This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rNunwcgD9EneT-fKYSc57ZrYztE.roa
File:                     rNunwcgD9EneT-fKYSc57ZrYztE.roa (raw, json)
Hash identifier:          yYhJnPTl95zDToeZsmJRDqKIK56qXnnM4Zpq3wSxAJQ=
Subject key identifier:   AC:DB:A7:C1:C8:03:F4:49:DE:4F:E7:CA:61:27:39:ED:9A:D8:CE:D1
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019A6C92E5AC4051B22C8CDDAB66753049AB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rNunwcgD9EneT-fKYSc57ZrYztE.roa
Signing time:             Mon 10 Nov 2025 07:02:37 +0000
ROA not before:           Mon 10 Nov 2025 07:02:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216249
IP address blocks:        81.181.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:6c:92:e5:ac:40:51:b2:2c:8c:dd:ab:66:75:30:49:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Nov 10 07:02:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=acdba7c1c803f449de4fe7ca612739ed9ad8ced1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:51:7e:5b:ef:fe:f8:6a:96:51:19:c6:f0:
                    70:b8:62:56:60:9c:e5:77:4e:04:59:b5:24:32:a8:
                    ad:d7:64:5c:e0:07:af:56:ff:03:db:64:d8:b8:2e:
                    84:c6:02:87:e8:c0:b1:6e:c0:db:e4:e3:a7:00:11:
                    7c:07:45:1b:4f:27:0b:9f:b6:99:d2:32:5b:e6:44:
                    fc:38:11:ea:6c:df:85:ac:4c:93:de:d6:7c:0b:2c:
                    62:ad:93:56:36:0d:95:df:93:a1:c5:f2:ab:ef:a1:
                    6d:13:4b:16:32:94:26:f5:32:3d:3d:ec:1e:f3:fb:
                    bc:bf:0f:f9:ac:ac:ad:cf:f6:15:10:07:a4:d0:85:
                    d2:34:9f:83:0c:b0:6f:73:ef:5b:2b:f7:48:ee:37:
                    25:0c:21:53:af:95:9a:d6:38:96:c1:d0:e0:30:59:
                    f9:a7:75:a0:29:0a:e4:22:bd:90:00:42:fb:c5:5f:
                    5e:36:df:b3:47:6e:5b:57:cc:51:67:52:2b:61:a1:
                    59:ec:00:7c:20:e9:21:e0:b5:d8:79:80:e8:23:12:
                    2c:f3:c8:86:30:ad:46:07:29:42:20:00:cf:97:b4:
                    8a:92:31:d6:a5:f1:8c:69:da:b0:50:f2:1d:81:ef:
                    11:96:26:5e:e4:a2:74:42:ff:29:ca:13:6b:2f:8d:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DB:A7:C1:C8:03:F4:49:DE:4F:E7:CA:61:27:39:ED:9A:D8:CE:D1
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rNunwcgD9EneT-fKYSc57ZrYztE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:68:80:8d:b8:fc:3b:b8:b0:a7:28:50:ff:a1:1e:ec:c3:56:
         aa:12:ad:d0:57:fc:bb:aa:ed:4d:ce:35:d0:ff:ee:6e:75:db:
         bf:74:3a:f4:5f:d4:6b:f7:86:59:6c:04:7e:a0:57:b2:43:cb:
         ae:38:b7:d4:97:fc:30:ac:82:95:e6:48:30:ad:6c:d6:5e:a4:
         60:b0:b4:3e:14:2c:75:8b:5e:9d:b2:93:df:a1:9d:26:81:d2:
         54:3e:31:67:05:91:81:9b:b4:a2:11:80:b6:b0:f1:ae:cb:14:
         71:ed:5c:e6:c2:e0:bf:d2:9b:e6:fd:72:5a:77:4e:c6:22:9e:
         98:2a:20:bf:2e:46:a1:81:d6:06:82:8c:c0:61:c6:d9:af:58:
         70:7f:76:f5:d3:1c:b0:ce:91:08:ca:2f:e7:d5:92:c8:ac:f8:
         49:df:c1:fe:af:f4:c9:5e:2c:aa:ae:93:dd:59:24:0e:d3:0b:
         e7:99:15:0c:50:12:96:a1:c8:0c:62:64:cb:44:2f:3b:1a:86:
         45:93:93:2a:69:fc:e8:bb:82:c4:aa:b1:01:8a:6c:d8:7f:1c:
         70:65:ee:4d:44:c0:a6:2d:7c:02:42:47:e4:cb:40:85:31:97:
         6a:7b:e5:d9:2b:64:57:e1:a0:ba:56:52:1d:e7:38:29:8a:a5:
         af:10:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 20:18:17 2025 by rpki-client