This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/y3ttufEXp6cxv-T4_oDe-APoH_s.roa
File:                     y3ttufEXp6cxv-T4_oDe-APoH_s.roa (raw, json)
Hash identifier:          hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=
Subject key identifier:   CB:7B:6D:B9:F1:17:A7:A7:31:BF:E4:F8:FE:80:DE:F8:03:E8:1F:FB
Certificate issuer:       /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial:       019B7F136A22FF102355425C61370C86F1BC
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/y3ttufEXp6cxv-T4_oDe-APoH_s.roa
Signing time:             Fri 02 Jan 2026 14:18:57 +0000
ROA not before:           Fri 02 Jan 2026 14:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202013
IP address blocks:        93.190.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:6a:22:ff:10:23:55:42:5c:61:37:0c:86:f1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
        Validity
            Not Before: Jan  2 14:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cb7b6db9f117a7a731bfe4f8fe80def803e81ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:6c:8e:a4:b6:2e:c7:2b:25:e8:6e:30:33:
                    b3:6d:94:f1:2b:d1:0e:53:41:8a:b5:5c:c3:c9:e5:
                    0d:91:52:61:48:c5:82:26:b3:14:34:54:0e:54:f5:
                    dd:dd:93:b2:5a:65:d3:a6:11:c5:15:82:42:b1:76:
                    cf:da:27:1c:38:a0:43:17:85:1b:15:2c:36:0e:16:
                    3c:df:82:6c:63:fb:00:78:47:b9:f3:9f:e9:9c:38:
                    47:99:4e:d7:dd:22:85:dd:f1:21:f3:0a:1e:56:37:
                    7b:e4:1e:e3:50:44:1e:bb:2c:80:dc:b1:61:31:71:
                    d4:0b:2c:01:fc:23:4f:30:ff:74:8f:60:25:91:82:
                    56:63:9d:4c:62:10:a5:f3:96:82:2f:c8:7d:37:1b:
                    2c:6b:55:63:27:76:51:e2:d5:a1:e6:f1:ec:0e:d8:
                    71:74:13:3b:3c:6c:f8:42:ad:4d:14:67:4b:d6:f4:
                    13:48:1f:34:e9:c3:37:1d:78:d1:00:48:ed:cf:e4:
                    62:23:08:6c:de:92:d9:34:c0:e3:05:0b:e5:75:2c:
                    3d:af:c2:79:b8:01:80:5d:50:fb:ff:63:4d:9c:3c:
                    4b:70:8b:f9:f5:3c:b7:d7:33:c3:75:19:bb:47:e9:
                    70:32:69:a0:dd:10:37:f3:60:91:ea:a5:f3:cc:8d:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7B:6D:B9:F1:17:A7:A7:31:BF:E4:F8:FE:80:DE:F8:03:E8:1F:FB
            X509v3 Authority Key Identifier:
                keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/y3ttufEXp6cxv-T4_oDe-APoH_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:84:e6:f0:6c:71:f3:e9:89:12:97:9e:e2:3f:97:a1:b5:f3:
         51:1b:c9:5c:26:14:6d:fd:da:0c:a8:5b:5a:e4:4f:67:fe:e7:
         0b:fc:17:6b:b5:80:1c:eb:86:51:9e:94:27:c3:91:2f:33:bc:
         18:a5:9d:76:49:0e:c1:fa:e1:72:89:24:51:b3:99:6d:9b:39:
         dc:5f:6d:0c:95:47:06:36:71:cb:69:8c:80:fa:cd:09:f6:6d:
         78:38:0d:42:13:66:ca:be:ae:8e:0e:3d:be:f3:4a:3f:d8:03:
         49:d9:ec:49:bd:2d:1d:78:89:ed:07:fa:12:a3:f6:ad:1a:95:
         3f:6d:1c:b2:99:9d:db:3b:b7:3b:36:e0:db:f7:82:4c:08:39:
         f8:1b:1b:df:9c:a1:e8:ea:c1:89:84:b1:54:e4:30:c3:53:88:
         61:3f:10:86:d8:59:ba:49:6e:c1:97:7d:a6:08:f2:a5:bc:51:
         8d:33:c2:cd:23:e3:b9:16:79:e2:90:7b:06:59:d2:dc:3d:60:
         6d:24:ee:4d:db:65:18:37:7d:23:79:fd:bd:88:0a:77:ab:ab:
         da:8b:1c:83:f1:63:bf:32:fd:3d:4e:99:ab:bc:40:0c:65:a5:
         64:24:f6:a7:75:bc:15:ff:e8:da:3d:5b:a5:35:26:a0:f2:34:
         db:c1:9a:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/E2oi/xAjVUJcYTcMhvG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjFmYmRiY2UyMTQ1YTBkYjY5MDA2MDlmN2M1NDczMmRm
YjBjZDgwHhcNMjYwMTAyMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjdiNmRiOWYxMTdhN2E3MzFiZmU0ZjhmZTgwZGVmODAzZTgxZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV5sjqS2LscrJehuMDOzbZTxK9EO
U0GKtVzDyeUNkVJhSMWCJrMUNFQOVPXd3ZOyWmXTphHFFYJCsXbP2iccOKBDF4Ub
FSw2DhY834JsY/sAeEe585/pnDhHmU7X3SKF3fEh8woeVjd75B7jUEQeuyyA3LFh
MXHUCywB/CNPMP90j2AlkYJWY51MYhCl85aCL8h9Nxssa1VjJ3ZR4tWh5vHsDthx
dBM7PGz4Qq1NFGdL1vQTSB806cM3HXjRAEjtz+RiIwhs3pLZNMDjBQvldSw9r8J5
uAGAXVD7/2NNnDxLcIv59Ty31zPDdRm7R+lwMmmg3RA382CR6qXzzI2RVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMt7bbnxF6enMb/k+P6A3vgD6B/7MB8GA1UdIwQY
MBaAFNjx+9vOIUWg22kAYJ98VHMt+wzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQt
NDdmMDQzZmJhMTNiLzEveTN0dHVmRVhwNmN4di1UNF9vRGUtQVBvSF9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQtNDdmMDQzZmJhMTNi
LzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb6/MA0G
CSqGSIb3DQEBCwUAA4IBAQBUhObwbHHz6YkSl57iP5ehtfNRG8lcJhRt/doMqFta
5E9n/ucL/BdrtYAc64ZRnpQnw5EvM7wYpZ12SQ7B+uFyiSRRs5ltmzncX20MlUcG
NnHLaYyA+s0J9m14OA1CE2bKvq6ODj2+80o/2ANJ2exJvS0deIntB/oSo/atGpU/
bRyymZ3bO7c7NuDb94JMCDn4GxvfnKHo6sGJhLFU5DDDU4hhPxCG2Fm6SW7Bl32m
CPKlvFGNM8LNI+O5FnnikHsGWdLcPWBtJO5N22UYN30jef29iAp3q6vaixyD8WO/
Mv09TpmrvEAMZaVkJPandbwV/+jaPVulNSag8jTbwZpj
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:45 2026 by rpki-client