This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/yG8OClAoyMqfq82IuiIFSx-mshA.roa
File:                     yG8OClAoyMqfq82IuiIFSx-mshA.roa (raw, json)
Hash identifier:          rhx2M1njMLZRk77ABWV94m5CqXtG8JycmV5nS50EK8s=
Subject key identifier:   C8:6F:0E:0A:50:28:C8:CA:9F:AB:CD:88:BA:22:05:4B:1F:A6:B2:10
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019B7CEE5BC08367D498BF87C9D20D65D5AF
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/yG8OClAoyMqfq82IuiIFSx-mshA.roa
Signing time:             Fri 02 Jan 2026 04:19:14 +0000
ROA not before:           Fri 02 Jan 2026 04:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57095
IP address blocks:        87.229.69.0/24 maxlen: 24
                          178.238.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:5b:c0:83:67:d4:98:bf:87:c9:d2:0d:65:d5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jan  2 04:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c86f0e0a5028c8ca9fabcd88ba22054b1fa6b210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:20:2e:6a:71:99:f8:dd:49:6f:1d:a2:38:
                    60:4f:5e:59:db:d9:4a:4a:e4:cb:71:fa:4f:82:90:
                    07:d2:c2:4e:4d:fc:db:ac:93:2a:61:f3:65:f4:89:
                    65:66:2a:93:88:be:c5:9e:a1:e4:55:d5:c4:24:65:
                    62:5b:cf:f5:ce:8d:e2:0e:60:35:a8:2f:28:79:f4:
                    37:4e:e5:bb:44:dd:2f:82:65:73:52:4c:46:dd:8f:
                    1a:5e:40:b6:35:7f:1e:c2:bf:c8:f4:9c:5c:76:f7:
                    cf:13:a3:ab:ba:0a:c0:d1:9a:53:7d:f8:38:be:17:
                    1c:91:1d:8c:69:49:da:ae:38:b4:7a:be:b9:da:9e:
                    f2:28:57:44:be:2c:e1:c3:97:90:46:f0:fc:43:c3:
                    14:36:db:86:6c:8e:e1:5b:3e:b5:5c:c4:b7:1b:0e:
                    af:8c:bb:e4:e9:93:53:91:6a:8a:56:aa:bf:c3:4e:
                    ce:55:15:4d:c1:75:9b:b3:28:62:93:88:67:5a:71:
                    4e:19:13:b8:d4:b2:c9:be:d2:61:68:04:cd:43:5b:
                    e2:d2:04:87:83:e5:1c:7e:48:89:6e:cb:ab:d7:5c:
                    46:e1:a4:d4:2d:9e:5a:d7:41:cc:5d:3f:68:4b:74:
                    e1:14:52:dc:17:3b:4f:fc:ee:ec:93:d8:22:67:09:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6F:0E:0A:50:28:C8:CA:9F:AB:CD:88:BA:22:05:4B:1F:A6:B2:10
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/yG8OClAoyMqfq82IuiIFSx-mshA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.69.0/24
                  178.238.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:d2:86:0c:45:19:06:a8:87:0a:98:38:9a:90:07:b2:47:92:
         cc:0a:17:df:5f:ca:f0:40:5a:9f:8a:19:e2:af:50:3e:1d:09:
         65:e0:40:b3:f1:06:ca:58:de:8d:e9:4e:65:91:4b:2a:88:33:
         8e:5d:7f:3e:96:b0:db:02:49:2c:b9:b4:d9:74:15:d9:56:24:
         62:03:12:27:5e:12:3a:09:5d:cc:88:a2:98:cf:e5:d1:af:7e:
         4c:ac:86:70:12:a9:6b:bd:77:37:8f:24:58:98:72:6f:b8:fe:
         01:2b:97:47:66:73:63:89:e7:65:32:dc:0f:02:26:80:97:7d:
         29:14:15:13:df:c0:a6:17:30:6b:c9:73:2e:d4:ed:57:e9:40:
         bf:2b:3f:15:77:0c:b3:cd:84:d5:8f:d8:9e:4f:cb:58:b1:77:
         96:df:53:b6:ee:f7:42:35:1d:c1:a0:79:c1:38:bc:37:ce:db:
         80:08:55:90:6d:c6:79:cd:88:6d:8c:3e:67:7c:d5:60:1f:af:
         39:8d:6e:2e:73:92:03:c1:d8:47:0e:6b:ef:2f:6e:c7:e2:c4:
         01:a7:26:54:a6:bb:07:6c:24:a4:8b:32:e7:22:bd:47:5c:0f:
         05:f8:f3:e1:b1:f2:3b:ce:f8:26:da:bb:4e:81:92:bd:03:d5:
         7a:d3:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:57 2026 by rpki-client