This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0Wru578xNJKvWbCAF6lIjitDycs.roa
File:                     0Wru578xNJKvWbCAF6lIjitDycs.roa (raw, json)
Hash identifier:          9hVMPUbwQX1w/eWJpSlwdBU3qjWD4PaTFEWv2bpRRlQ=
Subject key identifier:   D1:6A:EE:E7:BF:31:34:92:AF:59:B0:80:17:A9:48:8E:2B:43:C9:CB
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B35851A27BB4F14173EA803FE2C0FC0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0Wru578xNJKvWbCAF6lIjitDycs.roa
Signing time:             Thu 01 Jan 2026 20:17:43 +0000
ROA not before:           Thu 01 Jan 2026 20:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61353
IP address blocks:        81.181.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:85:1a:27:bb:4f:14:17:3e:a8:03:fe:2c:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d16aeee7bf313492af59b08017a9488e2b43c9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:81:0c:36:b2:ee:b3:c1:c1:51:56:e1:10:
                    f2:b6:37:f5:f1:38:cb:65:92:09:5d:6b:f6:2a:27:
                    3a:76:05:38:98:b1:79:3b:24:91:cf:b0:8b:cc:dc:
                    7b:f5:7b:2b:13:d4:f0:e3:2f:34:ed:76:f8:b0:7e:
                    c2:ff:33:07:e9:1f:5c:f1:b8:08:28:b8:06:03:7d:
                    af:a7:ad:0e:e0:87:7b:e5:43:b9:11:be:86:8c:5c:
                    f9:58:d3:75:ac:ef:1e:13:9b:28:d5:e4:2c:7d:f3:
                    93:de:46:fc:b6:a6:34:78:9c:ea:e3:db:a7:54:a1:
                    cc:c4:64:86:70:a7:f3:71:60:12:74:51:f8:1e:07:
                    98:1a:9c:e3:a5:5f:4a:16:87:d0:93:26:e4:46:05:
                    b4:b3:94:a9:d0:ce:bc:28:65:de:f7:26:47:f3:29:
                    cd:0a:fe:4b:ae:6c:4b:a4:33:c0:5a:88:8d:d4:fb:
                    29:04:e6:29:12:a9:d0:6e:0a:b7:6b:ee:87:95:53:
                    7f:43:fd:d3:37:94:27:8e:70:4e:e8:79:04:59:25:
                    b6:48:f7:c8:c7:d8:3d:72:ba:da:2f:4f:65:b8:1d:
                    f2:35:a1:3e:a8:7f:a2:b8:75:31:fe:cb:c7:ae:82:
                    12:62:7f:26:76:c2:92:a9:22:47:cf:77:7b:b8:e7:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6A:EE:E7:BF:31:34:92:AF:59:B0:80:17:A9:48:8E:2B:43:C9:CB
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0Wru578xNJKvWbCAF6lIjitDycs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c3:f6:f4:54:ce:ee:d2:53:a5:90:f3:f3:66:89:db:c9:85:
         50:95:6f:2c:2a:10:ce:99:60:d2:5b:3c:74:32:88:10:ed:18:
         c8:38:66:95:d5:5e:19:d2:3f:73:c9:aa:ae:21:3d:bc:df:af:
         07:a5:5d:c0:6c:2f:f9:b4:39:e4:8d:e4:a9:2e:8a:81:ee:ff:
         2e:d3:8a:ec:a5:81:24:8b:0f:72:80:d2:85:2a:29:6b:d4:7d:
         90:45:d2:a8:d5:b6:4d:03:ef:42:47:94:e4:aa:a6:69:f4:1b:
         75:45:29:8e:43:72:46:92:7a:20:aa:14:31:87:b7:b5:a1:bb:
         63:a8:d9:a7:bd:ba:8a:0d:a3:dc:c6:66:2f:7a:c3:2c:6c:dd:
         a3:c7:22:eb:4e:4f:eb:2a:aa:a2:2d:6b:69:29:dc:c6:89:9d:
         2c:fc:11:98:d5:cd:b7:97:11:52:be:ab:d2:93:d2:73:95:47:
         17:95:3f:06:dd:75:86:8c:cc:aa:29:e4:87:1d:5e:2d:86:8e:
         ad:93:f3:df:46:ac:ee:1e:2e:d9:cd:3e:d3:ba:b9:76:8d:90:
         9f:bc:2d:d5:b3:79:ca:af:9e:5b:48:18:67:45:77:a0:4f:ba:
         41:77:cb:cb:cd:1e:7c:08:e5:6e:99:f4:ca:b9:f8:30:34:99:
         e5:27:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:06 2026 by rpki-client