This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa
File:                     MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa (raw, json)
Hash identifier:          b5AkjRiP8AjbeAnZmdI+p2iRLfqlwKytew/Xvvx0yg0=
Subject key identifier:   31:8D:28:CB:2C:49:C6:10:5A:C5:5E:9E:DF:92:63:E9:1C:15:44:DE
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       019B7AC7C55AE603235142855576ACB90DC9
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa
Signing time:             Thu 01 Jan 2026 18:17:51 +0000
ROA not before:           Thu 01 Jan 2026 18:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212865
IP address blocks:        62.65.141.0/24 maxlen: 24
                          62.65.142.0/24 maxlen: 24
                          62.65.143.0/24 maxlen: 24
                          62.65.144.0/21 maxlen: 21
                          62.65.153.0/24 maxlen: 24
                          62.65.154.0/23 maxlen: 23
                          62.65.156.0/23 maxlen: 23
                          62.65.158.0/24 maxlen: 24
                          94.78.2.0/24 maxlen: 24
                          94.78.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:c5:5a:e6:03:23:51:42:85:55:76:ac:b9:0d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: Jan  1 18:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=318d28cb2c49c6105ac55e9edf9263e91c1544de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7a:89:b5:bc:bb:19:06:3f:e2:b1:0c:b5:33:
                    2a:b6:e3:05:6c:1f:6d:11:21:ea:10:3b:83:b0:c7:
                    0e:a5:1d:5c:bc:51:e8:f6:5a:0d:5f:1a:22:79:08:
                    bc:1f:58:3d:c1:41:d7:cc:8c:43:94:b3:13:e2:c7:
                    32:14:ae:7c:2d:cc:3d:ed:92:24:c5:91:79:f8:b8:
                    89:cb:81:2b:d2:18:6d:80:53:50:82:39:f9:83:d6:
                    a2:69:b5:cc:4e:c6:72:fe:15:fb:fc:ea:bb:1d:c0:
                    44:eb:aa:39:d9:2e:25:09:14:22:a4:3f:33:64:64:
                    30:a1:3d:38:85:d9:f1:c0:a8:61:a1:fc:f4:d9:95:
                    14:8a:aa:7d:d7:dd:32:8a:83:e6:b5:48:66:82:73:
                    94:b3:b2:fa:dc:13:4d:53:1e:c3:4c:2a:6c:b2:86:
                    9f:e2:56:f4:8b:e1:18:9a:14:ee:4b:c7:f4:75:b4:
                    e9:dc:0d:3c:ff:28:ae:e6:81:68:f3:c5:84:4b:f3:
                    c4:de:b2:c0:47:86:e0:6b:62:cf:66:83:1d:9f:8a:
                    36:c2:81:7b:fd:f2:af:ea:90:e2:35:a1:5a:1f:5a:
                    4b:47:15:9a:1d:37:57:40:56:d2:e6:ea:f3:74:9a:
                    55:f7:9a:c7:14:79:9b:90:ae:d4:f7:b6:17:c5:da:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8D:28:CB:2C:49:C6:10:5A:C5:5E:9E:DF:92:63:E9:1C:15:44:DE
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.65.141.0-62.65.151.255
                  62.65.153.0-62.65.158.255
                  94.78.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:42:a5:29:f9:99:0f:d5:a4:a0:0b:70:09:1d:ba:7e:59:7d:
         09:76:fb:10:9d:ac:90:2e:69:f9:52:64:38:5e:38:ce:2f:93:
         5e:26:6c:5a:5d:99:48:8d:5a:e8:ad:2c:19:c5:11:b3:95:e2:
         b4:0a:18:30:56:e4:a3:c3:27:0a:cb:f7:76:b9:78:a0:4e:5d:
         35:9a:85:c1:f2:de:b6:a2:11:1d:1a:95:4b:e4:78:4e:ff:56:
         3f:f5:48:cb:58:cf:eb:f6:fa:05:a2:8a:56:e6:9d:07:a2:14:
         4a:88:2e:8e:a7:a2:ca:9a:01:7b:46:76:59:50:14:bd:f3:05:
         49:d1:a2:76:51:e0:8a:fb:92:7f:6b:e7:9e:51:db:9e:c8:43:
         ae:ef:d0:ea:88:55:14:e5:d6:90:8a:dd:ea:29:bd:4f:2f:c6:
         65:5f:36:2f:e1:f2:1f:69:67:9b:88:f4:5e:6a:3e:ef:a6:37:
         43:87:99:c3:4a:4b:53:25:4f:15:4d:b9:17:d9:ff:74:15:09:
         7a:2c:70:1e:5b:c1:0a:a8:98:1a:c8:8d:81:f3:9e:9f:1c:bd:
         80:53:86:b4:19:02:21:b8:d9:05:10:8b:f3:5d:fa:87:1c:46:
         f8:f4:66:d0:77:62:b1:26:7a:4f:67:66:1d:b0:9f:3a:8e:99:
         3c:f5:72:16
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZt6x8Va5gMjUUKFVXasuQ3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0
N2RiMGIwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMThkMjhjYjJjNDljNjEwNWFjNTVlOWVkZjkyNjNlOTFjMTU0NGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXqJtby7GQY/4rEMtTMqtuMFbB9t
ESHqEDuDsMcOpR1cvFHo9loNXxoieQi8H1g9wUHXzIxDlLMT4scyFK58Lcw97ZIk
xZF5+LiJy4Er0hhtgFNQgjn5g9aiabXMTsZy/hX7/Oq7HcBE66o52S4lCRQipD8z
ZGQwoT04hdnxwKhhofz02ZUUiqp9190yioPmtUhmgnOUs7L63BNNUx7DTCpssoaf
4lb0i+EYmhTuS8f0dbTp3A08/yiu5oFo88WES/PE3rLAR4bga2LPZoMdn4o2woF7
/fKv6pDiNaFaH1pLRxWaHTdXQFbS5urzdJpV95rHFHmbkK7U97YXxdrB5wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDGNKMssScYQWsVent+SY+kcFUTeMB8GA1UdIwQY
MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt
ZDE5NmY5MjkxNzMyLzEvTVkwb3l5eEp4aEJheFY2ZTM1Smo2UndWUk40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy
LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAA+QY0D
BAM+QZAwDAMEAD5BmQMEAD5BngMEAV5OAjANBgkqhkiG9w0BAQsFAAOCAQEAlEKl
KfmZD9WkoAtwCR26fll9CXb7EJ2skC5p+VJkOF44zi+TXiZsWl2ZSI1a6K0sGcUR
s5XitAoYMFbko8MnCsv3drl4oE5dNZqFwfLetqIRHRqVS+R4Tv9WP/VIy1jP6/b6
BaKKVuadB6IUSogujqeiypoBe0Z2WVAUvfMFSdGidlHgivuSf2vnnlHbnshDru/Q
6ohVFOXWkIrd6im9Ty/GZV82L+HyH2lnm4j0Xmo+76Y3Q4eZw0pLUyVPFU25F9n/
dBUJeixwHlvBCqiYGsiNgfOenxy9gFOGtBkCIbjZBRCL8136hxxG+PRm0HdisSZ6
T2dmHbCfOo6ZPPVyFg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:15:20 2026 by rpki-client