This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/YjABWXq1K-e_wEund0ue5nxCxOU.roa
File:                     YjABWXq1K-e_wEund0ue5nxCxOU.roa (raw, json)
Hash identifier:          PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=
Subject key identifier:   62:30:01:59:7A:B5:2B:E7:BF:C0:4B:A7:77:4B:9E:E6:7C:42:C4:E5
Certificate issuer:       /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial:       019B79ECC93D969188F0C75C38A2BC7FA380
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/YjABWXq1K-e_wEund0ue5nxCxOU.roa
Signing time:             Thu 01 Jan 2026 14:18:39 +0000
ROA not before:           Thu 01 Jan 2026 14:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198333
IP address blocks:        193.37.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:c9:3d:96:91:88:f0:c7:5c:38:a2:bc:7f:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
        Validity
            Not Before: Jan  1 14:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=623001597ab52be7bfc04ba7774b9ee67c42c4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:c4:33:2c:73:28:d4:f5:f4:69:90:62:1c:
                    09:dd:7c:1b:f5:90:79:8d:e6:6b:45:19:75:94:66:
                    31:ef:11:1d:c0:00:f5:79:20:34:0f:76:af:4d:18:
                    09:4b:69:80:a3:d4:cf:3f:e1:6d:34:50:73:7d:b3:
                    4e:59:fb:a7:05:cb:f3:c1:80:0d:d6:f3:09:19:bd:
                    7f:f0:e1:31:13:b1:a0:db:07:cc:53:7f:ee:f8:91:
                    83:4f:f3:1d:2d:ab:74:10:15:54:66:39:10:e1:76:
                    21:19:4e:0c:dd:d9:c7:8a:07:f5:44:69:a6:2d:52:
                    d3:62:2b:50:f5:7b:84:fe:c8:51:75:10:74:81:58:
                    fe:43:1c:e9:9e:5c:50:01:93:9d:1f:c1:61:73:91:
                    f2:32:b2:27:15:b8:b8:14:13:64:9d:75:95:3f:a6:
                    54:f1:23:5f:98:80:9f:87:f9:be:64:fd:3c:8c:76:
                    9d:fe:d8:04:e1:32:06:4d:a8:c8:70:c8:21:aa:b9:
                    77:92:4d:4e:7c:4e:b4:20:28:df:68:28:05:bc:be:
                    0c:7e:87:a2:29:1a:b9:e8:46:d6:c7:f0:5a:19:34:
                    d0:ef:54:f0:be:88:36:1e:ab:09:37:c8:f6:09:e1:
                    25:c3:40:78:1e:f4:93:d4:0e:a0:8c:3d:5e:8b:8e:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:30:01:59:7A:B5:2B:E7:BF:C0:4B:A7:77:4B:9E:E6:7C:42:C4:E5
            X509v3 Authority Key Identifier:
                keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/YjABWXq1K-e_wEund0ue5nxCxOU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:b4:cf:33:be:6a:c3:96:20:42:fa:d4:99:59:87:fa:55:
         1d:b3:79:23:99:3e:0a:8f:96:dd:6b:0e:6f:32:a1:1a:b4:28:
         94:ef:87:ea:8f:de:bf:87:4b:4f:ed:bb:2f:ce:4f:cd:b8:be:
         5b:09:ca:fd:a3:e4:49:2a:2f:57:e9:d8:62:f8:27:d9:60:11:
         72:ed:92:c2:b6:ed:35:3a:c1:20:40:76:42:36:ff:6f:9e:60:
         c6:13:de:9a:c4:43:10:aa:99:c3:4e:ff:d9:25:e2:b5:12:13:
         68:76:7c:82:e6:cb:f1:70:cd:7d:41:9f:08:de:d2:2f:b2:12:
         ed:3e:98:15:e3:a8:51:6d:60:ad:8b:d5:6b:91:18:b9:2d:1d:
         ab:92:c4:9f:ec:54:b1:72:65:6c:20:c8:e1:9a:02:64:a5:d8:
         ed:7f:59:69:ca:fc:c3:e7:ff:f7:e0:ed:28:86:89:e4:8e:ab:
         bd:0e:59:6e:ad:d4:39:3e:9f:a6:67:8a:44:c3:24:2a:6d:d7:
         f9:4f:2e:78:2f:e0:06:74:17:61:32:a8:ca:be:3b:72:ab:76:
         dd:89:bb:46:cf:04:ec:a0:60:27:57:de:7d:c9:85:f3:d0:50:
         12:88:1f:5d:21:61:b2:67:a6:8b:8c:3d:11:94:75:8c:cc:3f:
         9f:17:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:05:58 2026 by rpki-client