This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/YwaTWFoU_sclTYJB9JwjIcKav1Y.roa
File:                     YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (raw, json)
Hash identifier:          Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=
Subject key identifier:   63:06:93:58:5A:14:FE:C7:25:4D:82:41:F4:9C:23:21:C2:9A:BF:56
Certificate issuer:       /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial:       019B797E9E186495D905FEFEA15252E688B1
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/YwaTWFoU_sclTYJB9JwjIcKav1Y.roa
Signing time:             Thu 01 Jan 2026 12:18:19 +0000
ROA not before:           Thu 01 Jan 2026 12:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50304
IP address blocks:        77.246.246.0/24 maxlen: 24
                          185.213.52.0/22 maxlen: 24
                          2a0b:8340::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:9e:18:64:95:d9:05:fe:fe:a1:52:52:e6:88:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
        Validity
            Not Before: Jan  1 12:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=630693585a14fec7254d8241f49c2321c29abf56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:a8:37:0c:6b:31:f3:0d:57:1a:1a:2b:36:
                    da:9a:fc:47:d2:e8:80:6f:4b:4b:07:2a:b6:dd:dd:
                    53:06:84:30:51:d3:d2:21:1c:ae:2c:e1:59:95:15:
                    8a:3b:9e:1b:1c:82:82:83:67:4b:29:6a:f1:f2:33:
                    0d:8e:b8:45:c6:93:92:fa:e6:dd:9d:b5:b1:fb:1b:
                    26:0d:e2:dc:e7:88:9d:46:38:a7:70:37:5b:52:47:
                    7a:10:ff:30:f0:46:e9:41:66:db:55:ca:f6:a4:4b:
                    30:1e:39:76:bb:73:99:95:91:21:a1:3d:9a:bb:f3:
                    2e:cc:f6:8a:e6:e7:54:a6:43:c2:75:81:6d:01:51:
                    47:06:a5:8f:2c:99:23:59:66:05:4b:05:a7:ae:f5:
                    ad:3b:da:80:76:98:14:41:57:0a:50:ad:a2:64:52:
                    15:3f:78:68:84:f4:70:db:4b:3d:82:be:7b:a6:fd:
                    95:39:c5:5b:15:98:31:38:f1:b2:df:6c:53:1e:c6:
                    73:82:ed:9c:e7:78:48:51:32:60:81:60:67:8c:85:
                    e1:6b:d6:70:c1:24:fc:7d:2c:71:93:49:df:31:2c:
                    f1:bc:6e:19:cc:42:ae:25:33:04:b6:18:4d:77:2f:
                    8e:59:ff:8e:b8:4b:4d:ff:66:af:a1:1b:26:4e:93:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:06:93:58:5A:14:FE:C7:25:4D:82:41:F4:9C:23:21:C2:9A:BF:56
            X509v3 Authority Key Identifier:
                keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/YwaTWFoU_sclTYJB9JwjIcKav1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.246.0/24
                  185.213.52.0/22
                IPv6:
                  2a0b:8340::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:03:e4:4c:87:d9:40:19:f3:1f:a3:8c:a9:7d:f6:b9:53:cd:
         eb:7b:89:56:eb:ee:41:00:f6:67:c9:87:22:e6:5e:2d:d3:d9:
         f1:98:57:cd:e6:79:ed:1a:fe:b7:f7:16:13:1e:75:08:f4:2c:
         f6:28:d6:f4:cf:11:35:45:1f:92:f9:eb:b7:1e:15:7a:fd:84:
         68:8a:d1:83:b3:f0:59:2b:79:0c:64:e4:1e:d4:b2:9c:27:4d:
         8f:d3:1e:72:14:93:a5:30:ab:4b:65:34:42:29:60:16:76:d1:
         09:f3:88:52:b4:7e:47:2a:ce:7f:41:89:19:70:fb:0d:cc:69:
         36:e4:d5:2f:05:e8:d5:7e:2d:03:d0:71:fc:0f:98:e5:24:b1:
         de:a8:2a:7c:04:ef:41:f1:7d:2b:34:16:bc:58:03:91:0b:2d:
         47:a0:85:5c:58:60:aa:ad:72:d8:aa:d8:a0:ff:a7:d1:f4:b3:
         ea:79:c1:1b:4d:74:fb:16:cc:95:6a:d4:c6:2e:cf:b2:45:91:
         18:59:8a:8d:ff:65:b2:16:56:4e:01:7d:99:41:70:de:8e:73:
         0f:2a:f7:34:11:a9:4a:0b:87:71:7a:a0:40:c4:70:3a:63:a5:
         e6:7e:4f:f2:dd:3b:6d:bf:bd:ca:7e:a3:f8:fe:bd:9c:38:5c:
         68:ff:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:40:54 2026 by rpki-client