This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/A_Sr9t8mDnM6oX2HEeW_BaF9klU.roa
File:                     A_Sr9t8mDnM6oX2HEeW_BaF9klU.roa (raw, json)
Hash identifier:          Jg3D1EEMx2mDsRVOin6wfWWwmhN8QuBqPurucFGVdsI=
Subject key identifier:   03:F4:AB:F6:DF:26:0E:73:3A:A1:7D:87:11:E5:BF:05:A1:7D:92:55
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019A5DFE4ABA461B61732B503149791B058D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/A_Sr9t8mDnM6oX2HEeW_BaF9klU.roa
Signing time:             Fri 07 Nov 2025 11:05:37 +0000
ROA not before:           Fri 07 Nov 2025 11:05:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203942
IP address blocks:        81.181.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:5d:fe:4a:ba:46:1b:61:73:2b:50:31:49:79:1b:05:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Nov  7 11:05:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03f4abf6df260e733aa17d8711e5bf05a17d9255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:01:c7:eb:75:ea:16:ea:8c:fc:cd:af:8d:
                    dc:2d:39:3f:98:c9:11:c1:25:8d:ec:54:6b:ac:02:
                    24:58:ea:9d:42:36:c3:7d:4c:c3:96:27:43:e5:61:
                    37:40:ef:65:24:c5:02:0a:8a:94:64:01:22:87:77:
                    96:36:fe:d0:b5:9c:e1:5f:53:05:a0:c3:a9:39:11:
                    31:3f:80:c5:80:f6:5f:8a:db:58:07:ae:54:39:f8:
                    9c:5a:d0:09:e6:a7:6e:28:1d:85:32:92:08:c3:bd:
                    49:48:23:cd:a1:73:21:3a:70:11:1f:41:d9:eb:ca:
                    c9:16:bb:54:5f:13:fc:f8:f5:72:2b:9a:f7:1c:02:
                    89:88:c3:8a:6c:4e:95:47:db:49:dd:e3:3a:40:69:
                    0b:1d:32:41:e8:69:5c:f1:6d:39:dc:b6:08:e7:37:
                    2e:1b:a0:47:9e:6b:2d:ab:2f:0f:e0:60:e9:fa:4b:
                    89:a1:f9:d9:af:92:e3:ef:62:95:e0:75:47:03:7f:
                    f2:86:8f:dc:a3:cc:54:27:61:0c:63:de:37:ff:25:
                    dd:7a:92:00:de:ab:22:31:4a:3f:87:a6:02:2e:1d:
                    65:a7:3a:68:f3:90:0a:64:f9:07:70:74:75:be:36:
                    f0:98:e6:07:cb:6d:65:44:89:49:88:26:ca:10:6a:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:AB:F6:DF:26:0E:73:3A:A1:7D:87:11:E5:BF:05:A1:7D:92:55
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/A_Sr9t8mDnM6oX2HEeW_BaF9klU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:54:49:20:51:7a:2d:7e:4d:fa:87:47:2e:9f:64:26:34:9a:
         21:84:c3:21:a4:cd:1f:76:89:ad:8a:9f:d9:29:c3:35:46:0e:
         2b:bf:29:0a:78:b0:a8:e8:4c:a6:77:14:36:14:8d:af:e7:0f:
         05:47:65:8b:31:ae:50:45:02:7e:12:36:c3:2a:a8:12:cb:ee:
         dd:b3:18:5f:d3:0d:a8:5b:c6:3a:7c:01:20:a6:94:25:41:03:
         e8:50:d6:64:06:e1:9d:7e:45:31:cd:cb:5e:dc:99:77:79:b6:
         b5:fc:91:67:29:65:bb:b2:70:73:53:b9:4a:2c:ae:8a:33:6e:
         b6:d5:15:4c:c3:05:7d:a9:b4:a6:5c:c8:de:2f:54:68:01:e7:
         49:e9:30:dd:be:9b:b0:03:ce:42:c1:97:ad:78:c4:55:56:cf:
         79:e9:cb:18:88:32:3d:f8:65:c8:25:8d:c6:50:a6:ca:1a:86:
         c0:39:a1:71:c1:cf:08:15:89:65:52:56:21:c3:87:ad:15:44:
         e0:9a:d7:88:10:18:43:4a:20:98:32:53:1b:c1:d2:df:4a:97:
         f2:8b:3a:8e:43:93:2c:5a:cd:13:53:a1:36:17:f2:5c:53:d5:
         d2:73:7c:f5:ff:97:f2:d5:54:38:7f:8c:38:8e:66:82:ff:93:
         c1:72:5b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 20:13:35 2025 by rpki-client