This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YEwiUcmSUnjmR5kC-glx1zOglQc.roa
File:                     YEwiUcmSUnjmR5kC-glx1zOglQc.roa (raw, json)
Hash identifier:          RLPPn0xCIZ7AkYa/vrPRbIvQ1Dej5HxbAQyppDsDFh4=
Subject key identifier:   60:4C:22:51:C9:92:52:78:E6:47:99:02:FA:09:71:D7:33:A0:95:07
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84996038B88673007ADC176AFEAA11
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YEwiUcmSUnjmR5kC-glx1zOglQc.roa
Signing time:             Fri 02 Jan 2026 16:22:34 +0000
ROA not before:           Fri 02 Jan 2026 16:22:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41119
IP address blocks:        93.170.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:99:60:38:b8:86:73:00:7a:dc:17:6a:fe:aa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=604c2251c9925278e6479902fa0971d733a09507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:e8:af:40:6e:38:3b:5e:89:c3:e9:ea:60:
                    38:61:73:ca:7d:bd:6e:7d:35:2a:ef:cd:8f:df:9d:
                    4b:4e:df:d2:74:3b:74:f1:f7:2d:1d:87:54:11:a2:
                    19:68:f1:77:bb:e4:79:40:4b:94:53:99:19:3d:b3:
                    61:f5:ae:6c:9f:e3:f7:bd:5b:f7:56:3c:c6:47:c9:
                    ca:81:8f:5f:05:a1:4f:50:9a:bc:ca:d7:73:32:e3:
                    da:c5:21:bb:56:4d:79:19:48:dc:24:6f:b7:6f:03:
                    fb:ca:f8:8f:a9:a6:67:54:01:ec:19:b0:29:c1:60:
                    10:bc:fb:f9:ab:04:23:be:bd:d9:8b:31:d5:ad:ee:
                    78:31:45:40:3b:bf:4b:26:84:fe:9a:2d:71:ee:d1:
                    37:f6:c6:e7:9d:5f:86:e8:70:a3:b1:e7:9d:fe:37:
                    9d:d6:cc:0c:f6:96:c2:bb:e4:d5:8e:98:5d:00:f7:
                    d7:dd:f3:16:51:d9:b6:4c:c9:2a:a0:e9:71:2c:1c:
                    32:b9:05:46:0e:23:80:8b:ab:98:8d:29:2b:b9:25:
                    4e:6f:24:96:68:15:c2:85:b0:da:e7:dc:80:b8:ba:
                    b3:a1:25:8e:26:e2:01:0d:55:fb:90:8d:f6:85:ea:
                    cb:5c:8c:4b:16:67:38:2c:e2:d9:ca:95:4f:77:ec:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4C:22:51:C9:92:52:78:E6:47:99:02:FA:09:71:D7:33:A0:95:07
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YEwiUcmSUnjmR5kC-glx1zOglQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:3a:d0:1f:c7:77:cf:e2:74:2d:8e:9f:d9:7b:4b:7c:74:
         af:44:86:5e:50:63:4a:8c:7b:72:3c:f7:1f:1d:50:06:50:a1:
         f2:cf:37:7f:4b:24:fe:70:c5:32:79:2c:67:33:eb:d5:d3:2a:
         f1:89:77:8f:a7:b1:4e:a2:54:57:5a:8c:c7:00:e4:8d:37:6d:
         e7:3c:a1:94:97:be:fe:22:35:c7:89:0b:8c:d6:b7:6c:2f:62:
         70:4b:b9:ef:a2:f2:92:45:bb:d2:47:cb:31:7f:28:81:29:3f:
         6c:af:55:7b:33:46:36:39:b1:64:ee:d2:a9:fe:14:1b:a2:fa:
         da:cc:8e:9c:a3:e7:37:19:67:da:93:57:aa:c8:17:dd:03:ad:
         71:11:1a:e6:8d:8a:02:7e:c5:bf:5f:27:3f:ed:88:29:0f:ef:
         3b:80:e3:72:5c:44:04:14:42:06:81:65:f4:fb:1b:2c:54:d6:
         e8:cf:b2:6d:46:8b:e6:56:cf:94:5a:f4:6e:7d:7f:be:19:fa:
         bf:03:15:b1:3a:a7:2e:b7:99:50:4f:79:71:56:c8:83:49:9c:
         8a:06:32:1c:f3:d7:8c:fc:13:a1:d4:1a:97:d8:7b:3d:53:ec:
         9f:44:a2:02:ef:d2:32:6d:0d:b3:7d:7d:e6:f5:45:70:00:66:
         08:47:4e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:07 2026 by rpki-client