This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Mi-rq8p-_yyI8_YL8qV8C46ws0I.roa
File:                     Mi-rq8p-_yyI8_YL8qV8C46ws0I.roa (raw, json)
Hash identifier:          oKSfa6myf/7TLLgXfk0u8Y213qmVq2hR/Ry/db/3gMY=
Subject key identifier:   32:2F:AB:AB:CA:7E:FF:2C:88:F3:F6:0B:F2:A5:7C:0B:8E:B0:B3:42
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B35865D199BB9835ED2BC73BFFD7C47
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Mi-rq8p-_yyI8_YL8qV8C46ws0I.roa
Signing time:             Thu 01 Jan 2026 20:17:43 +0000
ROA not before:           Thu 01 Jan 2026 20:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62350
IP address blocks:        80.96.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:86:5d:19:9b:b9:83:5e:d2:bc:73:bf:fd:7c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=322fababca7eff2c88f3f60bf2a57c0b8eb0b342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:96:f9:8b:cb:0f:3a:87:c1:50:2e:fc:4f:
                    79:aa:c2:09:27:97:7e:30:a8:2c:15:bb:9e:a9:88:
                    b7:a8:14:64:7f:2d:e4:88:27:92:98:a5:ae:73:de:
                    53:b1:4f:ca:cc:b1:58:5d:7c:c1:4f:ce:6a:2c:e1:
                    36:59:cb:36:59:8e:ed:ac:f8:d5:0e:18:e3:7a:78:
                    b2:14:23:95:43:17:1a:5e:f3:d5:15:5f:bf:a3:90:
                    ec:ad:d2:aa:c8:01:23:1d:68:68:89:fd:f0:7f:e6:
                    dc:17:72:ef:30:56:29:f8:f2:fd:dd:c7:a2:4a:6c:
                    72:24:6a:1f:18:bb:4d:9b:46:39:c9:f0:e3:1d:76:
                    85:26:87:cb:cf:62:a6:35:2e:f7:38:97:f3:d4:55:
                    51:af:52:f2:ef:8c:2e:5f:92:89:4d:36:40:82:3d:
                    3e:00:4a:13:fc:f0:59:0f:71:eb:52:4a:ec:9b:c0:
                    f7:99:83:1a:a2:91:7e:b3:65:f3:2a:69:fb:e8:32:
                    79:88:36:66:d8:15:a9:9c:92:53:83:fd:20:4f:eb:
                    45:14:e9:8a:57:d6:bf:dd:8e:2f:41:bd:e5:3d:60:
                    df:34:30:90:e2:c5:5a:9c:19:c0:0f:e2:51:8d:77:
                    98:2f:c0:9c:a5:0f:2e:ce:64:2c:63:62:6e:0a:7a:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2F:AB:AB:CA:7E:FF:2C:88:F3:F6:0B:F2:A5:7C:0B:8E:B0:B3:42
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Mi-rq8p-_yyI8_YL8qV8C46ws0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a8:15:d0:d0:44:74:a6:99:d9:0e:8b:47:50:85:55:d8:55:
         07:81:02:a4:e0:fe:7e:a0:21:3e:c5:9e:60:0e:68:d9:61:0f:
         d4:b1:cf:af:dc:6a:eb:11:e5:5a:bd:e2:70:cb:4a:e1:11:5a:
         4d:da:b7:db:00:a7:ff:12:38:73:7f:06:03:35:f5:06:e9:18:
         9a:2d:59:b2:93:02:67:85:e2:9c:ff:bc:4a:dc:9b:b1:12:67:
         7e:2b:77:7b:be:22:e4:da:f5:36:3a:f9:64:5a:89:8a:06:eb:
         49:b7:8f:0b:d1:c1:a4:12:9d:64:a9:82:35:6a:a3:0b:ac:3d:
         49:de:e5:b7:d9:d4:e0:77:6d:6e:a2:1c:13:b3:3b:e5:ff:ac:
         4c:0e:2d:11:1a:c6:dd:46:17:37:08:59:8b:6a:ba:40:1f:9c:
         0d:44:f1:f5:de:c2:1e:77:2f:73:6e:e3:9b:79:21:78:57:c1:
         6e:2b:ed:94:3b:02:c4:dd:43:a9:98:9d:ac:a3:88:27:e3:28:
         bd:44:d5:77:20:ba:b9:94:ca:d2:c8:ea:4a:4c:b3:a1:2f:98:
         49:a1:88:0f:86:3b:c3:e0:4e:90:07:fc:6e:fd:5e:e5:81:ad:
         61:18:d9:46:be:d1:01:17:c7:4a:a5:71:23:6e:fe:61:fb:b2:
         92:b2:91:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:15 2026 by rpki-client