This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cryc4X_n6wYWELGhisS6AjE0cMI.roa
File:                     cryc4X_n6wYWELGhisS6AjE0cMI.roa (raw, json)
Hash identifier:          WYg80pcOZnNGSZlLmih6hXOItvCoKw4f6qy9b8eHIRI=
Subject key identifier:   72:BC:9C:E1:7F:E7:EB:06:16:10:B1:A1:8A:C4:BA:02:31:34:70:C2
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5C9E5BAE25451C12F6376584AA20B7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cryc4X_n6wYWELGhisS6AjE0cMI.roa
Signing time:             Fri 02 Jan 2026 06:19:40 +0000
ROA not before:           Fri 02 Jan 2026 06:19:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5687
IP address blocks:        2a0e:b107:2130::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:9e:5b:ae:25:45:1c:12:f6:37:65:84:aa:20:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:19:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=72bc9ce17fe7eb061610b1a18ac4ba02313470c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:b8:ed:da:16:e2:c1:32:2f:41:c6:36:c9:
                    7e:57:e4:d6:1d:10:52:2a:79:fa:ad:9a:c0:86:2d:
                    fe:36:6e:3f:d3:bd:be:6b:41:52:d8:f6:ae:5b:db:
                    9a:72:4e:1d:2c:c1:8a:09:bc:af:01:49:dd:9e:2f:
                    8a:b0:a4:31:6e:83:73:71:bb:58:69:ba:37:bb:b6:
                    d7:45:c1:9f:cb:14:bf:7b:05:e2:c5:a7:1c:de:87:
                    42:7a:30:c4:07:18:49:78:dd:52:9e:0c:7f:98:5f:
                    53:9e:fe:bb:7b:7b:dc:25:91:4b:5f:71:24:82:1c:
                    08:c7:78:95:44:4a:95:ad:20:42:db:3e:30:d7:d0:
                    5d:db:8f:2b:9d:69:13:66:78:8f:a2:8b:55:27:5e:
                    3b:b2:46:60:fc:19:5a:ab:17:0f:e9:7d:75:f6:08:
                    2b:2b:d2:4d:84:58:bb:3f:ee:5b:be:84:7c:8c:85:
                    9e:5f:3f:72:6e:29:2e:5d:2f:06:7c:0b:f4:0c:1a:
                    c3:4c:ce:a2:83:1f:b8:8e:b7:03:a7:85:27:d6:85:
                    3a:92:89:ed:7c:8e:72:f2:43:49:19:a0:eb:d3:c4:
                    c5:36:14:f1:de:cf:f4:3c:e2:a7:3e:b4:25:49:68:
                    08:15:76:53:ca:23:20:7e:8b:88:75:5d:82:07:a6:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BC:9C:E1:7F:E7:EB:06:16:10:B1:A1:8A:C4:BA:02:31:34:70:C2
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cryc4X_n6wYWELGhisS6AjE0cMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:2130::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:c4:8a:f4:30:d9:d9:32:d8:05:db:0c:e4:74:5e:6b:eb:
         ec:e5:21:df:74:44:79:99:42:a8:f0:9f:81:f0:d6:ce:e3:ae:
         52:5e:27:6b:5a:b1:36:9e:ee:81:5c:68:4b:35:0e:10:b7:db:
         0e:b1:1f:14:83:9e:ad:5f:80:9b:9a:57:eb:8c:83:4f:03:0b:
         a7:af:67:36:ef:cc:72:fc:7b:7b:ac:8a:f2:24:73:41:0a:02:
         8d:38:92:19:69:7f:26:8c:34:f0:58:ae:37:15:2c:29:38:1c:
         89:97:00:1e:cd:98:fb:de:cd:e3:80:cb:76:02:6c:cb:95:4a:
         33:78:28:03:62:51:88:d1:9c:9c:b1:23:ca:52:b8:cb:42:74:
         9f:5e:fb:6a:44:92:08:ca:df:49:6c:ac:30:06:04:81:1c:5c:
         37:d3:b9:c2:bb:d3:31:a9:f8:f9:62:16:7c:2f:c5:0b:a4:97:
         e2:61:55:67:57:84:ed:7c:0e:90:ac:f8:d4:6b:38:e3:dd:9a:
         f9:f8:78:4f:ad:3c:1c:f4:64:96:c4:a3:cb:73:f5:e1:20:65:
         76:80:6e:bf:c9:28:39:4d:cf:7f:92:a7:9d:a3:df:bc:5c:21:
         4c:8e:b7:bf:40:dc:f1:7b:06:98:cd:1b:5d:96:76:0d:96:8e:
         0d:44:84:03
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt9XJ5briVFHBL2N2WEqiC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmJjOWNlMTdmZTdlYjA2MTYxMGIxYTE4YWM0YmEwMjMxMzQ3MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPe47doW4sEyL0HGNsl+V+TWHRBS
Knn6rZrAhi3+Nm4/072+a0FS2PauW9uack4dLMGKCbyvAUndni+KsKQxboNzcbtY
abo3u7bXRcGfyxS/ewXixacc3odCejDEBxhJeN1Sngx/mF9Tnv67e3vcJZFLX3Ek
ghwIx3iVREqVrSBC2z4w19Bd248rnWkTZniPootVJ147skZg/BlaqxcP6X119ggr
K9JNhFi7P+5bvoR8jIWeXz9ybikuXS8GfAv0DBrDTM6igx+4jrcDp4Un1oU6kont
fI5y8kNJGaDr08TFNhTx3s/0POKnPrQlSWgIFXZTyiMgfouIdV2CB6as6QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHK8nOF/5+sGFhCxoYrEugIxNHDCMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvY3J5YzRYX242d1lXRUxHaGlzUzZBakUwY01JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByEw
MA0GCSqGSIb3DQEBCwUAA4IBAQAjxMSK9DDZ2TLYBdsM5HRea+vs5SHfdER5mUKo
8J+B8NbO465SXidrWrE2nu6BXGhLNQ4Qt9sOsR8Ug56tX4CbmlfrjINPAwunr2c2
78xy/Ht7rIryJHNBCgKNOJIZaX8mjDTwWK43FSwpOByJlwAezZj73s3jgMt2AmzL
lUozeCgDYlGI0ZycsSPKUrjLQnSfXvtqRJIIyt9JbKwwBgSBHFw307nCu9Mxqfj5
YhZ8L8ULpJfiYVVnV4TtfA6QrPjUazjj3Zr5+HhPrTwc9GSWxKPLc/XhIGV2gG6/
ySg5Tc9/kqedo9+8XCFMjre/QNzxewaYzRtdlnYNlo4NRIQD
-----END CERTIFICATE-----
Generated at Fri Jan 9 13:11:49 2026 by rpki-client