This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/yVxkpnNWNPmfLM8KiJbpmmzhscw.roa
File:                     yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (raw, json)
Hash identifier:          wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=
Subject key identifier:   C9:5C:64:A6:73:56:34:F9:9F:2C:CF:0A:88:96:E9:9A:6C:E1:B1:CC
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       019B775888655F2D92FC7D8509E7ADF77AEB
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/yVxkpnNWNPmfLM8KiJbpmmzhscw.roa
Signing time:             Thu 01 Jan 2026 02:17:29 +0000
ROA not before:           Thu 01 Jan 2026 02:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2472
IP address blocks:        193.48.161.0/24 maxlen: 24
                          193.48.162.0/24 maxlen: 24
                          193.49.230.0/24 maxlen: 24
                          193.50.134.0/24 maxlen: 24
                          193.51.118.0/24 maxlen: 24
                          193.55.4.0/24 maxlen: 24
                          194.214.214.0/24 maxlen: 24
                          194.254.208.0/24 maxlen: 24
                          195.98.226.0/24 maxlen: 24
                          195.98.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:88:65:5f:2d:92:fc:7d:85:09:e7:ad:f7:7a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Jan  1 02:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c95c64a6735634f99f2ccf0a8896e99a6ce1b1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:b5:18:1a:a7:33:52:ca:b2:53:a8:5a:88:
                    fb:c7:2a:77:7d:ff:7a:3a:05:40:22:00:89:53:18:
                    f9:e5:a5:60:82:a5:dd:2f:ab:22:32:35:7f:84:15:
                    d7:ea:cb:d0:8d:b7:7e:e8:dc:a8:88:d2:33:76:e2:
                    8c:1f:8a:1e:42:28:26:fc:64:14:6b:1e:7a:3d:43:
                    79:3d:5b:4a:40:3b:5a:52:d3:18:74:bb:4d:dd:b6:
                    6f:4d:52:98:6c:2e:68:38:96:14:31:d7:8c:98:a2:
                    08:c6:f2:d6:d0:f2:9b:cb:98:7d:45:b9:57:01:e8:
                    21:3f:de:7e:bc:ce:b7:b8:f5:a1:a8:9d:79:f9:c4:
                    0c:32:88:e3:da:aa:d8:33:7a:62:dc:fd:bb:a9:a2:
                    72:11:0a:77:1c:67:d1:62:f1:11:74:fb:6f:d2:57:
                    15:f4:1f:30:95:04:3b:af:fd:18:23:0a:ab:4b:61:
                    c2:ea:05:7c:1c:da:24:79:91:5a:af:48:4a:f6:89:
                    f3:34:95:61:0b:1c:5f:e0:a5:b3:2f:aa:49:5b:a8:
                    29:8c:44:30:7e:6e:e9:1d:6b:4c:20:6f:6f:3a:61:
                    00:f0:47:34:69:4b:3a:e4:71:ce:22:a6:0f:b1:59:
                    4b:42:be:e1:e6:f6:26:c1:2b:20:8f:75:a9:17:7b:
                    d9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5C:64:A6:73:56:34:F9:9F:2C:CF:0A:88:96:E9:9A:6C:E1:B1:CC
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/yVxkpnNWNPmfLM8KiJbpmmzhscw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.48.161.0-193.48.162.255
                  193.49.230.0/24
                  193.50.134.0/24
                  193.51.118.0/24
                  193.55.4.0/24
                  194.214.214.0/24
                  194.254.208.0/24
                  195.98.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:aa:57:e4:e9:f2:87:87:d8:9b:81:d8:28:04:3a:7b:45:25:
         ef:85:f7:61:bc:48:e5:31:0f:91:4d:52:f1:fc:92:19:c0:3d:
         b1:0d:83:f6:7c:0c:c8:f2:9b:29:53:04:79:4a:b7:52:6d:ba:
         93:e6:2a:49:72:35:c8:c5:1c:04:51:f8:4d:b4:83:f7:e4:a2:
         2e:87:bb:88:b3:46:8c:64:4f:89:9b:bf:bb:d2:63:ea:e8:6d:
         f0:bc:77:56:56:e3:05:f5:3b:a0:d7:27:50:08:07:45:9f:77:
         5f:f1:44:6b:8e:09:71:5b:e8:b0:3a:1f:91:52:d8:5b:4e:4a:
         a6:30:9b:a1:5e:16:e5:7b:30:53:8e:29:5a:ec:ee:66:1a:75:
         65:a3:21:f0:d9:f7:8f:87:49:d7:5e:17:9c:ae:26:ed:e9:87:
         65:c4:4b:86:c1:08:a6:e1:bb:96:ce:5b:0a:b7:5c:7f:87:3e:
         e2:fd:4a:1d:07:4a:b9:7a:e9:75:e8:a5:74:00:6a:dd:34:ec:
         62:cd:1d:a8:08:fe:8f:65:97:bc:1e:95:9d:75:56:1d:ad:48:
         c7:08:50:eb:17:cd:da:62:5c:bd:e1:81:d2:76:79:cc:a4:fb:
         64:66:9a:e7:83:6e:ec:33:6d:69:1c:d1:c0:b2:f3:12:0f:80:
         9c:7e:cf:43
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZt3WIhlXy2S/H2FCeet93rrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh
ODE0NDgwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTVjNjRhNjczNTYzNGY5OWYyY2NmMGE4ODk2ZTk5YTZjZTFiMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeG1GBqnM1LKslOoWoj7xyp3ff96
OgVAIgCJUxj55aVggqXdL6siMjV/hBXX6svQjbd+6NyoiNIzduKMH4oeQigm/GQU
ax56PUN5PVtKQDtaUtMYdLtN3bZvTVKYbC5oOJYUMdeMmKIIxvLW0PKby5h9RblX
AeghP95+vM63uPWhqJ15+cQMMojj2qrYM3pi3P27qaJyEQp3HGfRYvERdPtv0lcV
9B8wlQQ7r/0YIwqrS2HC6gV8HNokeZFar0hK9onzNJVhCxxf4KWzL6pJW6gpjEQw
fm7pHWtMIG9vOmEA8Ec0aUs65HHOIqYPsVlLQr7h5vYmwSsgj3WpF3vZ8QIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFMlcZKZzVjT5nyzPCoiW6Zps4bHMMB8GA1UdIwQY
MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt
MDRhMjdjNGQ1NDUzLzEveVZ4a3BuTldOUG1mTE04S2lKYnBtbXpoc2N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz
LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBADBMKED
BADBMKIDBADBMeYDBADBMoYDBADBM3YDBADBNwQDBADC1tYDBADC/tADBAHDYuIw
DQYJKoZIhvcNAQELBQADggEBAGWqV+Tp8oeH2JuB2CgEOntFJe+F92G8SOUxD5FN
UvH8khnAPbENg/Z8DMjymylTBHlKt1JtupPmKklyNcjFHARR+E20g/fkoi6Hu4iz
RoxkT4mbv7vSY+robfC8d1ZW4wX1O6DXJ1AIB0Wfd1/xRGuOCXFb6LA6H5FS2FtO
SqYwm6FeFuV7MFOOKVrs7mYadWWjIfDZ94+HSddeF5yuJu3ph2XES4bBCKbhu5bO
Wwq3XH+HPuL9Sh0HSrl66XXopXQAat007GLNHagI/o9ll7welZ11Vh2tSMcIUOsX
zdpiXL3hgdJ2ecyk+2RmmueDbuwzbWkc0cCy8xIPgJx+z0M=
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:39:11 2026 by rpki-client