This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/YyEjnHRlckr_V27zZG0mJ7mtsUY.roa
File:                     YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (raw, json)
Hash identifier:          TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=
Subject key identifier:   63:21:23:9C:74:65:72:4A:FF:57:6E:F3:64:6D:26:27:B9:AD:B1:46
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       019B78A2DF833BF875491F816E246E905A73
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/YyEjnHRlckr_V27zZG0mJ7mtsUY.roa
Signing time:             Thu 01 Jan 2026 08:18:18 +0000
ROA not before:           Thu 01 Jan 2026 08:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20712
IP address blocks:        45.139.229.0/24 maxlen: 24
                          45.139.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:df:83:3b:f8:75:49:1f:81:6e:24:6e:90:5a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Jan  1 08:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6321239c7465724aff576ef3646d2627b9adb146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:65:2b:88:86:d5:af:92:88:db:a1:9a:35:
                    6e:70:4b:5d:d8:7d:b2:ee:67:83:97:9f:79:c9:de:
                    55:e1:e1:73:03:ea:98:21:86:d9:ca:1c:ce:fe:26:
                    85:05:39:0f:dc:77:eb:78:de:21:b4:03:c2:27:5d:
                    76:79:ba:7e:6d:1f:cb:c4:48:d8:b1:a2:25:3e:af:
                    2a:81:dd:76:00:0e:d8:2e:0f:11:ca:46:98:92:30:
                    7d:27:3f:3f:08:da:96:df:33:07:93:4d:26:52:41:
                    68:86:00:cd:77:b6:dd:8b:ea:e7:ee:42:87:a8:de:
                    6b:5b:21:c4:64:59:e6:ba:22:e6:1a:e4:22:94:13:
                    21:af:55:8b:36:ac:f6:85:e9:b2:07:9c:8c:c3:8b:
                    31:08:f8:13:65:03:bc:36:93:b2:38:fb:4d:df:64:
                    b6:53:9c:ff:89:83:1b:39:32:09:58:44:77:40:3d:
                    79:89:b3:4f:7f:98:e2:4c:3b:94:1d:92:d4:33:c0:
                    3a:f0:7b:8c:97:02:b1:19:30:da:71:17:fa:f0:c4:
                    3d:5e:36:9c:ba:00:51:32:b7:9a:21:03:a2:9c:67:
                    3b:b3:92:19:78:2f:ae:b3:40:12:5b:de:3b:04:b1:
                    f0:a3:0e:f8:80:97:c8:96:e5:25:68:7a:56:34:8a:
                    07:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:21:23:9C:74:65:72:4A:FF:57:6E:F3:64:6D:26:27:B9:AD:B1:46
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/YyEjnHRlckr_V27zZG0mJ7mtsUY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.229.0/24
                  45.139.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:dd:24:68:8e:82:69:e2:e3:4c:53:35:5b:b7:8d:7b:42:78:
         d1:d7:ea:07:1d:52:8c:31:52:53:73:0d:ee:55:0b:20:83:ea:
         78:c6:7f:23:f4:51:31:13:67:ff:c8:eb:85:e3:95:ab:af:26:
         f3:db:2c:08:63:02:9e:bf:60:35:be:e2:a9:e2:10:7c:9f:72:
         b0:5d:2c:44:93:ce:2a:05:61:12:e9:7e:a4:c4:ff:26:bf:ea:
         0f:d8:c5:ba:9b:67:f8:dc:ee:88:68:46:13:64:49:03:f6:bc:
         4a:78:31:be:46:82:c3:46:9a:30:47:9f:0a:0c:00:d0:13:7e:
         a2:33:d8:e6:b2:3c:2b:91:b0:22:3d:44:6e:a9:aa:bf:df:8a:
         b8:22:1d:8e:e5:52:e2:2a:08:ca:ce:68:ee:00:06:51:7d:19:
         9d:6f:30:a4:cf:5e:78:79:ad:a5:f3:f7:c3:10:ef:6e:bd:77:
         2e:8f:db:ef:1c:4c:b4:4d:26:9b:36:b6:08:bd:58:b6:11:09:
         9d:46:3f:2f:2a:d0:63:8d:c0:8d:79:dc:fa:be:67:ce:c9:2b:
         ba:f1:d6:53:72:bd:50:f3:de:df:24:e6:34:d9:92:82:2b:8c:
         d8:5d:f3:c4:20:d2:b6:66:c4:c9:46:0a:92:34:d3:c1:c0:2c:
         29:0a:56:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt4ot+DO/h1SR+BbiRukFpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzIxMjM5Yzc0NjU3MjRhZmY1NzZlZjM2NDZkMjYyN2I5YWRiMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR1lK4iG1a+SiNuhmjVucEtd2H2y
7meDl595yd5V4eFzA+qYIYbZyhzO/iaFBTkP3HfreN4htAPCJ112ebp+bR/LxEjY
saIlPq8qgd12AA7YLg8RykaYkjB9Jz8/CNqW3zMHk00mUkFohgDNd7bdi+rn7kKH
qN5rWyHEZFnmuiLmGuQilBMhr1WLNqz2hemyB5yMw4sxCPgTZQO8NpOyOPtN32S2
U5z/iYMbOTIJWER3QD15ibNPf5jiTDuUHZLUM8A68HuMlwKxGTDacRf68MQ9Xjac
ugBRMreaIQOinGc7s5IZeC+us0ASW947BLHwow74gJfIluUlaHpWNIoHwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGMhI5x0ZXJK/1du82RtJie5rbFGMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvWXlFam5IUmxja3JfVjI3elpHMG1KN210c1VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYvlAwQA
LYvnMA0GCSqGSIb3DQEBCwUAA4IBAQDK3SRojoJp4uNMUzVbt417QnjR1+oHHVKM
MVJTcw3uVQsgg+p4xn8j9FExE2f/yOuF45Wrrybz2ywIYwKev2A1vuKp4hB8n3Kw
XSxEk84qBWES6X6kxP8mv+oP2MW6m2f43O6IaEYTZEkD9rxKeDG+RoLDRpowR58K
DADQE36iM9jmsjwrkbAiPURuqaq/34q4Ih2O5VLiKgjKzmjuAAZRfRmdbzCkz154
ea2l8/fDEO9uvXcuj9vvHEy0TSabNrYIvVi2EQmdRj8vKtBjjcCNedz6vmfOySu6
8dZTcr1Q897fJOY02ZKCK4zYXfPEINK2ZsTJRgqSNNPBwCwpClbU
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:38:13 2026 by rpki-client