This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/poYWcnuxSWUQw-qCG45S2mPi0zU.roa
File:                     poYWcnuxSWUQw-qCG45S2mPi0zU.roa (raw, json)
Hash identifier:          3jABz4fmkg4saLIvKYstvBx79JjJ8+YfViVrz+rA8Jk=
Subject key identifier:   A6:86:16:72:7B:B1:49:65:10:C3:EA:82:1B:8E:52:DA:63:E2:D3:35
Certificate issuer:       /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial:       019B7BA4194BC2A6C4F378FAA3B9FB0B78E5
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/poYWcnuxSWUQw-qCG45S2mPi0zU.roa
Signing time:             Thu 01 Jan 2026 22:18:30 +0000
ROA not before:           Thu 01 Jan 2026 22:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209962
IP address blocks:        194.36.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:19:4b:c2:a6:c4:f3:78:fa:a3:b9:fb:0b:78:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
        Validity
            Not Before: Jan  1 22:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a68616727bb1496510c3ea821b8e52da63e2d335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:fd:5b:d5:89:72:a7:1e:34:b4:6d:36:30:
                    50:91:9b:d3:02:ca:37:28:a8:65:77:8e:24:a5:ed:
                    c4:76:05:9d:ce:98:76:4a:97:08:b1:83:ea:3f:51:
                    3c:a9:db:ad:63:73:68:cf:1f:b3:99:42:ee:1a:17:
                    30:f4:2e:06:e4:45:ab:b9:f9:dc:ad:4c:55:9a:1d:
                    f8:d0:df:81:2c:71:c4:0c:a6:f1:a9:f7:37:be:9a:
                    77:53:aa:4f:69:e4:d4:e4:01:cf:fd:fd:e4:21:4c:
                    51:75:11:78:cb:28:ba:d0:38:c4:3b:17:94:af:f5:
                    2c:b4:64:00:7d:6c:5a:e0:96:4b:17:97:ff:9b:38:
                    d7:df:af:84:88:fa:43:2e:19:ff:a4:6e:bd:e6:2f:
                    b0:ad:ec:92:1a:71:ad:71:e6:96:06:17:d5:b2:47:
                    a5:39:9b:08:2b:87:40:1e:42:0b:e6:dd:4d:11:6c:
                    f2:97:26:1b:84:82:8a:15:dc:83:c1:0e:24:57:c9:
                    31:49:12:54:81:14:f3:0e:71:c6:26:19:85:3f:a8:
                    d2:e3:3f:94:dc:fc:67:8a:97:5e:87:b7:62:50:a5:
                    96:a8:0d:c9:12:2f:ff:5c:4d:50:cd:40:5d:48:e5:
                    af:01:0c:09:11:67:96:3d:f7:d2:41:d2:e6:26:c8:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:86:16:72:7B:B1:49:65:10:C3:EA:82:1B:8E:52:DA:63:E2:D3:35
            X509v3 Authority Key Identifier:
                keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/poYWcnuxSWUQw-qCG45S2mPi0zU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.36.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:09:90:86:da:16:73:18:c4:09:12:c1:a2:4e:05:eb:25:65:
         f2:52:7b:a8:bb:9a:e2:94:f5:5b:63:cd:99:30:e3:eb:12:cc:
         9f:8e:35:0d:9e:06:2a:0c:ff:8c:70:46:ac:05:3c:00:13:57:
         f9:e8:e7:ba:bd:85:cc:fb:44:91:65:92:79:7d:b2:1a:fe:81:
         4b:a0:2d:0b:8a:ba:6b:ec:14:fe:d4:13:e4:e2:ee:88:93:27:
         d9:58:16:9e:59:2d:89:a4:51:76:c6:5c:b1:60:f0:50:ac:dc:
         05:e7:5d:a2:15:87:e9:7f:39:64:8d:15:cf:a1:12:64:de:b1:
         07:dc:5a:2b:07:d8:bf:db:1f:64:e0:2e:66:e2:ed:2b:47:3f:
         e0:ff:94:37:48:08:70:ab:e8:e7:56:1c:4e:e0:f0:c5:f2:f2:
         24:dc:a1:b4:a8:ce:26:a6:88:d9:bb:f6:58:88:cf:c0:e4:5d:
         43:8f:29:43:f7:39:f7:15:7d:cb:76:5a:1a:69:80:98:b2:f5:
         52:9f:ee:3d:7d:e0:38:f6:22:ae:42:25:60:67:4b:41:2f:40:
         97:57:e0:fd:07:e9:96:a6:7b:4e:96:64:3b:22:e0:27:ad:e5:
         ce:4f:bc:e3:f3:06:a8:32:1f:0e:a7:2a:00:93:78:0e:78:82:
         73:40:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:56 2026 by rpki-client