This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/irgYiw5MuRIdgiDdQUORhNVzBec.roa
File:                     irgYiw5MuRIdgiDdQUORhNVzBec.roa (raw, json)
Hash identifier:          /M+J9cUhleCPzs5eGpoH2iuMA5gx4j86T1V+oAGj0iA=
Subject key identifier:   8A:B8:18:8B:0E:4C:B9:12:1D:82:20:DD:41:43:91:84:D5:73:05:E7
Certificate issuer:       /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial:       019B7B3656A815261E44017677DEC005F66D
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/irgYiw5MuRIdgiDdQUORhNVzBec.roa
Signing time:             Thu 01 Jan 2026 20:18:37 +0000
ROA not before:           Thu 01 Jan 2026 20:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5065
IP address blocks:        144.56.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:56:a8:15:26:1e:44:01:76:77:de:c0:05:f6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
        Validity
            Not Before: Jan  1 20:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ab8188b0e4cb9121d8220dd41439184d57305e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:ca:a0:86:9c:88:10:65:1c:ae:d0:01:16:
                    af:0b:9d:12:ec:97:cb:e8:01:dd:8d:ef:fb:21:dd:
                    e8:0b:e7:a9:d2:ad:c8:04:6a:b9:4c:cb:26:ad:c5:
                    1b:4d:b5:e8:40:95:41:57:23:42:31:e1:33:52:1a:
                    99:09:ee:74:15:73:fe:4a:e8:05:0a:0a:67:58:01:
                    71:d0:f1:7d:6a:cf:62:fa:ad:91:68:28:ce:b4:49:
                    32:b2:94:49:02:2c:c7:88:46:58:4e:e5:7c:8f:a9:
                    2d:ed:fa:b2:74:42:0d:61:c1:6b:71:31:ed:cd:bb:
                    45:ab:30:88:da:cc:c8:1a:a6:8c:90:d2:8f:5c:05:
                    bb:28:33:0a:21:0e:da:9e:59:62:f9:97:c5:73:d4:
                    6b:c7:4d:99:0d:e2:c5:9c:61:4b:7a:91:1c:b0:e2:
                    dc:c8:d3:5e:76:c3:63:75:1f:0a:6a:ca:e2:32:36:
                    75:d8:08:78:e5:bd:d5:9d:c3:3f:57:ac:e5:a8:6f:
                    1f:82:be:83:0a:2d:d4:4c:c4:09:92:57:bd:0d:7c:
                    34:d6:88:80:7d:a8:d0:b9:01:b2:a1:db:68:26:21:
                    12:3f:ba:78:fa:8e:e3:c0:df:c4:69:1a:00:15:5e:
                    df:7e:25:08:b8:55:4c:c3:9b:46:fe:bc:0b:0f:d0:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B8:18:8B:0E:4C:B9:12:1D:82:20:DD:41:43:91:84:D5:73:05:E7
            X509v3 Authority Key Identifier:
                keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/irgYiw5MuRIdgiDdQUORhNVzBec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.56.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:2a:1e:b9:31:0a:37:99:55:3b:fd:3e:5c:07:3f:26:fb:ac:
         50:b2:18:9a:3a:7c:18:ba:e3:90:8f:f9:c1:e2:ab:3e:bc:92:
         99:65:71:d9:b5:0f:04:b8:9a:77:25:d3:b8:4b:28:1f:0c:c4:
         91:af:46:c7:6e:d0:0c:3e:72:6b:fc:97:68:93:02:20:03:14:
         6f:61:d7:25:6c:d3:f9:06:43:b7:77:af:17:dd:bc:38:88:9d:
         1a:3c:f2:82:5b:3f:00:e5:ca:6c:c7:a8:52:ab:c4:4b:4a:7e:
         89:c4:9e:3a:9f:51:0b:39:aa:9b:2d:26:3f:7b:4a:06:e2:4b:
         56:4d:5a:94:de:c8:38:21:68:0b:f8:01:46:b6:57:6f:14:55:
         d8:d4:be:b0:81:72:0c:22:24:b7:19:7b:68:cb:2d:79:87:c6:
         47:c9:a9:02:33:4f:db:b0:a6:85:ee:52:bc:f3:44:9e:c9:ca:
         aa:d7:34:b6:d5:18:68:d2:01:31:51:11:10:b3:22:b1:4a:40:
         4f:f2:ee:de:17:39:55:cc:80:5d:f6:64:0f:1e:35:5a:5f:01:
         9b:06:21:fc:4a:5a:33:d1:06:ab:e6:79:83:3e:5f:2b:b6:c1:
         16:e2:b3:8e:e4:a3:71:49:4f:b3:43:67:d1:82:c9:c8:e8:7e:
         09:38:10:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:24:44 2026 by rpki-client