This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-_NOyKnHHu0ns3BR-o2bRikQMMM.roa
File:                     1-_NOyKnHHu0ns3BR-o2bRikQMMM.roa (raw, json)
Hash identifier:          Z0pmV2Aog4Dc33Uvfv84Zs8AWNp/cKpTSE3Bh+zW0CA=
Subject key identifier:   FB:F3:4E:C8:A9:C7:1E:ED:27:B3:70:51:FA:8D:9B:46:29:10:30:C3
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B358BEB76780618247C2A02F0EBD0AF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-_NOyKnHHu0ns3BR-o2bRikQMMM.roa
Signing time:             Thu 01 Jan 2026 20:17:45 +0000
ROA not before:           Thu 01 Jan 2026 20:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203305
IP address blocks:        80.96.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:8b:eb:76:78:06:18:24:7c:2a:02:f0:eb:d0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fbf34ec8a9c71eed27b37051fa8d9b46291030c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:1f:c1:2b:2a:99:92:f8:82:f2:8d:52:07:
                    ee:73:4d:35:f5:e7:7f:52:8f:49:85:d7:de:0e:d0:
                    fa:a6:12:02:df:8e:95:a6:c4:4f:6b:8a:49:6d:09:
                    53:91:8d:02:d0:19:c6:3c:93:4b:82:cb:d3:d2:95:
                    34:97:39:cf:f2:db:c2:e2:cc:e6:96:eb:58:88:04:
                    03:2b:69:62:be:f7:08:b3:29:b6:d8:f7:64:83:6a:
                    1e:9c:bb:37:ba:57:4a:e4:99:ef:4d:80:5c:8b:c8:
                    25:c0:62:38:cb:61:b9:62:2a:36:34:85:ad:d8:f6:
                    4a:0b:5d:90:53:31:9a:24:b3:f3:9e:1b:2f:14:6b:
                    34:b6:c1:44:ae:9b:2e:5a:b5:fc:43:fb:d4:70:6f:
                    47:fe:ed:ee:d4:39:ee:c6:9f:79:37:84:37:48:a8:
                    77:a3:b0:fb:81:ff:09:6c:b2:f3:1b:f8:95:c3:96:
                    18:87:59:5d:bf:72:75:45:e0:36:2b:1f:9a:8f:d6:
                    34:7e:ec:73:ff:31:73:fe:5e:10:79:28:8a:39:47:
                    15:94:2f:2e:9c:d0:b3:8b:03:f0:c5:d0:6f:ee:95:
                    d4:37:45:ee:c6:1e:62:b4:a7:ee:b5:28:7f:2c:15:
                    f4:21:49:89:53:f3:4a:25:34:c1:01:4b:d0:56:4a:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F3:4E:C8:A9:C7:1E:ED:27:B3:70:51:FA:8D:9B:46:29:10:30:C3
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-_NOyKnHHu0ns3BR-o2bRikQMMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:ad:58:16:d3:d9:f1:71:1d:0a:be:85:87:94:6c:8a:85:
         6b:26:c1:6b:ce:58:b4:72:2e:6c:47:0a:16:27:78:6c:ec:fb:
         d3:b2:22:63:48:83:45:22:e9:97:53:e2:3b:25:73:43:38:81:
         e7:7c:ca:aa:a8:2f:09:b4:af:5c:57:7c:25:d1:4b:c8:95:ee:
         1f:37:a5:48:88:1e:47:a5:c1:10:5c:70:d5:ef:f1:dc:ab:07:
         7d:63:36:3b:98:22:3f:09:fe:bb:02:6c:7d:4f:a8:ca:59:83:
         d5:db:bb:e5:a6:7c:45:9f:de:8f:f9:05:04:db:33:e9:97:ef:
         9c:2f:ba:f2:35:fc:17:2c:76:5c:7a:54:31:ce:64:1a:8e:65:
         e9:74:14:da:21:d3:cd:4c:88:31:03:64:ce:e2:64:4a:56:ad:
         79:d6:74:fe:69:91:38:24:bd:fc:79:ef:ee:63:08:f0:55:68:
         9f:71:c0:e8:72:16:85:fb:07:7f:63:f2:a8:e2:61:5c:1c:9a:
         00:f8:75:74:0e:00:f1:57:37:f9:ce:7f:8e:4b:0b:6b:b5:6e:
         9f:13:9a:3d:88:fc:de:67:c9:cd:ad:66:ec:be:a2:97:5b:9d:
         b5:fa:5f:c3:70:53:80:49:15:2f:46:df:b8:a3:87:43:cd:09:
         75:90:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:00 2026 by rpki-client