This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/YaozTdvah4PyD6CuJmnyOrAMFLM.roa
File:                     YaozTdvah4PyD6CuJmnyOrAMFLM.roa (raw, json)
Hash identifier:          TPg/XsH5Y8UGf7ia69jAJB3rN1a2sdNkkH/G/KTnbJY=
Subject key identifier:   61:AA:33:4D:DB:DA:87:83:F2:0F:A0:AE:26:69:F2:3A:B0:0C:14:B3
Certificate issuer:       /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial:       019B77C72A267A17A999B1922D05C5B5C786
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/YaozTdvah4PyD6CuJmnyOrAMFLM.roa
Signing time:             Thu 01 Jan 2026 04:18:19 +0000
ROA not before:           Thu 01 Jan 2026 04:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43366
IP address blocks:        185.79.8.0/22 maxlen: 24
                          2a05:6c80::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:2a:26:7a:17:a9:99:b1:92:2d:05:c5:b5:c7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
        Validity
            Not Before: Jan  1 04:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=61aa334ddbda8783f20fa0ae2669f23ab00c14b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:09:ad:cc:cf:fc:07:d3:07:b7:4c:0c:0a:
                    65:05:0e:3e:58:62:4c:5c:3b:84:7a:65:7e:26:a2:
                    ac:97:cd:ff:4f:36:fa:6b:97:4a:83:d4:c7:41:70:
                    f6:02:d7:6b:c8:d1:2f:ca:95:bd:7a:85:ab:da:fb:
                    bd:d3:cb:3f:84:4a:38:7e:64:d4:43:6b:e5:3b:15:
                    8b:8d:bb:69:5e:07:fe:58:42:c1:0f:7e:6a:84:5e:
                    23:54:76:49:16:12:1e:10:15:5b:db:dd:92:b9:35:
                    61:9b:5a:76:d2:80:3b:4c:d9:14:99:0b:12:55:99:
                    c7:e1:a0:b6:a9:49:d9:60:38:fd:03:e5:34:39:88:
                    96:5b:25:72:8d:69:e6:d1:98:10:c6:37:8c:b5:4e:
                    4c:99:c6:8e:e3:98:39:bf:fd:40:e9:f9:2f:d8:6d:
                    7b:f8:b9:5f:c3:18:e7:0f:44:52:e0:36:64:2b:63:
                    77:4c:cb:ca:3c:3a:ab:a3:0c:94:04:20:89:f0:e4:
                    94:c3:98:56:08:c4:27:5a:9e:01:85:8b:6c:aa:b8:
                    74:ff:75:97:3b:4b:27:9c:c1:ce:2a:d7:94:34:e7:
                    77:4d:0e:82:49:7d:c7:68:4d:51:9c:b9:cd:9b:fd:
                    ea:9a:8c:ab:f6:13:c2:72:15:db:e1:b5:15:50:46:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:33:4D:DB:DA:87:83:F2:0F:A0:AE:26:69:F2:3A:B0:0C:14:B3
            X509v3 Authority Key Identifier:
                keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/YaozTdvah4PyD6CuJmnyOrAMFLM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.8.0/22
                IPv6:
                  2a05:6c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:47:93:15:62:29:0e:d0:04:e8:d0:44:11:93:ff:6d:85:
         60:7d:db:bb:47:fa:9a:f4:f5:33:54:35:de:a1:f0:0e:37:30:
         b9:17:94:ff:df:fd:64:b9:08:db:91:5b:93:b4:4d:9c:57:17:
         69:87:4e:d5:38:6e:0e:78:35:6f:d3:a2:75:ad:12:f4:d5:c0:
         bb:67:79:d5:c3:65:b4:4c:bb:63:35:0d:1b:a5:f0:8e:da:75:
         a5:c0:4e:7d:68:70:76:8b:43:54:33:5b:62:11:29:0d:79:11:
         35:81:20:25:6d:a3:49:07:0e:86:49:c7:4a:d8:88:a8:d7:6d:
         53:10:8b:a4:b5:3f:3f:81:95:65:0a:3b:ff:7d:26:c9:e9:bd:
         06:0b:f8:67:ed:27:32:ce:30:ba:53:e3:b1:e1:25:f8:3b:d0:
         b0:25:e5:1b:3d:7f:7d:e7:82:4a:c4:2f:4a:51:8e:b0:02:dc:
         7e:b2:f0:02:07:30:5b:e1:89:a1:7b:23:de:b7:98:b8:d5:ab:
         f3:0b:56:67:e2:70:7a:86:d5:21:72:eb:bd:c0:3c:d6:ce:78:
         f1:17:13:e5:51:ca:16:47:26:cd:dd:8b:0e:cf:21:55:81:09:
         28:5d:a6:fe:bf:52:17:f8:a5:0b:04:26:ca:9c:87:38:f1:f5:
         f6:11:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:48:54 2026 by rpki-client