This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CybUaoE-1zIBrxVRyCGND427ieM.roa
File:                     CybUaoE-1zIBrxVRyCGND427ieM.roa (raw, json)
Hash identifier:          8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=
Subject key identifier:   0B:26:D4:6A:81:3E:D7:32:01:AF:15:51:C8:21:8D:0F:8D:BB:89:E3
Certificate issuer:       /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial:       019B7BA3E687BAC5E4522726A9623FF7CA1C
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CybUaoE-1zIBrxVRyCGND427ieM.roa
Signing time:             Thu 01 Jan 2026 22:18:17 +0000
ROA not before:           Thu 01 Jan 2026 22:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197889
IP address blocks:        195.184.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:e6:87:ba:c5:e4:52:27:26:a9:62:3f:f7:ca:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
        Validity
            Not Before: Jan  1 22:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b26d46a813ed73201af1551c8218d0f8dbb89e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:86:0e:8a:3a:94:1c:4b:72:81:49:81:17:
                    9f:d1:17:fc:53:92:ae:7c:fd:f3:66:72:cf:41:da:
                    f9:58:30:25:c1:20:6b:8e:0b:31:6d:f5:1e:8e:50:
                    89:fd:c7:3b:0e:51:63:64:63:e9:6f:f2:d0:7c:f3:
                    83:ac:3e:17:67:33:cf:cd:9f:e3:ff:e2:bb:4f:95:
                    83:c4:e8:75:9e:47:9d:10:5d:a5:1b:b8:44:f3:c9:
                    49:01:04:77:a7:74:34:fe:4a:9c:18:3c:bc:11:f5:
                    11:f7:3b:db:47:4e:6a:c0:a5:0b:d7:8a:64:5d:11:
                    da:47:78:1e:39:1c:27:8b:17:89:0b:8c:f6:8a:aa:
                    be:77:ac:90:76:58:36:b5:32:94:63:a1:5f:61:3c:
                    ef:c6:16:0b:3e:76:2a:84:67:97:c9:5d:b3:de:66:
                    7f:54:92:82:9a:10:48:9f:11:d4:db:a8:07:01:dd:
                    51:20:f5:fd:e4:c3:63:3d:ab:87:e4:d8:5c:bb:d2:
                    8b:dd:7a:04:b8:b6:9b:05:c6:d2:55:88:09:fe:e0:
                    b9:4b:9a:89:00:20:b2:ba:7c:80:37:ce:0f:b5:cf:
                    c4:aa:0a:4e:53:8d:8d:d6:b8:63:81:6c:da:21:3e:
                    64:21:49:7d:ac:42:67:bd:d7:53:e6:e4:ed:6c:6a:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:26:D4:6A:81:3E:D7:32:01:AF:15:51:C8:21:8D:0F:8D:BB:89:E3
            X509v3 Authority Key Identifier:
                keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/CybUaoE-1zIBrxVRyCGND427ieM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.184.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:d9:ac:bd:67:44:17:7a:95:93:96:7a:9a:71:32:b8:eb:1f:
         ec:c5:ae:9e:7a:2b:df:75:ee:38:9e:a7:c4:a0:f0:85:83:01:
         4a:46:01:c7:8b:90:ce:e6:4f:c8:63:36:d8:ab:7d:fa:e4:1a:
         68:b7:5a:92:61:42:96:6c:e4:50:e5:32:a1:13:a0:81:85:b0:
         91:66:5d:0e:ff:5b:04:27:f7:cd:77:ef:dd:d9:07:95:02:4c:
         4a:2e:9a:18:ce:90:65:df:56:20:b0:db:f0:36:f7:e6:33:5c:
         33:ee:17:84:7b:77:20:f1:3e:2f:4a:9c:c1:e8:a2:7f:6a:69:
         18:84:c2:69:f1:88:47:a7:ca:f9:40:4a:64:4a:e8:1e:c9:04:
         d6:aa:80:e5:87:a8:b2:80:dd:71:6b:e9:48:a6:5e:53:c7:06:
         ab:3c:55:8c:57:7f:95:5a:75:89:01:db:8f:79:63:37:0e:a7:
         12:98:ac:89:e8:a7:1e:b5:6c:a0:3f:f7:fb:37:bb:42:97:bc:
         90:c7:7e:aa:ab:27:ae:0d:62:19:47:14:5b:de:0c:ec:f8:ef:
         54:9a:a8:a1:af:e2:62:4e:08:83:5c:3f:fc:f3:6d:72:8f:29:
         24:79:9c:62:b4:5e:cd:fc:0e:45:ca:c4:71:2f:0d:eb:00:bd:
         fb:18:35:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:57 2026 by rpki-client