This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/gyLKXkXRz48b_JyrcotRubrVz8Y.roa
File:                     gyLKXkXRz48b_JyrcotRubrVz8Y.roa (raw, json)
Hash identifier:          ygEJxWsADXdbRBqANcORtqCY24UFLYSPOImjlQWVkW8=
Subject key identifier:   83:22:CA:5E:45:D1:CF:8F:1B:FC:9C:AB:72:8B:51:B9:BA:D5:CF:C6
Certificate issuer:       /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial:       019B77C71FB812531990CFD9957159186846
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/gyLKXkXRz48b_JyrcotRubrVz8Y.roa
Signing time:             Thu 01 Jan 2026 04:18:17 +0000
ROA not before:           Thu 01 Jan 2026 04:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45000
IP address blocks:        193.0.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:1f:b8:12:53:19:90:cf:d9:95:71:59:18:68:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
        Validity
            Not Before: Jan  1 04:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8322ca5e45d1cf8f1bfc9cab728b51b9bad5cfc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:69:23:19:4c:02:2b:5d:f8:2d:e0:9b:cb:
                    5c:41:e2:37:55:dd:65:4f:ef:7f:05:43:f0:13:7d:
                    25:b1:9f:d1:44:95:74:47:cf:eb:d3:c6:f0:cd:53:
                    4e:73:d6:93:67:ba:9a:a0:8a:b0:2c:3b:0f:aa:96:
                    64:3a:66:32:5c:f5:9c:2b:fb:42:e1:38:18:42:d6:
                    03:93:de:0c:af:33:7e:a1:52:a9:32:42:ed:aa:da:
                    a9:72:ef:1c:b5:de:7c:33:90:5c:7d:63:94:cd:6b:
                    1b:4f:e7:b4:a4:37:90:0d:4e:c8:6c:52:6b:9f:21:
                    cd:f8:fb:b7:91:53:cf:9f:57:18:22:7a:28:5f:75:
                    0b:9a:d7:34:bf:12:76:7d:04:c1:99:e5:c1:ac:98:
                    c8:d3:7e:ce:b7:2a:1e:76:c7:7d:7c:f1:d1:bb:de:
                    f1:16:88:63:1c:b0:d7:61:d6:33:41:55:03:14:37:
                    a7:9d:4e:ca:8f:f7:6d:e5:74:36:0d:1f:7a:bf:d4:
                    3c:c0:a7:24:7e:18:87:48:ee:81:13:0c:8c:c1:b9:
                    5c:0c:c6:fb:9a:8f:a4:c8:fa:5f:b7:da:a2:0d:e8:
                    b3:23:79:bc:15:88:cd:a6:57:47:ba:df:61:41:24:
                    5a:83:80:f2:40:ad:e5:11:4a:fd:bf:37:54:0f:a0:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:22:CA:5E:45:D1:CF:8F:1B:FC:9C:AB:72:8B:51:B9:BA:D5:CF:C6
            X509v3 Authority Key Identifier:
                keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/gyLKXkXRz48b_JyrcotRubrVz8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:a3:68:9a:7b:df:7d:9d:4d:bf:6d:aa:6a:99:25:7e:6f:
         76:b2:14:85:f3:04:a0:e7:6f:af:d8:72:13:af:70:01:eb:dd:
         d0:f3:49:c7:29:91:fa:f8:1d:46:09:6c:65:b3:65:ca:2b:88:
         eb:b7:3d:7e:63:6a:be:5f:a8:6f:a5:f3:cf:b9:ab:8c:64:1c:
         ff:a7:bc:29:1f:b6:05:52:40:c7:aa:0a:8f:35:e6:96:ad:b9:
         64:ab:0c:c2:a3:74:70:cc:f0:07:59:87:2d:8f:09:ed:9a:78:
         71:a7:ad:09:ee:e0:d9:1e:e1:5b:2e:51:82:b7:52:7b:b2:b0:
         55:d3:f0:6a:38:96:fc:46:e3:bb:6c:f3:1d:5b:a3:6d:41:49:
         73:27:df:08:c7:73:5d:19:94:69:b4:0b:6b:40:d3:4a:63:90:
         7d:04:34:ba:b9:ff:7f:61:f1:c3:9e:81:3e:6c:a3:d7:56:17:
         6c:3a:72:91:b0:8e:37:79:c1:03:44:8a:aa:42:f1:bf:aa:d9:
         05:1d:0e:2a:77:02:8d:2b:9b:98:b7:44:d3:2a:77:ec:f4:2f:
         57:73:26:0d:a9:81:21:8b:95:87:fb:d9:d3:08:3e:46:5a:72:
         80:92:84:84:97:bd:c2:a2:61:8a:64:d8:d0:7f:06:3e:38:dc:
         10:e3:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:20:22 2026 by rpki-client