This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/E8ytxYgYj9bKS11lUqjPrfUf_Lk.roa
File:                     E8ytxYgYj9bKS11lUqjPrfUf_Lk.roa (raw, json)
Hash identifier:          u1PZxKmWGZc+0AXTaoCofr9cUkNJOWKYW8w0mRV9w3Y=
Subject key identifier:   13:CC:AD:C5:88:18:8F:D6:CA:4B:5D:65:52:A8:CF:AD:F5:1F:FC:B9
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B359F4934A7720D9CCE07AAEFAD4292
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/E8ytxYgYj9bKS11lUqjPrfUf_Lk.roa
Signing time:             Thu 01 Jan 2026 20:17:50 +0000
ROA not before:           Thu 01 Jan 2026 20:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215230
IP address blocks:        81.181.64.0/24 maxlen: 24
                          81.181.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:9f:49:34:a7:72:0d:9c:ce:07:aa:ef:ad:42:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13ccadc588188fd6ca4b5d6552a8cfadf51ffcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:0e:e3:00:1f:6b:b1:47:b3:fd:63:31:93:
                    48:0a:39:de:10:f1:78:22:c9:bc:39:56:ae:82:8a:
                    bd:33:d6:80:28:f8:6c:2b:d0:a2:ba:ad:47:34:ce:
                    f4:ec:83:b5:0f:12:3d:f3:78:e6:33:28:b0:92:16:
                    ed:97:c7:08:a8:ce:24:f8:3b:40:2b:19:06:e4:e6:
                    4c:6a:87:9a:52:05:41:aa:4e:25:53:9e:c6:6e:1b:
                    46:39:4b:56:c1:09:c2:82:63:cf:0f:f1:43:59:dc:
                    63:ef:ef:52:0c:4d:51:eb:e9:25:51:67:72:d9:6d:
                    3f:fe:7c:bd:24:d1:27:3b:f6:5f:fd:f1:5c:d8:5f:
                    97:4e:7f:0f:53:5f:e8:b4:a9:31:48:60:d1:bf:97:
                    6d:0c:95:b0:a8:ac:2d:55:29:8c:cf:58:57:fd:eb:
                    c2:0e:c8:67:c1:54:ec:25:78:8f:6a:0c:39:1a:78:
                    0c:02:50:fb:67:31:5e:7c:45:78:d8:5e:a9:fd:35:
                    62:b1:7d:23:43:40:37:85:51:9f:27:27:e0:ee:27:
                    94:2f:e8:c0:4a:d1:b5:89:dd:e2:92:1b:6d:a9:2d:
                    cf:79:7d:cf:51:38:82:1c:fc:3a:b0:f6:8d:fa:d3:
                    55:26:5e:91:e3:71:cc:c2:89:3e:74:23:38:73:de:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CC:AD:C5:88:18:8F:D6:CA:4B:5D:65:52:A8:CF:AD:F5:1F:FC:B9
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/E8ytxYgYj9bKS11lUqjPrfUf_Lk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.64.0/24
                  81.181.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:ff:68:68:56:8a:5d:1c:84:26:5f:f1:36:81:45:52:1e:
         78:8c:14:47:23:ca:19:2c:c0:4e:31:25:62:34:50:53:3e:36:
         5f:62:32:51:11:65:fb:d6:83:67:25:95:72:eb:9d:ae:ac:a5:
         94:4b:c2:32:7d:45:9b:28:ea:3b:db:f5:fb:3b:49:49:a3:19:
         69:d2:75:c6:39:c7:64:b6:7e:95:3b:ec:e5:aa:0b:b3:2c:00:
         46:77:65:98:d8:98:58:9a:da:ed:68:73:dc:13:8c:1d:e1:b6:
         50:7a:eb:97:aa:2e:d0:b3:12:7f:18:1b:27:32:ad:17:15:0f:
         35:94:61:56:a6:2c:a8:15:07:5a:3e:95:9b:c5:6b:7c:e2:c6:
         73:91:0a:82:a2:b1:c2:fb:af:33:6e:45:53:9e:67:e1:f8:18:
         3c:53:d9:5c:23:c4:6a:f2:71:46:cf:53:04:4b:9c:25:de:c7:
         c4:72:7f:e0:de:a5:c3:88:7b:86:4b:ee:b7:f5:06:d2:9b:4a:
         d7:d6:7b:85:81:35:61:8a:9a:cf:b2:ed:3a:36:f6:db:11:7a:
         86:9f:f7:2f:df:f5:e8:b9:b6:21:11:95:9a:5d:07:97:e0:d8:
         fe:24:f2:62:9c:0c:e4:26:b0:b8:51:b7:08:5b:03:55:49:54:
         29:19:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:13 2026 by rpki-client