This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/yVcflys92CzAxU-EuN_3N-w3nlE.roa
File:                     yVcflys92CzAxU-EuN_3N-w3nlE.roa (raw, json)
Hash identifier:          zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=
Subject key identifier:   C9:57:1F:97:2B:3D:D8:2C:C0:C5:4F:84:B8:DF:F7:37:EC:37:9E:51
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       019B7CEE54339978E291C88265F8E4252FA4
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/yVcflys92CzAxU-EuN_3N-w3nlE.roa
Signing time:             Fri 02 Jan 2026 04:19:12 +0000
ROA not before:           Fri 02 Jan 2026 04:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207326
IP address blocks:        45.158.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:54:33:99:78:e2:91:c8:82:65:f8:e4:25:2f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: Jan  2 04:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c9571f972b3dd82cc0c54f84b8dff737ec379e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:39:5a:4d:cf:d8:89:d1:05:ee:f0:c2:44:
                    7d:40:ab:9b:4f:30:3d:22:22:52:b1:03:72:8c:e1:
                    e0:cc:be:45:a5:3b:a6:3c:2f:1e:21:72:62:7e:9b:
                    ce:5a:b9:86:75:a1:12:d0:c6:08:af:df:68:58:f9:
                    5a:89:02:62:6f:7a:b1:a2:6a:54:59:04:84:17:29:
                    76:7a:43:40:a3:24:f1:ed:1f:8b:7d:ab:93:bc:46:
                    d4:0e:af:7a:20:34:2c:20:90:0b:cd:b5:4d:4a:25:
                    12:61:60:0a:a7:f9:7b:73:46:10:9b:d3:57:54:88:
                    57:24:41:92:f3:75:47:9f:84:ca:d6:51:53:3f:4e:
                    5a:d7:ff:9c:9c:88:ed:f9:46:46:cd:f5:78:41:b5:
                    db:4d:b5:fe:1d:bf:5a:0c:a3:83:fd:17:19:c3:62:
                    d9:94:d2:8c:66:a6:e2:e8:1a:18:aa:c8:a5:31:e7:
                    31:fe:6e:23:fc:35:52:3d:32:d4:36:9e:ff:27:f5:
                    86:26:e4:bd:0e:1b:59:fe:02:74:10:e7:27:22:29:
                    60:9c:71:db:12:0b:73:ce:34:02:85:fb:06:bb:2d:
                    87:ca:bd:22:79:fb:eb:68:c3:f3:c3:e9:33:2b:56:
                    a9:e7:05:4b:8b:ca:f1:88:6f:f8:07:f1:c4:e9:9c:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:57:1F:97:2B:3D:D8:2C:C0:C5:4F:84:B8:DF:F7:37:EC:37:9E:51
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/yVcflys92CzAxU-EuN_3N-w3nlE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:08:c8:26:0a:cf:c2:52:66:3d:35:0a:2e:f1:92:67:f7:c4:
         83:96:60:d5:14:11:8e:05:ab:b9:5d:be:0f:d8:4f:51:e1:2f:
         fe:b6:0f:d9:5b:e8:9f:2e:c0:6d:6f:34:bf:60:ac:ac:49:8c:
         7a:de:a5:88:20:ad:4d:29:63:00:d4:cd:b0:52:2c:56:21:7a:
         ca:98:ce:4b:b8:eb:a1:cc:06:56:62:27:25:71:dd:bd:41:39:
         9c:6d:99:2c:e3:d0:f8:12:b5:78:4f:07:1b:22:f5:6d:1f:26:
         f1:6e:10:41:87:a2:82:df:ae:58:cd:33:77:a1:58:00:70:a4:
         4c:c6:78:65:6f:44:ee:80:21:c5:c3:fa:61:62:63:2f:ba:dc:
         00:6a:30:42:61:53:38:b6:77:ad:1f:a6:8b:53:1c:56:ea:11:
         2c:f5:bf:56:0e:eb:ce:ae:63:08:f5:14:01:45:e2:bb:ad:2e:
         64:21:96:75:e6:19:4f:e4:39:44:fe:5f:64:04:5d:41:29:5c:
         6c:85:60:d2:6f:39:2a:77:e0:41:ea:6b:00:6b:a9:92:5f:60:
         14:e7:09:6e:ba:14:80:ab:bc:8c:d1:dd:7d:0e:6a:23:d6:6b:
         f0:e2:10:fe:de:a4:41:04:5d:20:3a:e5:dc:e8:82:fc:66:39:
         c0:29:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:11:22 2026 by rpki-client