This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/YEUnSBKT0NF45geJlh4cxnhY8-E.roa
File:                     YEUnSBKT0NF45geJlh4cxnhY8-E.roa (raw, json)
Hash identifier:          5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=
Subject key identifier:   60:45:27:48:12:93:D0:D1:78:E6:07:89:96:1E:1C:C6:78:58:F3:E1
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       019B7834CC68A5AAF25DB587993B587AC184
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/YEUnSBKT0NF45geJlh4cxnhY8-E.roa
Signing time:             Thu 01 Jan 2026 06:18:04 +0000
ROA not before:           Thu 01 Jan 2026 06:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57966
IP address blocks:        91.237.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:cc:68:a5:aa:f2:5d:b5:87:99:3b:58:7a:c1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Jan  1 06:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=604527481293d0d178e60789961e1cc67858f3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:c8:65:4b:93:46:3e:57:f5:13:5b:24:8e:
                    16:b8:b6:b3:48:e6:41:c9:06:fb:96:75:2b:a0:8b:
                    60:59:2f:15:b8:41:ae:75:80:9d:09:92:8b:d9:ef:
                    97:08:33:75:a4:80:cb:e2:bb:bf:85:13:6b:87:d9:
                    22:53:1b:75:bd:eb:a0:80:07:f5:b9:b3:fd:58:20:
                    f8:05:58:c8:68:94:1b:8c:40:6b:ae:36:23:38:5c:
                    38:b0:4a:3b:d8:ce:5e:6f:a9:0a:74:59:91:85:5e:
                    20:95:19:59:ec:54:ed:5b:9e:a2:3b:e7:3f:21:88:
                    7f:95:4e:72:9f:c0:d3:bf:a1:32:a3:8c:41:45:3a:
                    0c:79:2c:1f:f4:92:3d:56:84:ad:92:9a:57:27:fc:
                    3d:80:ec:8d:5f:de:cc:ca:79:0f:32:18:6c:c8:0c:
                    38:e3:2e:37:31:fc:08:f3:cd:c9:f1:72:ca:33:7a:
                    b4:82:ba:5a:a5:ad:c4:7e:87:5c:7e:16:c3:fa:ae:
                    cd:1d:56:1a:14:b9:23:d4:ef:0c:94:66:29:99:89:
                    b4:8b:24:b5:bf:fb:f8:51:7a:cf:6f:43:b8:a2:b4:
                    d4:2c:00:dd:b1:fa:87:79:98:49:8e:1b:94:b4:98:
                    77:ce:68:5a:61:85:fc:c1:f5:7e:25:d0:b7:d8:58:
                    a8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:45:27:48:12:93:D0:D1:78:E6:07:89:96:1E:1C:C6:78:58:F3:E1
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/YEUnSBKT0NF45geJlh4cxnhY8-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:35:49:cb:8f:c3:cf:48:07:1c:53:14:b4:5e:a4:f1:3f:a8:
         b6:26:91:f7:87:b7:b8:28:43:c8:49:20:57:03:08:51:e4:a5:
         a6:a9:31:7a:9c:2d:d0:d1:51:b4:25:1d:fb:6a:24:a7:c4:e9:
         f8:0b:39:70:a9:0e:e3:93:f7:b4:e0:e2:53:6e:8b:ab:1a:5e:
         5e:8e:30:27:73:b5:c3:4a:ef:e7:84:37:80:cd:c7:a5:7f:5a:
         03:19:3e:33:0b:7e:84:cf:a0:a8:99:8d:3e:40:03:22:30:56:
         2f:32:01:9e:03:22:0d:fc:87:2c:8e:ce:ee:bb:9d:1b:0c:28:
         21:79:58:b3:1d:7d:31:fc:8e:3b:c8:e6:e9:9b:43:ea:00:ec:
         38:4d:3d:e1:2c:53:0f:84:ce:90:4c:af:4b:b2:20:4e:c3:6c:
         93:0d:52:cf:79:81:c8:00:2b:45:13:46:c9:22:b3:26:23:61:
         28:f8:06:21:d2:fb:1f:fb:37:d3:66:39:6c:56:7f:5d:16:0b:
         9f:36:6d:19:5c:e4:2b:ea:cd:fb:be:d8:d5:7e:21:8f:ca:4c:
         6b:22:d6:f7:78:67:b8:d0:7e:8b:57:02:36:97:93:6d:0b:f1:
         07:a5:47:f5:fb:c9:8a:da:4e:74:eb:b8:25:b8:c6:10:d4:05:
         e2:52:1f:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NMxoparyXbWHmTtYesGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWMyODhjZjc3OGVkZGQ2MjFlMzM2NDViZjU1ZDdlN2E4
YTZlODAwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDQ1Mjc0ODEyOTNkMGQxNzhlNjA3ODk5NjFlMWNjNjc4NThmM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZvIZUuTRj5X9RNbJI4WuLazSOZB
yQb7lnUroItgWS8VuEGudYCdCZKL2e+XCDN1pIDL4ru/hRNrh9kiUxt1veuggAf1
ubP9WCD4BVjIaJQbjEBrrjYjOFw4sEo72M5eb6kKdFmRhV4glRlZ7FTtW56iO+c/
IYh/lU5yn8DTv6Eyo4xBRToMeSwf9JI9VoStkppXJ/w9gOyNX97MynkPMhhsyAw4
4y43MfwI883J8XLKM3q0grpapa3EfodcfhbD+q7NHVYaFLkj1O8MlGYpmYm0iyS1
v/v4UXrPb0O4orTULADdsfqHeZhJjhuUtJh3zmhaYYX8wfV+JdC32FioZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGBFJ0gSk9DReOYHiZYeHMZ4WPPhMB8GA1UdIwQY
MBaAFOqsKIz3eO3dYh4zZFv1XX56im6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYt
NzFiOTM4YWU0Y2NkLzEvWUVVblNCS1QwTkY0NWdlSmxoNGN4bmhZOC1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wMmY4NWItYzRjNS00ZGZjLTkzOGYtNzFiOTM4YWU0Y2Nk
LzEvNnF3b2pQZDQ3ZDFpSGpOa1dfVmRmbnFLYm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+1QMA0G
CSqGSIb3DQEBCwUAA4IBAQC6NUnLj8PPSAccUxS0XqTxP6i2JpH3h7e4KEPISSBX
AwhR5KWmqTF6nC3Q0VG0JR37aiSnxOn4CzlwqQ7jk/e04OJTbourGl5ejjAnc7XD
Su/nhDeAzcelf1oDGT4zC36Ez6ComY0+QAMiMFYvMgGeAyIN/Icsjs7uu50bDCgh
eVizHX0x/I47yObpm0PqAOw4TT3hLFMPhM6QTK9LsiBOw2yTDVLPeYHIACtFE0bJ
IrMmI2Eo+AYh0vsf+zfTZjlsVn9dFgufNm0ZXOQr6s37vtjVfiGPykxrItb3eGe4
0H6LVwI2l5NtC/EHpUf1+8mK2k5067gluMYQ1AXiUh9e
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:28 2026 by rpki-client