This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/yEbtzhh5wc4rY7MHu27W_dwYhu8.roa
File:                     yEbtzhh5wc4rY7MHu27W_dwYhu8.roa (raw, json)
Hash identifier:          h2s6dV+bwm8ecYVBUiiK45LeIcpS1pxSfpxppjXQ+aQ=
Subject key identifier:   C8:46:ED:CE:18:79:C1:CE:2B:63:B3:07:BB:6E:D6:FD:DC:18:86:EF
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       019B7EA444F858C202BE1B97CAC1CF35D650
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/yEbtzhh5wc4rY7MHu27W_dwYhu8.roa
Signing time:             Fri 02 Jan 2026 12:17:33 +0000
ROA not before:           Fri 02 Jan 2026 12:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201207
IP address blocks:        185.47.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:44:f8:58:c2:02:be:1b:97:ca:c1:cf:35:d6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Jan  2 12:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c846edce1879c1ce2b63b307bb6ed6fddc1886ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:1d:11:d5:97:82:f1:6b:d2:29:2f:89:65:
                    f3:6a:07:e9:58:e0:10:dd:5c:20:47:61:62:33:04:
                    d2:a9:23:53:1e:c1:48:83:f6:33:fc:13:76:c8:c5:
                    09:8d:d9:24:b2:a6:bb:83:68:98:0e:ac:30:ba:1f:
                    fc:6a:ef:65:94:8a:07:31:72:4c:93:90:71:42:5d:
                    8e:db:b4:26:da:66:38:66:17:d7:3d:d5:81:1c:14:
                    2e:4a:ce:33:ad:58:03:ea:17:b8:49:40:68:c8:bc:
                    c5:89:d2:dd:b7:f8:46:97:11:7b:50:ab:09:2e:86:
                    7c:db:d6:f6:d9:03:56:78:8c:1e:29:f9:86:94:5a:
                    4c:5f:a0:51:57:34:94:88:f7:b0:97:2d:d7:9a:b0:
                    c9:f7:ec:e6:f1:4d:b6:cc:a4:d9:d1:77:d0:4b:30:
                    04:7c:50:6f:2c:50:18:cb:a3:2c:2c:a3:a5:4f:dd:
                    d4:a1:7d:88:6b:5b:a5:12:dd:85:9e:ed:fa:c8:88:
                    ff:16:14:79:2c:1d:c2:43:dd:44:c7:d6:10:74:14:
                    db:7e:c0:7c:1b:02:e0:10:9a:82:1a:49:e4:11:57:
                    db:b0:ed:08:78:e7:b4:e2:e2:cd:37:60:6e:bb:92:
                    98:9a:a8:9c:f1:c0:9a:37:97:ab:17:43:fa:7d:bf:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:46:ED:CE:18:79:C1:CE:2B:63:B3:07:BB:6E:D6:FD:DC:18:86:EF
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/yEbtzhh5wc4rY7MHu27W_dwYhu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.47.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:51:4b:76:b7:a9:0e:e4:17:0f:09:0d:39:a5:0a:c1:a2:72:
         cc:2a:1f:9f:3b:2d:5f:bf:27:07:65:9d:2b:40:0a:5f:59:18:
         de:38:5c:8d:1e:66:a9:77:c0:bf:87:c8:4e:42:23:38:0e:41:
         2c:65:04:e4:15:7f:96:a4:79:13:f7:61:a0:eb:b4:6d:24:73:
         32:e2:4b:57:6e:d7:fa:0a:b6:5a:ae:0e:be:94:20:70:f0:d0:
         57:1e:04:d4:a8:dc:8f:64:57:e8:7c:c2:8e:cc:5c:04:67:ba:
         27:5d:8d:b7:89:23:4e:5b:45:f8:e9:32:dd:3d:71:25:52:31:
         3f:9a:da:7f:24:f6:c5:66:59:27:50:7e:1b:21:08:d2:63:9e:
         24:f8:96:a3:78:4f:11:e1:bb:dd:bd:0f:37:5b:9b:15:d3:ad:
         4a:f0:1e:36:eb:8a:58:be:2e:e5:5c:a9:71:55:8e:19:00:98:
         9c:75:8e:f7:6b:d6:8a:51:c1:1b:48:44:05:fb:d2:ac:a6:1c:
         63:df:c6:70:a4:92:16:24:19:01:d4:4a:b0:e2:93:f5:4f:e1:
         65:54:27:33:50:b5:e9:fe:4f:85:f2:e1:23:6f:93:02:ac:d5:
         e0:ba:5f:1a:f9:f7:60:15:8b:9b:85:47:b6:8b:1e:9a:aa:ab:
         15:5b:22:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pET4WMICvhuXysHPNdZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjdkMjEzZmExMzcwOGUzMjAwMTg0ZmYxYmMzOTE1Nzdj
YzI1MmYwHhcNMjYwMTAyMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQ2ZWRjZTE4NzljMWNlMmI2M2IzMDdiYjZlZDZmZGRjMTg4NmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHYdEdWXgvFr0ikviWXzagfpWOAQ
3VwgR2FiMwTSqSNTHsFIg/Yz/BN2yMUJjdkksqa7g2iYDqwwuh/8au9llIoHMXJM
k5BxQl2O27Qm2mY4ZhfXPdWBHBQuSs4zrVgD6he4SUBoyLzFidLdt/hGlxF7UKsJ
LoZ829b22QNWeIweKfmGlFpMX6BRVzSUiPewly3XmrDJ9+zm8U22zKTZ0XfQSzAE
fFBvLFAYy6MsLKOlT93UoX2Ia1ulEt2Fnu36yIj/FhR5LB3CQ91Ex9YQdBTbfsB8
GwLgEJqCGknkEVfbsO0IeOe04uLNN2Buu5KYmqic8cCaN5erF0P6fb9McQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhG7c4YecHOK2OzB7tu1v3cGIbvMB8GA1UdIwQY
MBaAFJL30hP6E3COMgAYT/G8ORV3zCUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDkt
M2UxOGVlNmI0YTVhLzEveUVidHpoaDV3YzRyWTdNSHUyN1dfZHdZaHU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDktM2UxOGVlNmI0YTVh
LzEva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS+kMA0G
CSqGSIb3DQEBCwUAA4IBAQAfUUt2t6kO5BcPCQ05pQrBonLMKh+fOy1fvycHZZ0r
QApfWRjeOFyNHmapd8C/h8hOQiM4DkEsZQTkFX+WpHkT92Gg67RtJHMy4ktXbtf6
CrZarg6+lCBw8NBXHgTUqNyPZFfofMKOzFwEZ7onXY23iSNOW0X46TLdPXElUjE/
mtp/JPbFZlknUH4bIQjSY54k+JajeE8R4bvdvQ83W5sV061K8B4264pYvi7lXKlx
VY4ZAJicdY73a9aKUcEbSEQF+9Ksphxj38ZwpJIWJBkB1Eqw4pP1T+FlVCczULXp
/k+F8uEjb5MCrNXgul8a+fdgFYubhUe2ix6aqqsVWyI4
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:39:30 2026 by rpki-client