This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa
File:                     YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (raw, json)
Hash identifier:          r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=
Subject key identifier:   61:53:9F:71:80:5E:D4:2B:4B:47:CA:43:61:ED:6F:48:B4:11:84:99
Certificate issuer:       /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial:       019B7AC89559435BDFF4F72B86593C5A5509
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa
Signing time:             Thu 01 Jan 2026 18:18:44 +0000
ROA not before:           Thu 01 Jan 2026 18:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44090
IP address blocks:        193.107.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:95:59:43:5b:df:f4:f7:2b:86:59:3c:5a:55:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
        Validity
            Not Before: Jan  1 18:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=61539f71805ed42b4b47ca4361ed6f48b4118499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:4c:91:b6:71:22:6d:bd:46:d8:40:94:e0:
                    27:f8:6c:36:b0:7d:ad:99:fb:2c:b4:98:7b:32:b2:
                    63:60:0f:f5:f8:e8:b6:3c:f1:ad:23:4c:c1:ed:6b:
                    98:b2:8c:4a:e3:1d:25:f8:56:a5:41:ce:c8:c2:ec:
                    02:ef:69:46:76:5b:95:b4:92:f6:f9:3f:84:03:c4:
                    3c:5e:46:d8:ef:d5:44:38:82:0e:a1:d2:b9:53:12:
                    83:31:d5:e7:36:34:a8:a5:50:28:5f:1f:96:ff:e1:
                    d8:2e:a1:f3:d1:0a:16:ba:d1:47:5d:0a:bc:e5:04:
                    d6:e7:f9:c1:f5:f0:ba:0d:e3:27:e5:b9:0d:04:2f:
                    fd:38:91:9a:f5:e7:7f:22:b4:b1:90:a8:a8:0c:3f:
                    39:2a:33:63:dd:73:3c:aa:68:43:f7:c8:f2:67:1a:
                    55:fc:07:82:08:30:45:4b:db:1a:5a:34:a4:30:3d:
                    81:d7:bf:2a:f4:9d:64:18:bc:96:d6:23:4f:16:5a:
                    dc:c6:dd:40:5d:45:e9:eb:46:dd:fe:ff:88:b2:94:
                    ce:8a:ad:33:b3:02:80:a0:96:77:39:8a:d9:00:91:
                    1e:c3:4d:b9:90:ad:44:02:c6:b4:0a:36:02:4a:10:
                    27:74:a9:05:23:80:5e:26:87:4c:4b:7e:23:f8:e8:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:53:9F:71:80:5E:D4:2B:4B:47:CA:43:61:ED:6F:48:B4:11:84:99
            X509v3 Authority Key Identifier:
                keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:69:e6:ff:03:08:1c:a9:56:39:d8:94:61:b4:40:9b:9e:c3:
         66:4a:5a:86:d5:8d:f7:9d:db:09:ab:93:74:79:33:9b:0d:a2:
         d8:48:e5:ce:f0:25:a7:0f:4d:58:04:14:78:97:51:95:71:53:
         09:fc:a5:c6:f5:12:dd:64:e0:4d:77:de:39:1e:fb:f7:33:17:
         93:27:78:f3:91:d3:90:29:55:f9:1d:14:e5:8b:be:5d:44:53:
         f1:2d:31:57:33:ee:8d:09:9f:46:49:e0:a9:9b:67:88:6a:26:
         63:ed:cc:ba:ec:3f:92:b2:c9:b2:44:b3:6a:2b:91:e4:59:a0:
         e5:7e:93:bb:13:9d:d1:e9:0d:fb:ac:6b:af:23:2a:57:86:7f:
         4b:ef:3b:8b:91:a4:50:e4:1f:80:a7:7f:27:9d:6c:77:3d:ac:
         66:34:4a:63:c3:04:3e:34:d0:f4:25:57:b5:fc:ec:e8:da:a6:
         65:50:6a:97:1e:42:ec:e6:9f:5d:ce:1d:ec:42:51:9c:f2:11:
         5a:7c:ee:33:37:09:0d:b1:fd:5e:16:28:7b:96:d0:96:e8:6a:
         2b:66:82:4c:63:eb:9d:2c:f1:ac:ae:2b:67:c7:6b:6d:f8:5d:
         ac:cd:7a:5d:18:b7:a5:d7:3a:54:fb:b4:a1:de:58:e1:16:55:
         a1:69:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:04:56 2026 by rpki-client