This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/acJJAaU0PSAsNMGqWEdMMA5lVwY.roa
File:                     acJJAaU0PSAsNMGqWEdMMA5lVwY.roa (raw, json)
Hash identifier:          mwZU0oHbCaX8iYWiC+3/dVwt/SNX6v35XaiKUMcS8/M=
Subject key identifier:   69:C2:49:01:A5:34:3D:20:2C:34:C1:AA:58:47:4C:30:0E:65:57:06
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B35783E0766522F7CE8A98BC7ADDF59
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/acJJAaU0PSAsNMGqWEdMMA5lVwY.roa
Signing time:             Thu 01 Jan 2026 20:17:40 +0000
ROA not before:           Thu 01 Jan 2026 20:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48881
IP address blocks:        81.181.166.0/24 maxlen: 24
                          217.156.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:78:3e:07:66:52:2f:7c:e8:a9:8b:c7:ad:df:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69c24901a5343d202c34c1aa58474c300e655706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:ae:75:2b:6f:e3:0a:3e:52:26:6a:69:eb:
                    7d:c6:34:34:75:31:02:6c:f3:44:65:a6:c8:ef:12:
                    c6:01:06:38:b2:6c:f4:fb:8e:66:b1:0a:9a:b9:21:
                    ad:90:b5:0a:c8:a3:51:70:90:b6:59:bf:76:ab:c9:
                    ac:9e:de:25:b3:95:82:18:45:f6:2d:a4:29:a0:30:
                    0d:fc:5a:3b:6c:79:f9:73:ec:cf:43:e8:c0:67:92:
                    c7:27:b2:94:b7:38:99:cf:24:7e:13:1e:62:57:79:
                    49:6c:fe:18:30:35:46:b8:75:28:fe:0e:f0:0a:d8:
                    e7:e3:86:dd:78:e7:bc:1d:91:eb:13:61:fc:36:7c:
                    ba:38:ba:f3:c7:7d:f7:fd:2f:8d:eb:dd:5d:d1:a3:
                    7e:65:8c:fa:5e:a7:bf:c7:3c:ab:96:aa:5d:ac:ed:
                    0a:0a:10:b5:a9:96:5e:9d:c9:d6:f8:d6:d7:0d:07:
                    5a:fb:52:99:24:4d:a3:2a:71:3c:6e:8a:5a:4f:0c:
                    cc:95:3c:a9:54:79:32:05:98:aa:09:6d:9c:34:28:
                    83:5a:a9:89:60:6c:04:e2:17:2f:f4:43:13:a5:53:
                    7e:a4:f0:e6:7b:38:65:f3:79:22:6e:74:4b:15:61:
                    17:63:36:25:0c:e8:9c:eb:4c:c1:62:03:d2:7b:1c:
                    b7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C2:49:01:A5:34:3D:20:2C:34:C1:AA:58:47:4C:30:0E:65:57:06
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/acJJAaU0PSAsNMGqWEdMMA5lVwY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.166.0/24
                  217.156.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:1f:56:28:71:42:79:37:cb:41:db:b6:f5:58:95:05:c3:
         8d:2a:23:cd:4c:df:2b:90:c7:1a:fe:7c:1c:c2:1e:8a:3d:d8:
         15:f2:1b:ba:89:49:aa:39:1e:5d:e1:85:bd:51:dd:7a:45:d7:
         a8:32:75:6a:7b:33:71:2b:ac:98:39:4d:31:43:21:27:0d:4e:
         97:8b:7e:8d:1a:a1:3b:a0:a8:f3:5b:aa:4e:76:60:ad:8c:24:
         29:58:4c:5f:a8:fa:27:6f:94:0e:4b:5d:fb:b5:aa:44:e6:aa:
         db:26:26:8c:eb:6a:67:a6:97:0e:f5:63:40:9d:99:9f:71:34:
         52:1a:75:47:18:3a:7f:70:82:aa:1a:4b:11:91:73:7c:b9:b3:
         1a:bc:8b:5e:3b:2c:fb:49:87:95:aa:54:3c:05:81:d4:23:23:
         65:0a:79:f7:25:13:db:71:f3:77:22:b8:42:f5:0a:b5:ac:4f:
         f9:e3:a1:2e:42:81:2a:4f:52:ef:c4:c6:95:fe:3b:30:f1:f2:
         4f:42:1b:c2:83:24:fc:94:24:4d:d5:bd:86:8a:25:df:9f:d6:
         5d:c7:ff:26:33:3d:ed:fe:c3:a6:b3:59:5a:d3:63:3f:b5:a8:
         0e:c0:08:a0:7b:91:7b:76:8a:10:0e:38:ff:24:4d:2b:72:6b:
         75:e3:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:54 2026 by rpki-client