This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iqYkd59SDg-XZIpr3iVTM0xDcK4.roa
File:                     iqYkd59SDg-XZIpr3iVTM0xDcK4.roa (raw, json)
Hash identifier:          1cg+RyCMmuI5sdtcye6QaRbKqvSv8ApWvk4nlCwhpIQ=
Subject key identifier:   8A:A6:24:77:9F:52:0E:0F:97:64:8A:6B:DE:25:53:33:4C:43:70:AE
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B35917FB171090ADCDA78490310A632
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iqYkd59SDg-XZIpr3iVTM0xDcK4.roa
Signing time:             Thu 01 Jan 2026 20:17:46 +0000
ROA not before:           Thu 01 Jan 2026 20:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208445
IP address blocks:        81.180.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:91:7f:b1:71:09:0a:dc:da:78:49:03:10:a6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8aa624779f520e0f97648a6bde2553334c4370ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:b8:b1:d5:fc:10:a7:df:af:d5:cf:63:53:
                    e1:91:af:0e:36:06:00:43:5b:62:d2:0b:55:48:55:
                    47:fa:e7:c9:ce:33:12:4b:1c:ff:62:42:71:7e:bc:
                    16:c3:e0:e5:c0:cf:3a:4a:b2:3e:0f:75:08:3b:66:
                    04:14:8b:d7:0e:01:c1:52:05:1d:72:d2:29:a2:bb:
                    34:e6:80:8b:64:c4:83:bc:21:1b:b1:30:c5:49:b8:
                    e3:4a:21:7c:16:c7:42:aa:4e:1a:0d:22:21:03:f0:
                    84:b7:e9:0b:10:46:9c:43:28:3c:d4:9d:16:27:89:
                    cf:40:8c:62:44:03:31:db:29:29:f8:cc:fa:96:f1:
                    ac:09:ee:57:7c:98:61:45:79:03:51:19:90:02:99:
                    55:fe:c1:3b:98:2d:3b:00:dc:51:07:ba:85:3a:79:
                    07:3d:c0:bb:3c:19:a4:dc:33:ee:7d:1a:35:8e:db:
                    86:5b:c9:f5:2d:a6:31:dc:88:1c:44:23:a2:5b:aa:
                    85:27:2c:b3:2c:c2:e2:71:b4:bd:53:a6:a7:0a:1e:
                    4d:f5:d5:92:c5:28:be:89:73:62:38:f5:11:7c:ac:
                    71:3b:86:0d:98:17:da:8a:2b:73:12:24:69:c4:89:
                    9d:bc:d6:3a:32:48:e1:d4:8f:69:ae:74:67:64:de:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A6:24:77:9F:52:0E:0F:97:64:8A:6B:DE:25:53:33:4C:43:70:AE
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iqYkd59SDg-XZIpr3iVTM0xDcK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.180.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:1e:94:23:1d:1d:3d:cf:c0:74:24:9c:7d:25:1c:85:81:04:
         07:7e:e7:21:a5:31:07:de:e0:93:8b:87:f6:16:09:ae:61:ab:
         e4:d1:93:cb:83:ec:0e:fc:96:e9:50:ff:93:e8:64:f7:45:97:
         ec:5e:b1:54:ab:5a:3e:ca:ea:83:1a:eb:8c:ff:a3:e3:3b:77:
         36:bc:c5:43:9b:eb:4a:0e:90:b4:f9:4e:64:21:59:ee:10:51:
         13:a0:86:ec:8f:ec:cb:ba:b5:7c:ae:99:f0:94:e7:38:89:a8:
         6c:31:d2:fc:74:fc:f0:ae:e3:55:5e:63:88:b9:03:4a:25:f2:
         4e:13:8d:be:ef:28:d4:6e:c9:01:6e:3c:4c:28:14:e4:8f:27:
         df:29:34:77:27:63:bc:4e:7e:af:31:5e:32:96:ac:76:2a:e0:
         a8:ef:e7:2c:69:8c:59:40:d9:f2:0c:d6:90:04:2d:b4:b0:d0:
         18:fb:22:be:49:1e:96:96:39:6d:2e:e4:43:97:05:da:68:b9:
         da:6e:8f:76:9d:ce:f8:b1:76:61:aa:50:54:1e:47:49:93:e7:
         a8:b5:a2:2e:37:2a:fb:ff:6b:fd:27:ce:d7:8f:58:02:33:28:
         5f:1c:cb:45:b0:39:ec:ea:7c:0e:c0:ef:ff:1d:ae:54:60:af:
         d1:72:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:54 2026 by rpki-client