This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/MYYqzcmmtmf7VG1hDOK2fqZLBt8.roa
File:                     MYYqzcmmtmf7VG1hDOK2fqZLBt8.roa (raw, json)
Hash identifier:          gFzMm2YkMAem1nrEwb7cBBm0swNc2eUlF8MDbR5hkU8=
Subject key identifier:   31:86:2A:CD:C9:A6:B6:67:FB:54:6D:61:0C:E2:B6:7E:A6:4B:06:DF
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019BEB130426E0DB231DB1380196570AD58E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/MYYqzcmmtmf7VG1hDOK2fqZLBt8.roa
Signing time:             Fri 23 Jan 2026 13:37:30 +0000
ROA not before:           Fri 23 Jan 2026 13:37:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214141
IP address blocks:        45.135.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:eb:13:04:26:e0:db:23:1d:b1:38:01:96:57:0a:d5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan 23 13:37:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=31862acdc9a6b667fb546d610ce2b67ea64b06df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:27:d0:d4:23:4b:b4:12:12:18:0a:e1:fe:
                    06:44:c6:ef:a6:05:d5:61:32:e6:ee:36:b4:86:34:
                    63:89:46:a1:75:2e:19:67:b4:ce:c5:76:df:56:35:
                    2b:33:a2:5c:b5:20:68:ba:19:a7:0c:9f:43:f9:7f:
                    f7:9b:d7:3f:0b:49:be:97:ed:cc:e5:34:3b:5c:97:
                    b7:f9:78:13:9c:04:10:76:d3:c5:48:34:93:f6:8d:
                    73:e4:92:3e:ba:df:d7:52:14:f9:af:50:9d:b9:74:
                    b0:fb:20:f1:43:22:f6:60:24:68:3d:1a:73:5c:ad:
                    20:a1:c8:44:5a:4c:44:46:cb:e2:cd:13:39:d8:79:
                    3a:98:d9:c8:7f:47:44:3c:81:d6:93:cd:b1:ec:4f:
                    93:f5:4d:58:71:ae:14:db:f0:08:c0:88:33:8a:bc:
                    c4:66:ae:3b:31:5f:95:d0:62:d0:3c:a6:ac:c9:89:
                    c7:99:47:33:f9:5f:05:ad:6b:f9:61:4a:ac:78:c7:
                    2d:0e:68:af:3d:92:4c:5a:98:fe:1c:e6:cc:a0:9f:
                    f1:e2:8d:db:6a:a9:7a:d6:22:b7:2a:05:8c:ac:c9:
                    7d:d3:02:de:40:c7:76:98:4e:ba:05:0e:5f:51:2d:
                    92:5f:01:d9:fb:3c:0b:30:2e:5b:b7:70:84:a1:e2:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:2A:CD:C9:A6:B6:67:FB:54:6D:61:0C:E2:B6:7E:A6:4B:06:DF
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/MYYqzcmmtmf7VG1hDOK2fqZLBt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:96:01:02:d3:a3:85:6b:58:97:bc:2a:c6:75:0e:4e:84:6e:
         a5:9f:89:26:c9:3a:ca:c4:71:c2:45:15:00:d6:1e:da:2c:d4:
         ba:97:7a:0f:33:bd:54:57:d9:ed:38:83:b6:3a:0f:f9:bd:98:
         43:d6:44:d2:2b:1f:67:4e:2d:62:48:14:13:db:da:d2:f0:35:
         55:a0:24:33:c0:cf:f2:0d:1d:3b:2d:ca:5d:84:ae:7f:2e:e1:
         85:c2:7b:84:1f:08:15:0d:30:a8:85:05:b4:2c:52:97:73:d9:
         69:3e:9d:b1:19:61:5d:44:70:5c:db:fb:da:74:b7:34:e5:87:
         21:47:f9:2d:20:98:d3:82:1a:5a:42:0e:d7:5e:1d:d2:eb:84:
         39:85:b7:47:c1:a8:36:36:f6:2c:d8:7b:b0:5d:87:3c:30:c3:
         b6:e1:f9:a6:65:37:a9:6f:fb:e8:53:b1:19:4e:22:82:66:ea:
         d1:a8:56:38:6e:65:25:c2:69:5c:4b:f3:af:81:92:20:46:03:
         84:a6:b9:7a:bf:71:e3:15:1a:9a:d7:d1:6e:b5:1a:36:49:02:
         4d:31:57:02:45:fe:90:0a:26:8c:e1:2c:b3:86:ff:bf:0d:6a:
         f3:e8:c7:85:b8:9e:f0:da:1b:75:49:3f:22:68:e4:3c:f1:08:
         52:a3:98:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZvrEwQm4NsjHbE4AZZXCtWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwMTIzMTMzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTg2MmFjZGM5YTZiNjY3ZmI1NDZkNjEwY2UyYjY3ZWE2NGIwNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxUn0NQjS7QSEhgK4f4GRMbvpgXV
YTLm7ja0hjRjiUahdS4ZZ7TOxXbfVjUrM6JctSBouhmnDJ9D+X/3m9c/C0m+l+3M
5TQ7XJe3+XgTnAQQdtPFSDST9o1z5JI+ut/XUhT5r1CduXSw+yDxQyL2YCRoPRpz
XK0gochEWkxERsvizRM52Hk6mNnIf0dEPIHWk82x7E+T9U1Yca4U2/AIwIgzirzE
Zq47MV+V0GLQPKasyYnHmUcz+V8FrWv5YUqseMctDmivPZJMWpj+HObMoJ/x4o3b
aql61iK3KgWMrMl90wLeQMd2mE66BQ5fUS2SXwHZ+zwLMC5bt3CEoeICLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDGGKs3JprZn+1RtYQzitn6mSwbfMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvTVlZcXpjbW10bWY3VkcxaERPSzJmcVpMQnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYenMA0G
CSqGSIb3DQEBCwUAA4IBAQCvlgEC06OFa1iXvCrGdQ5OhG6ln4kmyTrKxHHCRRUA
1h7aLNS6l3oPM71UV9ntOIO2Og/5vZhD1kTSKx9nTi1iSBQT29rS8DVVoCQzwM/y
DR07LcpdhK5/LuGFwnuEHwgVDTCohQW0LFKXc9lpPp2xGWFdRHBc2/vadLc05Ych
R/ktIJjTghpaQg7XXh3S64Q5hbdHwag2NvYs2HuwXYc8MMO24fmmZTepb/voU7EZ
TiKCZurRqFY4bmUlwmlcS/OvgZIgRgOEprl6v3HjFRqa19FutRo2SQJNMVcCRf6Q
CiaM4Syzhv+/DWrz6MeFuJ7w2ht1ST8iaOQ88QhSo5hd
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:44 2026 by rpki-client