This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa
File:                     Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (raw, json)
Hash identifier:          kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=
Subject key identifier:   63:AB:97:C2:E4:80:30:39:6D:AE:02:B8:EC:6D:49:4F:82:F2:D4:C5
Certificate issuer:       /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial:       019B7FF21CB3E4C8AFFB54436F1937CADC90
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa
Signing time:             Fri 02 Jan 2026 18:22:12 +0000
ROA not before:           Fri 02 Jan 2026 18:22:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62080
IP address blocks:        194.145.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:1c:b3:e4:c8:af:fb:54:43:6f:19:37:ca:dc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
        Validity
            Not Before: Jan  2 18:22:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=63ab97c2e48030396dae02b8ec6d494f82f2d4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:95:2f:5c:87:ed:bf:04:ad:4a:4b:80:f4:
                    1a:f8:41:f3:09:2a:06:d0:7e:62:17:bd:69:29:6d:
                    3d:9e:de:71:5b:fb:8f:72:50:9b:4c:ea:0f:07:e8:
                    f6:ea:0f:23:59:a0:6a:b9:35:7c:85:ab:9a:bb:2a:
                    d4:0b:39:93:89:e9:3a:17:08:db:bf:56:11:0c:b6:
                    c6:0e:41:99:4d:a9:43:9d:d0:32:59:df:66:d1:70:
                    28:c3:07:ec:8c:0a:df:5f:0a:81:9c:5e:25:43:0b:
                    68:f5:4d:6e:d2:9f:7e:a5:bc:09:1a:b9:08:c7:f3:
                    d0:0a:9f:d1:ca:2b:34:00:73:46:1f:03:42:a1:88:
                    04:99:18:aa:d5:25:de:c8:d8:50:10:8d:8f:3d:86:
                    c7:82:c8:30:fe:3d:7b:6b:7e:f3:bc:bb:4b:2b:2e:
                    77:c4:76:f6:0a:fb:96:a4:4d:c4:c5:6a:22:33:84:
                    5d:da:32:fe:d5:fe:8c:57:9d:06:76:c0:88:b7:3c:
                    d5:58:ee:0a:08:ff:e1:a9:b7:3e:60:2d:58:24:91:
                    b1:f0:4d:a1:16:6a:e9:cf:1b:ea:b1:94:24:3f:9a:
                    9f:6e:ec:df:2e:43:28:60:ec:3f:d8:08:10:8f:b8:
                    28:5c:7f:08:2e:05:b5:78:40:3a:44:e7:2d:83:dc:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AB:97:C2:E4:80:30:39:6D:AE:02:B8:EC:6D:49:4F:82:F2:D4:C5
            X509v3 Authority Key Identifier:
                keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.145.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:59:a0:92:22:a9:3e:aa:b8:39:fc:47:a8:48:d0:81:50:
         c9:5d:8f:77:64:93:9f:87:08:18:1e:6c:b6:ac:5b:d3:17:d2:
         1f:2a:92:fb:43:bf:f0:c0:8e:a6:03:f0:c2:6c:b4:1c:85:94:
         f5:3f:e7:6b:cf:64:df:b5:cd:43:59:47:85:1c:11:14:cd:94:
         d1:ed:69:37:a3:5a:99:e0:1e:f2:0c:be:23:24:3d:d1:8c:8c:
         40:f4:67:59:52:52:31:95:2d:9f:0b:49:bf:ce:2d:f0:3f:9a:
         e7:15:2b:66:17:b0:a6:91:ef:59:56:d0:bf:ff:7f:24:d9:84:
         da:c0:df:f8:ad:6e:29:71:7d:54:81:7a:49:a3:1e:3e:a1:bb:
         7b:e4:3c:c6:f6:c9:6d:5a:8b:d2:08:e5:30:60:62:b1:bf:69:
         cb:a2:21:7b:cf:ea:d2:36:e4:6c:96:2d:94:db:58:9f:41:8d:
         12:1e:35:9a:df:1d:a9:ef:b7:0a:f6:c0:9a:60:c2:71:d3:65:
         53:62:05:b2:e8:89:e4:05:af:71:3b:1e:75:99:11:74:44:9d:
         c8:cc:78:25:95:61:25:c5:e8:8d:a4:44:3b:91:a0:4e:75:c0:
         21:d2:98:2c:8c:2e:b8:c6:18:4a:47:49:60:31:88:35:ca:11:
         38:4f:41:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:25:14 2026 by rpki-client