This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YwtW_vVZz0Id3K4lH6LrkZ6NgBU.roa
File:                     YwtW_vVZz0Id3K4lH6LrkZ6NgBU.roa (raw, json)
Hash identifier:          1Cfv4YDpaSFz2W5ZN+uA8BSkbCNDvd7N/f0YRIPmwXE=
Subject key identifier:   63:0B:56:FE:F5:59:CF:42:1D:DC:AE:25:1F:A2:EB:91:9E:8D:80:15
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C799560906D1AEB2F2B38DAF96FA55
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YwtW_vVZz0Id3K4lH6LrkZ6NgBU.roa
Signing time:             Thu 01 Jan 2026 04:18:48 +0000
ROA not before:           Thu 01 Jan 2026 04:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214802
IP address blocks:        82.177.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:99:56:09:06:d1:ae:b2:f2:b3:8d:af:96:fa:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=630b56fef559cf421ddcae251fa2eb919e8d8015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:72:40:96:4c:2f:a2:ab:66:77:a0:c2:08:94:
                    f7:6e:0c:d5:ad:d8:6d:f3:c9:36:7c:cc:e9:5b:06:
                    a3:5e:06:7e:c4:5d:99:0e:15:cc:89:66:e9:56:9d:
                    31:18:a5:7f:fb:5d:2e:61:13:78:4c:73:08:13:0f:
                    7e:00:ed:2b:34:4f:d6:7b:10:b4:19:4c:1e:a3:c4:
                    c8:ea:f0:6f:dd:e9:82:e8:cd:70:b5:be:2b:8d:6e:
                    ec:c8:32:2f:0b:0f:7f:22:68:73:4d:27:b5:53:bc:
                    f6:95:0f:02:b4:17:9c:ac:c1:22:88:d3:1c:20:f9:
                    a1:f5:23:9a:a6:bd:b9:26:db:7c:28:88:d2:88:47:
                    6d:46:e8:8a:df:0d:a6:28:a7:73:f1:65:b5:09:6e:
                    5e:9d:32:6e:b7:a1:72:b4:6a:88:c2:54:99:1d:5d:
                    91:f5:34:37:bd:85:e7:6c:1e:6c:50:f8:59:36:cf:
                    0e:fe:40:76:ae:a3:63:00:25:b8:b3:15:ed:e3:68:
                    80:6c:c0:e1:48:9e:e0:f9:9c:b8:5e:a5:11:80:77:
                    c8:80:a5:e7:1b:47:91:84:d5:48:19:09:bf:95:fa:
                    74:64:11:76:03:2c:ff:f9:d5:f0:c8:eb:df:b6:f7:
                    49:f3:c0:36:f4:a9:4e:64:3c:30:f3:ef:85:f5:78:
                    fc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0B:56:FE:F5:59:CF:42:1D:DC:AE:25:1F:A2:EB:91:9E:8D:80:15
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YwtW_vVZz0Id3K4lH6LrkZ6NgBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:10:c7:2c:fc:cf:0a:a5:00:40:5e:3b:5e:fc:51:aa:81:ef:
         30:1b:df:31:c2:d1:ef:f4:c0:75:b5:47:2b:ce:d3:cc:dc:32:
         2c:32:6b:19:25:f6:aa:df:77:79:13:55:b7:fd:0c:ff:4c:d8:
         3e:bc:df:ea:c9:23:89:7e:44:ba:05:7d:fc:39:ba:db:41:8b:
         bd:a0:f1:cd:0c:7a:41:f9:c0:3a:57:1d:9f:44:2c:81:fc:78:
         19:e2:78:dc:ec:33:32:cd:83:05:fc:68:a0:fe:85:ac:14:71:
         5f:08:31:d2:bd:de:76:f3:1a:30:f3:88:8d:ed:6d:20:14:0c:
         7f:3f:ea:e7:ef:a2:9d:3d:23:77:9d:7a:a6:e9:dc:2f:b0:6f:
         41:00:31:29:7e:1b:62:2f:08:24:27:a2:6e:d5:34:ee:a3:bc:
         8c:f9:84:79:60:91:47:f4:89:ea:79:d6:e8:4f:3d:76:81:08:
         57:d1:a2:5a:3d:c9:bc:bf:36:32:eb:93:eb:a3:80:d0:ca:00:
         d5:d9:f1:bb:97:32:f1:a3:96:a6:bc:91:58:82:d3:21:13:b1:
         ef:0a:32:b5:c6:83:f6:0f:75:da:fb:a4:8a:7b:6d:40:f7:15:
         d9:ce:ff:b0:e4:da:90:be:47:f6:f8:69:3f:51:fb:f8:91:bf:
         39:80:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:53:47 2026 by rpki-client