This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/yeEabSTnkLeywBVAwxOdpvb42Eo.roa
File:                     yeEabSTnkLeywBVAwxOdpvb42Eo.roa (raw, json)
Hash identifier:          PvqV+kMqmAte8XfLn6bjSK6JChkDgm/iDFgeeMv/yOs=
Subject key identifier:   C9:E1:1A:6D:24:E7:90:B7:B2:C0:15:40:C3:13:9D:A6:F6:F8:D8:4A
Certificate issuer:       /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial:       019B7759124C881BE845C336CBFCADE6DC10
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/yeEabSTnkLeywBVAwxOdpvb42Eo.roa
Signing time:             Thu 01 Jan 2026 02:18:04 +0000
ROA not before:           Thu 01 Jan 2026 02:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207810
IP address blocks:        185.167.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:12:4c:88:1b:e8:45:c3:36:cb:fc:ad:e6:dc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
        Validity
            Not Before: Jan  1 02:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c9e11a6d24e790b7b2c01540c3139da6f6f8d84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:99:55:01:96:66:9d:fb:13:67:41:54:fa:
                    02:0b:a7:bb:88:28:24:6e:23:3e:2c:28:6b:07:96:
                    26:66:a0:45:9f:7d:b2:f1:5f:9b:58:ea:06:13:4f:
                    c2:3e:eb:29:9b:0a:54:8a:1a:66:b6:a4:f1:b4:cf:
                    1d:80:e3:10:77:21:29:01:30:5f:85:43:b9:e1:08:
                    d9:e0:a8:54:f8:24:61:76:07:2a:fa:9d:b4:e7:d8:
                    9e:80:8e:65:1a:2e:09:a7:45:a2:65:b8:bf:29:34:
                    fc:94:c8:f4:68:39:6f:6e:70:31:49:a6:06:5b:fd:
                    19:21:19:c0:c6:5d:fd:83:1e:5e:c8:57:ca:3e:48:
                    62:fe:7c:ff:7d:43:50:73:4e:91:24:10:74:5f:1f:
                    be:93:20:ed:35:64:40:78:7c:4d:63:45:df:05:b9:
                    46:cc:b5:dc:b5:e8:32:4d:40:72:1b:ba:c1:42:b2:
                    28:69:27:1a:e0:84:30:6c:18:16:a7:93:04:d0:6e:
                    fc:b4:fa:6f:e7:e8:65:05:f5:9f:d2:89:ef:87:8c:
                    4e:b7:8f:21:af:97:fe:6d:bf:6d:80:0e:e2:c1:4b:
                    04:05:fd:35:98:0c:13:78:c4:a0:35:32:b7:e8:da:
                    c9:53:1c:5e:73:f6:ce:79:c2:89:d1:76:42:d4:73:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E1:1A:6D:24:E7:90:B7:B2:C0:15:40:C3:13:9D:A6:F6:F8:D8:4A
            X509v3 Authority Key Identifier:
                keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/yeEabSTnkLeywBVAwxOdpvb42Eo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         eb:ab:8b:61:59:c0:d8:f3:d8:96:7b:13:7c:48:7f:bd:e6:41:
         8a:6c:55:0e:ef:c4:08:ee:d2:16:34:2e:57:5e:ba:4d:de:a2:
         f8:d7:16:36:01:af:05:89:ce:8c:ba:e6:f1:f2:27:ea:30:9e:
         bc:2a:62:7e:0c:d8:4d:6e:82:4f:19:e4:2e:0e:45:f7:ad:d9:
         92:9e:8d:64:21:7e:6a:16:ab:9b:2f:db:9a:08:61:bc:b6:6c:
         46:33:4c:1d:ba:b0:d4:ef:4a:e4:00:25:5a:14:79:ea:e4:90:
         a7:9d:5e:bc:13:e7:93:cd:ab:a1:ee:6e:55:b4:19:a8:1b:0b:
         87:30:cb:a7:be:2e:fd:94:4f:e2:ea:7a:36:b5:e3:38:be:cc:
         ac:f5:e9:59:11:6f:49:61:6b:55:fa:b8:f6:e5:88:c6:a4:34:
         5d:ec:0a:2c:32:b9:74:cd:b7:99:96:0c:8d:fa:e8:ce:38:ed:
         d3:ff:2e:c7:8f:ca:a1:e9:77:4f:7b:75:cd:88:b4:1a:98:d9:
         48:38:f0:5e:c9:c1:b2:d2:a0:77:b5:4e:4d:97:d0:2b:c5:4c:
         44:ef:5a:02:b4:8a:65:1d:01:46:35:89:fd:e9:e8:5a:a3:a1:
         85:8c:52:ad:98:12:56:1f:01:c4:a6:d1:ad:8b:11:77:58:7d:
         a6:e3:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:02:13 2026 by rpki-client