This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/yjmhn9zBn-5iLGupIJe7hZRJHEI.roa
File:                     yjmhn9zBn-5iLGupIJe7hZRJHEI.roa (raw, json)
Hash identifier:          mUPbuC6CRqfm+IKqCyjDmA5vrXV/CLfdXuRnH6W/B2M=
Subject key identifier:   CA:39:A1:9F:DC:C1:9F:EE:62:2C:6B:A9:20:97:BB:85:94:49:1C:42
Certificate issuer:       /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial:       019B78354A7C60FDD69E3E4859E83FE7C23A
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/yjmhn9zBn-5iLGupIJe7hZRJHEI.roa
Signing time:             Thu 01 Jan 2026 06:18:37 +0000
ROA not before:           Thu 01 Jan 2026 06:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198279
IP address blocks:        185.55.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:4a:7c:60:fd:d6:9e:3e:48:59:e8:3f:e7:c2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
        Validity
            Not Before: Jan  1 06:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca39a19fdcc19fee622c6ba92097bb8594491c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:de:4f:0e:de:24:d7:c7:0c:d1:4f:2e:6d:
                    a7:b9:85:9d:8d:12:20:46:54:f5:a1:94:66:50:b1:
                    44:8e:3d:78:43:d7:93:75:7e:5d:c6:2e:49:69:8b:
                    7a:85:08:89:79:f5:ec:6b:25:02:45:ab:21:cd:a3:
                    86:68:c5:eb:60:97:a9:09:de:bc:f2:24:fe:9f:1a:
                    53:df:49:6c:ef:8e:94:12:b5:36:32:3a:0b:95:c2:
                    38:4f:5f:2e:76:0c:c1:39:ed:70:43:04:9e:53:7e:
                    db:2f:ce:bc:ba:a2:6d:a3:31:bc:04:80:b5:46:9d:
                    c3:35:b8:c5:1a:02:dd:95:f3:de:7f:00:63:b1:3a:
                    ff:ae:4a:d4:ba:ea:57:26:c5:06:b9:28:e0:e5:72:
                    7f:b0:f1:51:02:2b:fc:02:ce:5b:d4:2f:7d:51:c2:
                    13:12:88:47:df:09:cd:a5:f7:7d:7d:ad:f4:f3:94:
                    9e:20:30:31:da:6d:4b:d1:39:6e:a8:57:71:14:a0:
                    82:f9:3c:de:11:e8:a0:99:d9:55:76:11:c8:29:ea:
                    cd:34:f4:b1:54:ee:bc:49:68:bc:ea:79:ad:45:53:
                    e8:0e:64:7b:bb:65:8f:ab:11:23:aa:9a:78:0c:08:
                    07:55:a9:b1:08:12:ca:9a:2e:7d:20:6b:67:06:74:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:39:A1:9F:DC:C1:9F:EE:62:2C:6B:A9:20:97:BB:85:94:49:1C:42
            X509v3 Authority Key Identifier:
                keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/yjmhn9zBn-5iLGupIJe7hZRJHEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.55.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:05:aa:67:a4:f4:e3:8d:cc:52:b3:e4:44:b5:c3:36:70:28:
         b5:ec:9d:4c:2a:2b:87:39:70:86:f3:2b:2d:b2:c2:3a:a2:c7:
         d6:a5:8e:6e:8a:9c:9e:5b:81:6d:53:fa:35:ad:28:11:56:3f:
         74:5c:39:c8:a8:d7:38:68:64:d2:f3:19:9d:71:38:67:0a:f7:
         7a:ce:01:cf:e6:0d:16:5e:6d:7d:a5:e4:a3:c9:ae:f4:c1:38:
         53:03:13:9e:09:45:a7:e3:b8:21:40:60:5d:1f:85:41:82:b2:
         4f:e9:24:ec:fe:ab:b3:f8:9b:cb:4e:9f:3d:07:1a:59:fc:9e:
         89:ce:25:cf:63:1c:d1:01:8e:ce:94:c4:35:a0:4e:ff:c9:b7:
         c0:6b:eb:a2:1c:a6:39:a6:6f:42:53:60:42:74:04:f4:ab:e8:
         86:36:c9:8a:36:03:94:2e:d7:08:9a:c4:7f:ff:08:50:2b:ac:
         47:2f:49:f9:6d:72:76:0a:09:23:8b:1c:01:c3:8d:36:cc:0f:
         48:d1:0d:d2:bc:a8:4f:41:ff:6c:47:e2:d4:34:82:fe:56:df:
         f7:43:11:c4:61:c6:59:25:8d:5a:4f:38:90:6c:e7:b4:7c:e6:
         21:04:8d:5c:c3:49:f7:e2:d7:9d:ad:65:6d:b8:a4:8d:e8:ba:
         47:d5:47:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NUp8YP3Wnj5IWeg/58I6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjZkN2M0NjhkMDkyYzkyMTMxNGQ2NjQ3M2NmYTUzODUx
Y2Q2ODYwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTM5YTE5ZmRjYzE5ZmVlNjIyYzZiYTkyMDk3YmI4NTk0NDkxYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLveTw7eJNfHDNFPLm2nuYWdjRIg
RlT1oZRmULFEjj14Q9eTdX5dxi5JaYt6hQiJefXsayUCRashzaOGaMXrYJepCd68
8iT+nxpT30ls746UErU2MjoLlcI4T18udgzBOe1wQwSeU37bL868uqJtozG8BIC1
Rp3DNbjFGgLdlfPefwBjsTr/rkrUuupXJsUGuSjg5XJ/sPFRAiv8As5b1C99UcIT
EohH3wnNpfd9fa3085SeIDAx2m1L0TluqFdxFKCC+TzeEeigmdlVdhHIKerNNPSx
VO68SWi86nmtRVPoDmR7u2WPqxEjqpp4DAgHVamxCBLKmi59IGtnBnTVCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMo5oZ/cwZ/uYixrqSCXu4WUSRxCMB8GA1UdIwQY
MBaAFEq218Ro0JLJITFNZkc8+lOFHNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQt
MDU3NjRjN2VkYWE3LzEveWptaG45ekJuLTVpTEd1cElKZTdoWlJKSEVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQtMDU3NjRjN2VkYWE3
LzEvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTeWMA0G
CSqGSIb3DQEBCwUAA4IBAQCcBapnpPTjjcxSs+REtcM2cCi17J1MKiuHOXCG8yst
ssI6osfWpY5uipyeW4FtU/o1rSgRVj90XDnIqNc4aGTS8xmdcThnCvd6zgHP5g0W
Xm19peSjya70wThTAxOeCUWn47ghQGBdH4VBgrJP6STs/quz+JvLTp89BxpZ/J6J
ziXPYxzRAY7OlMQ1oE7/ybfAa+uiHKY5pm9CU2BCdAT0q+iGNsmKNgOULtcImsR/
/whQK6xHL0n5bXJ2CgkjixwBw402zA9I0Q3SvKhPQf9sR+LUNIL+Vt/3QxHEYcZZ
JY1aTziQbOe0fOYhBI1cw0n34tedrWVtuKSN6LpH1Uev
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:06:19 2026 by rpki-client