This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CijsUTps_tXNfQShsWFUdf-sgNc.roa
File:                     CijsUTps_tXNfQShsWFUdf-sgNc.roa (raw, json)
Hash identifier:          pTXrdf8nOG0SgGL7MGON5NumlViYMlxyKy4I9lbaIxQ=
Subject key identifier:   0A:28:EC:51:3A:6C:FE:D5:CD:7D:04:A1:B1:61:54:75:FF:AC:80:D7
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B35875BE20A54C4AA48D1075A9619B1
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CijsUTps_tXNfQShsWFUdf-sgNc.roa
Signing time:             Thu 01 Jan 2026 20:17:44 +0000
ROA not before:           Thu 01 Jan 2026 20:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62448
IP address blocks:        81.181.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:87:5b:e2:0a:54:c4:aa:48:d1:07:5a:96:19:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0a28ec513a6cfed5cd7d04a1b1615475ffac80d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:bc:79:30:6e:7c:94:e0:93:2a:fd:ca:4e:
                    66:87:46:44:5c:8c:e2:5f:72:d5:1d:d7:e3:9f:d7:
                    f6:32:99:70:7f:04:81:c5:eb:37:46:a9:63:ec:33:
                    db:17:03:7f:74:01:dc:b3:a4:b9:c7:e2:70:c0:e4:
                    17:14:35:7b:0a:cf:14:17:10:e8:4e:59:7c:6f:cd:
                    34:df:75:e6:b0:da:fa:d6:24:92:36:ab:d0:c6:a7:
                    cb:a4:b9:75:28:ff:e5:be:f4:0e:ad:5d:3f:b8:0a:
                    68:62:40:24:70:3d:66:c5:43:ab:e4:06:6e:a8:be:
                    ca:25:c1:87:56:73:04:d6:f7:22:59:80:9a:e1:79:
                    30:a2:aa:64:d2:e3:10:07:c9:7c:0c:93:32:fd:53:
                    6c:bf:4f:b4:f1:c4:be:85:9d:07:b4:8f:43:08:aa:
                    7c:77:64:30:87:31:9a:d8:24:3a:1f:cb:95:ed:3c:
                    af:20:65:96:04:93:0b:d5:97:d6:81:31:69:b6:28:
                    e9:6d:41:9d:bf:3f:ee:ee:e8:ed:8a:32:46:2b:09:
                    9b:07:f9:8f:dc:23:9f:84:6d:d6:77:9d:e9:fa:98:
                    fb:87:87:8d:39:59:6d:7d:3b:ba:e9:d1:e4:60:f5:
                    df:be:6e:a8:d7:af:e3:78:b3:22:0e:65:ae:0a:ed:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:28:EC:51:3A:6C:FE:D5:CD:7D:04:A1:B1:61:54:75:FF:AC:80:D7
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CijsUTps_tXNfQShsWFUdf-sgNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ff:ae:3c:81:b3:da:6d:37:92:17:61:d5:0a:7d:74:d1:12:
         66:21:c2:5e:1a:13:30:8e:df:11:57:23:ac:6a:13:e9:f6:24:
         05:ac:6b:5b:f4:9f:e4:4f:2f:77:cf:b6:f0:92:a8:44:04:50:
         c2:bc:f4:ba:6f:f2:b0:9c:34:53:c5:c1:96:0b:d9:09:98:53:
         3d:ba:84:fe:d0:db:78:34:07:0a:ce:de:10:7b:9f:c6:5b:ae:
         ba:b6:b4:25:46:06:4d:8a:40:74:fb:b9:8d:d1:00:48:dc:20:
         1e:52:90:7b:f5:fc:0e:7d:b2:6e:96:7b:9e:f3:87:17:79:f3:
         83:21:23:f3:04:94:d0:dd:47:00:8b:c1:0f:9e:20:60:19:10:
         60:b3:15:38:76:67:59:bb:ba:6b:9e:bd:2a:6a:bb:a4:e5:3f:
         85:d2:71:9a:86:91:9a:23:fd:3a:87:cf:5e:04:fd:72:22:aa:
         eb:4c:df:88:41:5d:32:00:80:b8:5a:1a:cb:0a:a7:cc:bd:47:
         0f:a9:82:20:12:6b:e3:b5:6a:3e:a7:79:03:8c:80:0f:cd:43:
         70:c5:b9:f4:98:47:92:d3:0e:4d:02:d3:9f:88:43:a7:87:d6:
         22:f5:08:62:49:7c:cf:4f:a8:00:13:f9:ea:42:b5:dc:f3:1c:
         00:b4:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:02 2026 by rpki-client