed:e7:f6:0c:16:51:84:0e:af:d3:c9:
                    02:26:cd:51:6c:3d:51:98:13:6b:44:1f:1b:23:b4:
                    fd:c5:a4:13:26:ed:69:e9:2e:95:87:c1:34:48:54:
                    19:03:40:a9:6a:68:2b:a8:19:97:de:b5:a4:70:67:
                    8e:b2:78:ae:d2:94:42:e8:02:b5:79:f5:2c:25:20:
                    0d:cd:e3:f7:d6:07:64:30:a9:68:26:53:fe:63:91:
                    5a:6c:d9:66:73:3c:6c:1e:1b:ea:f9:ef:5e:4a:63:
                    6c:75:92:aa:68:1a:f5:7d:f5:16:d2:b9:e8:a4:81:
                    fa:7c:91:6f:1c:09:c8:10:24:69:c4:e6:a4:af:9a:
                    01:00:64:3d:15:f3:e6:f9:1c:8e:6e:cb:bc:7b:28:
                    fa:34:0b:fe:2e:76:eb:cf:88:a5:c8:36:ca:36:c2:
                    06:f5:48:76:7f:e9:df:13:58:d6:03:91:68:d6:88:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:45:77:46:E9:FE:45:54:74:B3:C0:8B:00:FD:BE:D6:D7:6B:C8:38
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RkV3Run-RVR0s8CLAP2-1tdryDg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:3a:d1:f5:4b:e8:3e:da:09:6e:cb:53:be:75:a0:93:37:6d:
         94:d4:65:9b:c7:d7:69:06:9f:77:dc:57:4b:2b:39:88:44:1a:
         f2:9f:86:b7:b0:a4:5e:94:04:c7:28:94:96:b7:9a:f8:84:e9:
         2d:f5:e2:bd:dd:9e:26:f7:09:a8:17:02:81:be:87:80:f1:b5:
         2f:e5:88:92:e6:09:11:f5:e2:89:09:08:cb:65:86:49:2b:2f:
         01:95:af:5e:2e:ba:6e:99:e5:e9:17:a0:1a:35:48:dd:63:63:
         41:e2:37:ba:6f:4d:90:cc:06:11:a0:04:70:bd:4d:2b:37:87:
         fa:f0:80:dc:2b:d7:9e:3d:86:46:46:3d:fa:fd:e9:3c:2b:be:
         a4:f2:d7:81:43:59:86:c3:9d:a2:c4:f6:5a:2e:21:9b:50:e1:
         69:23:56:84:a7:4f:45:ef:28:ca:ae:48:7c:60:66:3a:bf:6e:
         fb:f6:c2:97:3f:bf:f5:b3:67:aa:f1:c4:40:64:4b:d0:4f:63:
         01:e7:b7:21:f8:72:d0:a1:98:6d:89:d8:84:bf:b5:7b:67:76:
         ba:cf:54:8d:c9:5f:21:d8:9c:4c:b2:e8:12:da:f3:3d:b9:62:
         a4:2d:3b:4d:c3:2b:c9:b0:57:88:77:f9:be:11:df:5e:06:92:
         ab:36:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:03:10 2026 by rpki-client