This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/72EEXwF4rxw07TqjluMbznwtYLo.roa
File:                     72EEXwF4rxw07TqjluMbznwtYLo.roa (raw, json)
Hash identifier:          vJ+c33uikVjE0CsfjQX2JHy6uxMfNvh7N1kHRDulrjw=
Subject key identifier:   EF:61:04:5F:01:78:AF:1C:34:ED:3A:A3:96:E3:1B:CE:7C:2D:60:BA
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B357F48DCA0577FDD8462E09C65D66D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/72EEXwF4rxw07TqjluMbznwtYLo.roa
Signing time:             Thu 01 Jan 2026 20:17:42 +0000
ROA not before:           Thu 01 Jan 2026 20:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56771
IP address blocks:        194.102.56.0/24 maxlen: 24
                          217.156.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:7f:48:dc:a0:57:7f:dd:84:62:e0:9c:65:d6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef61045f0178af1c34ed3aa396e31bce7c2d60ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:80:11:a3:29:a4:27:07:2a:f5:09:a0:95:23:
                    d4:aa:8f:54:2d:c5:d5:49:a1:6e:63:c2:66:03:db:
                    4d:60:94:a1:1a:3e:20:a4:81:dc:2d:c2:31:1b:86:
                    af:b2:30:5a:a6:0d:55:5b:89:b9:ab:fd:4e:ef:19:
                    c2:12:05:ab:cc:80:25:26:e8:1a:47:22:9b:0a:a3:
                    18:c5:d9:f4:03:19:cc:12:d9:58:dd:ae:78:18:cf:
                    ac:d3:0f:0e:86:d4:c9:8a:19:dd:c4:ae:d5:2a:6d:
                    13:17:8d:d5:e5:a3:3b:4d:dc:8d:83:40:9a:16:83:
                    98:ce:f4:45:b3:ed:e7:20:b0:45:14:f9:b8:16:37:
                    83:c8:43:41:a9:a3:e0:6a:51:e3:4a:4f:91:f2:81:
                    9b:63:21:d4:8d:c4:99:61:97:fd:6c:69:f4:d0:16:
                    d1:bd:06:ae:89:cc:7f:21:f5:f9:2c:d9:3b:35:4a:
                    f5:67:b0:6d:58:3b:82:15:30:3a:0b:f6:a5:51:84:
                    54:2e:e2:80:74:63:8f:af:b4:30:af:61:6a:eb:fc:
                    96:19:84:bb:42:41:eb:1f:02:00:ec:92:c9:67:4b:
                    f7:2f:85:75:17:13:66:e3:41:67:e9:65:3a:e9:0e:
                    a7:96:9c:c5:dd:7a:ea:1b:a9:e0:8a:01:98:0c:43:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:61:04:5F:01:78:AF:1C:34:ED:3A:A3:96:E3:1B:CE:7C:2D:60:BA
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/72EEXwF4rxw07TqjluMbznwtYLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.102.56.0/24
                  217.156.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:5f:a3:9d:7b:9f:5d:66:a7:b7:87:88:9f:32:fd:d8:18:a1:
         24:31:ea:09:4d:7f:08:c0:bc:49:33:c8:39:36:ef:54:ee:9b:
         e6:c1:85:8f:1d:21:24:c4:c3:cf:77:b5:4a:20:17:e8:25:1a:
         6c:c0:7f:a0:9f:7a:a4:93:e8:99:05:cf:8f:f1:19:6b:15:48:
         2b:79:b5:0c:a8:f6:50:83:02:f8:15:82:1a:b7:37:65:6c:72:
         fb:2d:a1:71:7c:c9:e6:f3:3d:e9:5c:5f:1d:e1:0e:53:55:62:
         b2:c2:3f:27:b5:18:85:b5:fa:ef:83:a7:e0:9a:16:90:7a:dc:
         1b:ec:01:42:54:94:01:32:a9:6a:3c:5a:ec:cc:6f:93:e1:09:
         35:19:71:48:17:ff:dc:0c:44:97:38:42:d9:91:35:42:f1:ce:
         39:6f:98:4f:1a:9b:39:08:71:fe:2c:c6:ae:8e:2c:59:b5:2c:
         7f:3c:0b:29:56:c9:ea:b2:0d:02:89:7c:8f:69:ce:e9:91:1a:
         e4:95:5d:f2:09:46:b2:65:e7:7b:02:35:75:31:61:99:c8:52:
         65:16:8e:9d:eb:2f:e2:d3:da:15:fe:58:07:61:27:57:32:1e:
         3b:80:91:60:5e:63:fb:5b:75:d1:e7:f3:c1:db:87:c1:90:8c:
         95:36:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:23 2026 by rpki-client