This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0GSydxTW6xGwF7XoaC_3qBD9TGo.roa
File:                     0GSydxTW6xGwF7XoaC_3qBD9TGo.roa (raw, json)
Hash identifier:          TnLeJJN1JWScmt0yCQqZyAergB2HY6Xg68MgzVn++XU=
Subject key identifier:   D0:64:B2:77:14:D6:EB:11:B0:17:B5:E8:68:2F:F7:A8:10:FD:4C:6A
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B3596BF544301936C7285D3D28FF818
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0GSydxTW6xGwF7XoaC_3qBD9TGo.roa
Signing time:             Thu 01 Jan 2026 20:17:48 +0000
ROA not before:           Thu 01 Jan 2026 20:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211983
IP address blocks:        80.96.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:96:bf:54:43:01:93:6c:72:85:d3:d2:8f:f8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d064b27714d6eb11b017b5e8682ff7a810fd4c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:3e:60:24:4c:68:7a:e7:b7:1b:4a:a0:f9:
                    61:bd:dd:fb:21:49:94:65:29:8e:17:e2:88:ef:0a:
                    01:9b:c2:c4:e6:72:5a:53:9b:7e:2b:db:02:24:ed:
                    b3:69:7a:f9:bb:c5:a9:ed:51:33:1b:40:08:32:ce:
                    20:33:85:3d:df:b3:82:02:b5:6c:34:7b:12:a1:71:
                    c8:a3:7d:f5:04:e6:ba:05:a7:c1:f6:aa:5c:0e:b2:
                    0c:8f:26:b5:96:ba:69:77:de:e1:67:92:c5:e2:63:
                    f1:73:ef:b8:b0:b8:9a:0d:a0:54:fd:81:3e:b8:92:
                    52:99:24:fa:1d:5e:e3:f8:4f:6b:54:88:09:c0:21:
                    77:53:69:c1:fa:72:93:4d:81:28:13:fc:22:24:22:
                    11:a8:31:53:e2:4d:b9:06:6f:90:d8:da:67:b8:a6:
                    8a:22:76:f7:13:1c:ed:ef:30:41:68:d4:83:aa:2d:
                    41:55:cb:eb:35:39:66:86:5e:86:0d:14:70:96:3a:
                    0c:dd:e9:34:c7:47:c3:9b:3b:9b:bf:5e:ee:6f:6b:
                    83:e6:9f:48:a0:f4:c9:b6:48:78:7c:57:7e:ac:02:
                    f6:0e:2b:70:16:99:60:96:6b:52:dd:63:14:54:c5:
                    86:78:4a:42:49:59:48:91:ef:fe:57:d8:d2:7a:10:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:64:B2:77:14:D6:EB:11:B0:17:B5:E8:68:2F:F7:A8:10:FD:4C:6A
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0GSydxTW6xGwF7XoaC_3qBD9TGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:f7:16:70:d7:28:bc:ff:fc:71:68:b9:fe:15:42:7a:93:5f:
         1f:ea:6b:27:e5:5c:b0:73:ce:99:7c:35:6d:ee:dc:ac:59:d2:
         7b:55:c5:f4:84:2a:46:7a:35:30:2b:84:03:68:fd:83:63:a2:
         ee:e8:5f:e4:6b:ac:95:6b:91:e4:03:4f:0a:35:9c:dc:17:33:
         98:23:10:e5:e6:01:0d:e0:b3:cf:8b:27:df:0e:1d:95:3f:12:
         04:fc:fd:e3:07:33:bf:13:6b:a3:68:77:a2:31:e1:9d:aa:53:
         d2:ea:97:1c:2c:c5:e8:5d:c6:34:c4:8a:2c:f6:4a:43:58:5b:
         c2:8b:ec:46:74:c0:bd:8e:ad:6a:36:b1:ef:0c:ca:15:d1:48:
         fe:ab:cc:12:36:02:a0:2b:79:3b:41:97:83:a2:0a:a0:7c:3c:
         92:84:a5:7b:2c:42:ce:43:14:94:4e:4f:ee:b5:63:c9:53:d1:
         c6:c5:a3:bb:a8:42:df:b8:73:73:d7:3a:0a:b4:c3:11:7d:e8:
         88:42:6d:c1:51:8b:95:76:8b:0f:62:d2:a0:c8:cf:f6:13:8b:
         64:41:3c:fc:ec:b5:b6:ee:7a:ff:e7:be:88:a8:c3:ca:32:40:
         6b:ee:7d:09:cf:4f:ac:d5:fe:22:0c:91:c5:2a:59:4e:30:28:
         9e:14:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:57 2026 by rpki-client