This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/yRCpMkJ705selkT08I36IMmYIlY.roa
File:                     yRCpMkJ705selkT08I36IMmYIlY.roa (raw, json)
Hash identifier:          hloxziWwUtIN0Koepq/2gYgoxDx7Sw8NWk4nK4ub/I0=
Subject key identifier:   C9:10:A9:32:42:7B:D3:9B:1E:96:44:F4:F0:8D:FA:20:C9:98:22:56
Certificate issuer:       /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial:       019A5A2C81C45094F953310764AABF7A366A
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/yRCpMkJ705selkT08I36IMmYIlY.roa
Signing time:             Thu 06 Nov 2025 17:17:37 +0000
ROA not before:           Thu 06 Nov 2025 17:17:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209316
IP address blocks:        194.92.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:5a:2c:81:c4:50:94:f9:53:31:07:64:aa:bf:7a:36:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
        Validity
            Not Before: Nov  6 17:17:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c910a932427bd39b1e9644f4f08dfa20c9982256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:5c:e3:a9:2b:c7:53:26:57:e4:58:53:5d:
                    17:78:4a:fc:9a:66:dd:a9:2a:60:c3:b6:72:a0:bb:
                    38:d9:c3:54:9f:23:58:7b:e2:19:39:73:64:52:df:
                    4b:1e:a2:b9:74:f4:a1:67:01:0f:12:45:ab:f4:00:
                    92:1d:1e:13:c9:27:dc:66:5c:4e:e9:0e:d3:b5:6c:
                    df:93:a8:5e:35:69:1e:8d:52:a9:2e:d7:98:9c:9a:
                    fd:d7:18:40:33:7d:3b:b5:77:e3:f5:d6:8e:2d:36:
                    03:54:e9:f8:77:70:e4:35:30:13:d1:bf:ec:9b:35:
                    29:17:ca:fc:32:38:38:44:83:19:a1:4e:ce:74:3d:
                    f0:3d:e0:8b:d5:1e:31:39:e8:9e:6c:35:6e:88:58:
                    1e:ae:8c:75:29:6b:8d:09:fb:89:96:1c:8d:5d:47:
                    b8:84:af:af:f7:fc:52:2c:10:ed:c3:a5:b7:03:e0:
                    bb:cf:2c:95:a4:6c:95:df:72:37:08:6f:91:d8:ea:
                    0e:51:7c:bd:2a:9c:a0:a6:0b:ac:5f:37:a7:71:9f:
                    45:ea:b6:6c:94:a1:6f:3d:c3:c2:8a:55:dc:a3:0e:
                    c5:65:18:cb:2f:18:60:43:04:11:45:94:bc:4d:e1:
                    56:59:43:ac:6d:bf:1b:e1:ea:68:87:7d:b2:59:c7:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:A9:32:42:7B:D3:9B:1E:96:44:F4:F0:8D:FA:20:C9:98:22:56
            X509v3 Authority Key Identifier:
                keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/yRCpMkJ705selkT08I36IMmYIlY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.92.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:e1:07:44:4c:71:63:90:b3:fa:50:0a:42:9e:20:09:9a:7a:
         2c:a0:52:e1:2a:d7:b0:66:b9:bd:59:e3:5a:78:2a:0c:31:fc:
         f0:1c:59:14:f7:15:55:cd:59:74:7a:30:59:b2:c8:5f:c5:75:
         a3:54:bd:84:35:cb:2e:11:19:73:ba:21:1f:a5:19:e0:b5:ae:
         26:0f:6a:0c:7c:26:21:3f:cb:9b:0e:f9:7b:60:99:58:ce:e9:
         5c:7c:70:e8:30:80:6a:2c:2d:29:4e:de:06:70:15:a8:cd:b7:
         56:64:86:9c:a8:28:3a:17:91:13:a6:06:b4:50:d6:c9:17:2a:
         a6:06:61:e0:c8:61:fe:79:1f:24:8a:74:85:6c:0d:63:d6:3e:
         dc:43:1e:ec:66:49:13:a5:37:43:28:67:4c:43:b3:2a:be:30:
         3b:29:13:16:30:d1:19:69:0e:5a:93:f3:2f:08:a7:95:a0:d1:
         43:20:83:46:fb:af:cb:ad:7d:87:62:41:fb:90:33:4b:3e:2b:
         58:1d:a8:d2:31:ab:69:4c:b8:dc:6e:6e:08:0c:0e:62:66:8e:
         bd:b3:71:04:d1:69:f6:83:1a:1e:ef:44:6c:fd:ff:5a:8f:c1:
         ec:2b:9f:7a:48:a8:f5:b5:90:d2:e6:bb:86:aa:2a:95:5c:2f:
         f8:a0:b0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:51:59 2025 by rpki-client