This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ShyHuhagtBteRUPNoyV4qauxr8Q.roa
File:                     ShyHuhagtBteRUPNoyV4qauxr8Q.roa (raw, json)
Hash identifier:          7FwhLL3JZzmdUUpNYNhDohWXWBj5WANOOevOOtc+eK4=
Subject key identifier:   4A:1C:87:BA:16:A0:B4:1B:5E:45:43:CD:A3:25:78:A9:AB:B1:AF:C4
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B358C5C6E3310B9A1C416C4FC2B3930
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ShyHuhagtBteRUPNoyV4qauxr8Q.roa
Signing time:             Thu 01 Jan 2026 20:17:45 +0000
ROA not before:           Thu 01 Jan 2026 20:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203721
IP address blocks:        217.156.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:8c:5c:6e:33:10:b9:a1:c4:16:c4:fc:2b:39:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a1c87ba16a0b41b5e4543cda32578a9abb1afc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:f2:1c:ee:e7:fb:36:37:11:ae:30:c3:49:
                    10:30:46:6d:70:c8:68:06:9a:8a:e5:5a:40:f6:14:
                    1d:f6:a4:39:71:1e:f2:1f:a6:ae:cd:da:20:8f:16:
                    c4:43:26:25:fb:5e:98:af:a1:62:d1:45:2f:84:45:
                    ad:40:0d:3c:f2:09:9c:f8:e7:25:6a:19:62:61:b4:
                    6f:aa:c1:59:95:d8:4c:4a:08:8d:b3:9f:1a:75:e4:
                    1f:73:79:3e:65:58:b9:73:92:eb:a5:a2:12:ef:0a:
                    11:fd:65:a6:5d:41:69:df:51:dd:bd:ea:f9:51:05:
                    46:de:c9:cd:f7:73:c7:3c:1d:01:cb:b7:4f:4a:ae:
                    39:60:f3:9d:40:c3:f7:3f:33:5b:14:06:1d:09:91:
                    63:5b:77:bd:12:81:14:b6:4b:1d:45:2b:5f:68:20:
                    78:d5:c2:60:de:36:6b:14:de:d5:21:63:0d:9e:c4:
                    dd:8d:c7:b5:9f:5c:d4:d2:3a:98:49:4f:62:ab:47:
                    0c:ed:71:5b:44:a5:6e:59:09:ea:72:fc:26:1a:37:
                    34:20:93:58:3d:e5:ea:ff:f3:c4:57:8f:64:5d:86:
                    bc:28:66:ae:93:1a:12:db:28:61:a0:ca:19:46:ef:
                    1f:71:b7:8d:00:78:af:55:a6:cb:38:c5:9a:03:14:
                    51:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:87:BA:16:A0:B4:1B:5E:45:43:CD:A3:25:78:A9:AB:B1:AF:C4
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ShyHuhagtBteRUPNoyV4qauxr8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.156.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:3c:46:31:03:0a:b6:7c:fb:a1:63:28:e1:9e:e0:8c:32:b5:
         d8:48:eb:6f:38:f9:42:17:b7:d5:2b:11:16:3b:09:2a:e2:0a:
         62:81:7b:cc:74:88:35:a2:7d:60:84:4e:2c:b0:38:7d:fa:72:
         0a:af:eb:fa:08:b1:a9:19:e2:2c:56:07:a0:97:8f:18:08:29:
         bc:6f:4f:3f:7c:58:79:c2:98:5b:d4:48:2c:89:7d:79:0e:1f:
         69:32:49:cb:83:1b:f5:ad:30:24:53:be:d4:29:d5:0f:3a:2b:
         a8:37:65:ed:07:7e:03:30:ae:27:00:50:2b:87:01:42:97:4b:
         c0:15:bd:14:e1:f8:15:fc:00:e6:37:de:e5:74:c0:0b:fe:07:
         7e:c5:4b:74:e2:37:36:48:ff:4b:ce:9b:38:14:a6:0e:bf:d8:
         99:e9:4f:d3:2c:30:03:9a:9b:c8:5f:78:2c:34:8f:2b:cd:85:
         a6:95:00:59:ed:f2:4e:b5:c0:b6:a3:f7:05:35:33:00:2f:b2:
         07:ce:c4:a5:c9:54:b6:53:f9:94:45:19:aa:f3:fa:c1:6e:c5:
         0b:4f:99:a1:67:ad:43:c2:2a:95:44:69:65:72:36:43:20:56:
         9b:39:ad:8c:52:e6:e5:cb:27:66:29:16:5d:77:8c:42:78:f9:
         7a:64:49:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:16 2026 by rpki-client