This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/SyIG9NJxGW9KUTgjUx79TlL5O30.roa
File:                     SyIG9NJxGW9KUTgjUx79TlL5O30.roa (raw, json)
Hash identifier:          EGPh6In0bkdx7KM76oGtCsHkMFmct6zVay9ocJ+HUSQ=
Subject key identifier:   4B:22:06:F4:D2:71:19:6F:4A:51:38:23:53:1E:FD:4E:52:F9:3B:7D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019A92CFB843B5E63B18750A3A70DE163AC6
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/SyIG9NJxGW9KUTgjUx79TlL5O30.roa
Signing time:             Mon 17 Nov 2025 17:14:37 +0000
ROA not before:           Mon 17 Nov 2025 17:14:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209456
IP address blocks:        194.62.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:92:cf:b8:43:b5:e6:3b:18:75:0a:3a:70:de:16:3a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Nov 17 17:14:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4b2206f4d271196f4a513823531efd4e52f93b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:9e:56:92:78:84:b5:12:5c:62:11:d1:70:
                    ec:1f:86:05:51:e8:0b:58:22:b4:48:b7:5e:de:f6:
                    08:6e:70:ef:86:83:27:3d:d2:fc:86:0b:e4:02:4b:
                    c8:49:a0:7b:20:6c:bf:29:b0:78:04:5d:bb:55:b7:
                    dd:fd:25:0a:a8:58:7b:3c:60:6c:8c:a3:0f:89:e6:
                    96:26:2c:a1:c3:a5:f4:1e:67:a2:d3:28:2d:15:10:
                    0e:a1:27:0e:64:32:e9:bd:83:ba:4c:9c:bc:0e:a6:
                    4a:06:5a:28:8e:08:63:94:45:2d:e8:ef:75:a6:96:
                    18:34:d2:cd:b7:b0:68:ee:a1:8d:f8:e4:25:6e:1b:
                    aa:42:81:6d:0a:d1:b3:bb:86:0b:91:ca:1d:55:46:
                    04:6b:dd:4e:83:79:1c:9f:f4:d6:85:2c:19:72:a7:
                    d3:3f:32:2f:5b:a5:f7:9e:cd:44:55:e2:32:d5:a3:
                    6b:73:d8:0f:ae:f4:51:8e:68:d4:e7:d5:9e:1e:88:
                    60:04:df:0c:f5:b9:cc:74:8b:a0:68:6d:fc:10:81:
                    a2:4b:0c:db:5e:be:73:40:eb:c5:69:2b:a0:75:e5:
                    cd:d9:7f:0d:95:9a:4c:69:d4:e5:71:6f:e5:04:c0:
                    0b:28:d5:eb:95:6a:2e:e7:cb:f2:5b:a8:79:80:59:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:22:06:F4:D2:71:19:6F:4A:51:38:23:53:1E:FD:4E:52:F9:3B:7D
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/SyIG9NJxGW9KUTgjUx79TlL5O30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:16:41:ae:5e:b5:8f:ec:4d:7b:ef:5d:88:3b:16:25:31:55:
         9b:84:d5:6e:ea:5a:0a:52:46:7e:13:0b:7d:9a:35:b8:bf:42:
         03:9f:e4:e6:5e:6e:62:83:0b:25:ac:bc:ce:f6:aa:bb:9e:16:
         98:59:6b:86:9c:cb:5a:db:c0:09:29:87:e6:67:6e:66:7f:7c:
         91:0a:47:e2:82:ef:dc:f5:b7:f8:67:13:01:8f:1c:31:7a:a0:
         5e:b4:a7:18:67:b3:35:f4:c1:87:ca:63:f2:43:aa:1b:76:c8:
         9e:5e:84:5a:fc:a0:d4:e8:b4:ff:97:9e:97:c3:69:83:64:cd:
         d4:66:72:24:0d:a8:3d:71:08:91:b1:1b:a5:5d:7a:30:82:b0:
         b7:30:da:30:a0:69:23:ce:5d:72:65:a6:65:6d:49:95:06:e3:
         ea:38:9f:62:d4:38:b8:b7:84:c4:f3:23:51:74:97:1c:dc:28:
         c9:02:3a:2c:d3:ab:32:cb:5d:4e:7c:83:cd:45:29:81:7e:75:
         00:b4:85:07:61:9f:88:2b:71:a7:93:52:a1:67:d4:dd:c2:af:
         8a:87:fc:eb:96:07:a3:8d:fb:3d:8b:9e:de:12:8e:33:30:c5:
         3a:73:66:a4:cb:11:c3:07:43:d9:5d:45:c6:46:82:56:38:50:
         a5:2e:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:15:05 2025 by rpki-client