This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/YXmTCTbpKSFbSlq06tikXeR5yjM.roa
File:                     YXmTCTbpKSFbSlq06tikXeR5yjM.roa (raw, json)
Hash identifier:          bTeAPWMnuRlE1iuV8G+ltD+aKezdlcucu0xXk0jbOXQ=
Subject key identifier:   61:79:93:09:36:E9:29:21:5B:4A:5A:B4:EA:D8:A4:5D:E4:79:CA:33
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       019B79111CE5E0BB47AD04FA64D2BC2725B9
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/YXmTCTbpKSFbSlq06tikXeR5yjM.roa
Signing time:             Thu 01 Jan 2026 10:18:43 +0000
ROA not before:           Thu 01 Jan 2026 10:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214957
IP address blocks:        94.182.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:1c:e5:e0:bb:47:ad:04:fa:64:d2:bc:27:25:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Jan  1 10:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6179930936e929215b4a5ab4ead8a45de479ca33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ec:5a:02:12:95:5f:d3:ff:ae:93:9b:39:d8:
                    cd:3e:79:b6:16:73:69:aa:b3:b3:a7:18:cd:dd:d8:
                    f6:67:ab:b0:85:c4:ed:28:e8:00:11:fb:74:bf:0e:
                    8a:86:24:af:43:9a:5a:ef:45:7f:1e:7c:90:31:df:
                    b4:74:99:84:9a:0e:b4:a3:bb:bf:c7:4f:ee:a7:15:
                    be:23:91:cc:f4:66:43:e7:76:99:d3:7b:25:7c:4b:
                    74:d8:77:1b:44:a9:cc:8a:8c:ac:e9:3d:3a:db:97:
                    5b:01:53:07:6e:a1:65:da:b0:c7:aa:d7:6a:54:23:
                    9b:c5:34:7e:51:fd:57:25:83:37:d5:26:8e:12:17:
                    d1:eb:f1:a9:d3:ae:d5:f1:ab:b3:22:8b:23:c8:51:
                    c1:1a:23:b8:02:f2:36:8d:61:81:31:ff:06:b3:99:
                    58:cd:a7:84:bf:99:97:db:3d:c6:cb:e3:f0:ec:a7:
                    ee:09:5b:c5:ef:26:01:80:e0:e0:10:21:30:91:c1:
                    59:10:4c:c8:75:b6:06:41:81:96:97:29:cc:f4:10:
                    6c:a2:92:49:36:e0:f2:aa:77:01:7c:80:39:2e:86:
                    ce:e3:80:49:b7:9a:88:06:a4:36:50:df:3c:a7:91:
                    87:51:0e:b1:92:40:85:eb:8c:f5:ad:5d:e1:f9:e2:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:79:93:09:36:E9:29:21:5B:4A:5A:B4:EA:D8:A4:5D:E4:79:CA:33
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/YXmTCTbpKSFbSlq06tikXeR5yjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.182.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:37:e9:6b:7c:29:f6:c5:9a:08:10:df:aa:34:f0:7c:32:fc:
         ab:df:0c:09:7a:01:9a:46:b1:c2:96:55:6f:2f:23:92:19:86:
         df:2e:c2:e3:33:7b:cf:8c:d4:c4:05:55:51:95:1c:5c:86:0e:
         95:79:b4:3a:35:f2:21:ad:78:25:c7:7e:c1:19:7c:dc:0d:ef:
         1a:fd:ba:a8:14:82:19:e8:4b:72:4b:a6:ef:fd:45:13:3a:a3:
         25:20:74:d5:30:fc:23:5d:b4:b3:b4:0c:5f:3f:59:cd:0a:3a:
         ad:aa:ea:5c:ca:38:5f:ed:2c:89:9a:5f:d3:bd:69:fd:4f:64:
         06:f4:d2:e4:69:f6:e3:0a:4d:6e:13:a2:b7:7b:f8:26:92:ad:
         6f:9d:7e:cb:f1:e4:d4:6a:94:b3:4c:d6:ef:52:73:8e:52:e6:
         bd:bc:d0:97:ba:a0:ef:c2:9c:d2:7c:67:b8:6b:a5:28:be:46:
         9c:09:04:ed:cf:5f:d2:20:bc:47:d7:b5:ce:03:8d:70:33:39:
         15:8d:35:11:c7:16:67:07:f2:da:54:87:15:b2:5a:05:79:a0:
         60:ee:3e:63:f9:45:ad:92:7f:53:56:a4:c1:26:a2:bd:95:74:
         58:d6:44:7b:98:bc:f9:fd:90:be:4f:37:09:4f:ab:97:ec:5e:
         3e:ef:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:35:56 2026 by rpki-client