This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N4BsCVl8sYPNlJeCK3B_0I914ic.roa
File:                     N4BsCVl8sYPNlJeCK3B_0I914ic.roa (raw, json)
Hash identifier:          J8veTn/ARLoBYkOMN58gxRjln3vtTaOY/1o7FLhHUgk=
Subject key identifier:   37:80:6C:09:59:7C:B1:83:CD:94:97:82:2B:70:7F:D0:8F:75:E2:27
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B357BDEFDAD618196DB76C82FCD751F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N4BsCVl8sYPNlJeCK3B_0I914ic.roa
Signing time:             Thu 01 Jan 2026 20:17:41 +0000
ROA not before:           Thu 01 Jan 2026 20:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50819
IP address blocks:        80.96.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:7b:de:fd:ad:61:81:96:db:76:c8:2f:cd:75:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37806c09597cb183cd9497822b707fd08f75e227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:44:30:36:4c:ff:2b:00:fd:ca:36:0c:9c:
                    4e:41:d9:ae:b1:88:93:df:27:d4:a2:f1:a2:e5:fb:
                    67:8d:1f:39:f8:cc:76:63:49:6b:2e:68:83:71:df:
                    5f:f7:be:5c:9e:08:72:89:bd:d2:0d:fb:df:fe:e0:
                    78:0a:7c:92:fa:98:06:56:32:7c:87:ed:d4:6b:3e:
                    7b:87:76:a5:26:b9:e5:53:d3:b5:64:ef:f8:d4:e0:
                    ba:66:04:04:d0:1b:82:4c:f9:18:79:ad:54:37:83:
                    57:ed:53:dd:91:26:99:4e:06:f4:40:d0:90:64:bf:
                    d5:0b:ba:4f:06:6f:3c:05:b2:71:7b:d1:5a:60:9a:
                    03:7a:d1:0c:a1:29:29:eb:72:60:a9:6b:50:f7:96:
                    8e:44:84:c0:a5:fe:bc:70:d6:51:bc:45:8e:ef:60:
                    ae:96:3a:61:1c:0b:df:9e:86:38:5c:2f:7e:1c:79:
                    2c:0f:37:ee:46:34:c2:98:36:5e:c7:7c:38:4b:14:
                    ee:6b:ee:f1:60:dc:1e:8e:1f:44:6e:1e:ad:01:bf:
                    0d:7c:15:b0:54:60:64:94:04:f9:63:54:84:fd:5d:
                    fa:71:0d:3b:19:f7:48:7b:92:5c:1d:c2:e1:4c:6c:
                    6d:5f:ad:0b:cf:af:4e:67:50:1a:7d:db:21:a0:fa:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:80:6C:09:59:7C:B1:83:CD:94:97:82:2B:70:7F:D0:8F:75:E2:27
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N4BsCVl8sYPNlJeCK3B_0I914ic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:4b:75:90:84:bc:f7:2f:46:d6:f6:37:aa:b2:3f:98:14:1c:
         95:1d:18:85:d4:81:4d:12:1f:d7:47:69:9a:1a:d9:1a:0c:05:
         13:9e:31:b6:cb:e7:ed:6c:ff:25:c1:7b:d9:60:d1:ba:56:a9:
         1a:76:8c:98:f7:2b:ba:57:81:f6:7e:5a:6d:01:ef:20:14:64:
         f4:67:b7:36:54:fd:ee:28:d8:59:51:94:df:b9:0a:dd:1c:a6:
         a2:9c:ee:0e:75:a8:43:de:0e:06:90:3d:e0:32:70:57:14:a7:
         ab:86:30:88:be:2d:ab:17:fa:9a:51:5c:7a:cb:c1:cb:55:e7:
         8f:df:b4:1d:89:59:ee:d7:0b:0a:74:a6:ae:28:20:2d:69:c5:
         ac:3c:36:a1:93:27:3f:05:c3:f9:e3:46:c8:f2:be:4a:38:22:
         38:53:8b:7d:df:30:38:37:d1:bd:55:ec:db:99:f5:08:f9:ff:
         24:94:06:fb:8c:22:8a:93:2f:96:0c:77:61:04:87:28:07:46:
         b6:f8:ea:5e:98:f0:9a:77:5c:57:c4:a1:99:ab:75:d0:16:ec:
         d5:27:62:b0:b0:55:39:e1:08:3e:32:28:fc:38:85:91:d3:f5:
         d7:d8:1f:bc:48:c9:fe:78:2d:bc:49:1e:12:64:2f:23:7a:f1:
         82:21:d9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:58 2026 by rpki-client