This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/45ppuvoiJYQJiK8xXl1hgMdRWz0.roa
File:                     45ppuvoiJYQJiK8xXl1hgMdRWz0.roa (raw, json)
Hash identifier:          LmMNhIsl4kRzjwmrT9h+IBDFabhZvSaVZDhVFHa5NQE=
Subject key identifier:   E3:9A:69:BA:FA:22:25:84:09:88:AF:31:5E:5D:61:80:C7:51:5B:3D
Certificate issuer:       /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial:       019B7E381AB2928249D7169235DA7C233834
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/45ppuvoiJYQJiK8xXl1hgMdRWz0.roa
Signing time:             Fri 02 Jan 2026 10:19:24 +0000
ROA not before:           Fri 02 Jan 2026 10:19:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        185.88.184.0/24 maxlen: 24
                          185.88.185.0/24 maxlen: 24
                          185.88.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 01:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:1a:b2:92:82:49:d7:16:92:35:da:7c:23:38:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
        Validity
            Not Before: Jan  2 10:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e39a69bafa2225840988af315e5d6180c7515b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:0c:17:fd:41:d2:df:fd:5a:48:ac:80:28:
                    70:99:d0:56:45:46:bb:e9:3f:93:5e:86:f3:d7:d5:
                    6f:b7:a7:64:b2:21:c2:22:ff:a8:79:97:d7:64:1d:
                    63:3b:cf:38:23:cd:c8:35:1d:96:7a:e2:81:b6:45:
                    a5:89:4a:55:ad:54:38:3f:80:1d:61:72:89:82:54:
                    fd:3d:1e:e6:3f:24:33:c0:63:b5:9d:e6:96:9b:d2:
                    b6:fe:ac:29:16:ed:d2:eb:fe:9a:d7:db:ec:fa:38:
                    37:ec:94:4a:63:1f:5d:a8:27:aa:45:66:a4:69:a8:
                    20:54:b2:ca:ee:47:8e:c6:c6:72:d2:c8:98:e6:8c:
                    ea:9f:71:a0:e7:20:7d:29:6b:64:5f:ac:58:ae:96:
                    6e:ae:4e:0e:a6:46:ae:c3:e1:50:7b:71:c4:bb:f7:
                    23:6a:75:7d:dd:a7:ad:d0:db:c2:b2:e9:d7:0a:ca:
                    c0:d6:9b:b7:88:8e:5a:ea:b3:b9:11:ba:8d:2c:f5:
                    2f:bd:cb:5d:bb:dc:e9:2d:2f:5b:95:ed:4e:ea:9d:
                    e2:95:f5:88:dd:db:4c:32:0d:e2:d6:6a:24:2d:ec:
                    51:64:dd:51:06:57:02:0e:27:93:b3:56:f1:4b:43:
                    bc:58:ae:e1:65:2d:24:c5:25:67:6d:81:7d:11:86:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9A:69:BA:FA:22:25:84:09:88:AF:31:5E:5D:61:80:C7:51:5B:3D
            X509v3 Authority Key Identifier:
                keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/45ppuvoiJYQJiK8xXl1hgMdRWz0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.88.184.0-185.88.186.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:47:a3:d7:0b:35:e0:96:ed:e3:fb:2e:d0:82:5e:c9:06:a7:
         bf:22:93:45:35:97:56:0a:76:39:09:74:91:c9:6a:45:bb:5e:
         94:c6:c6:d6:26:ed:c2:31:77:57:5c:89:5c:a4:e0:75:16:4f:
         68:bd:d7:d0:bf:f2:26:60:55:43:a2:e6:18:d9:35:25:7e:92:
         bd:64:af:02:f0:b4:ca:e0:a1:34:de:36:22:6c:c1:5a:85:b2:
         d2:8f:8b:c8:30:75:54:0e:da:48:3d:34:f3:0e:ad:46:56:59:
         75:84:7b:bc:af:ca:c9:88:95:a0:48:8b:f6:1a:2d:a3:b3:b3:
         5e:c6:ff:6d:5c:49:0c:c0:e8:a3:20:21:0d:cb:0f:ef:ce:6f:
         ce:12:b5:1e:09:d9:67:47:65:d5:15:77:f8:4c:45:d5:ed:2b:
         9a:38:11:c8:87:db:b8:65:f9:c1:b7:1b:d1:b3:f5:b3:f8:f3:
         e7:53:7e:9f:05:59:2d:46:b4:51:2b:69:e5:71:88:a1:ad:6d:
         f6:13:7d:76:20:50:f3:c2:e5:39:86:0b:dd:52:94:46:72:24:
         e6:fa:24:f0:dd:cf:d3:01:07:e6:97:a3:65:90:89:c9:ad:7d:
         78:a7:a9:3a:d2:82:c7:72:1f:a1:52:48:e8:da:70:10:40:9d:
         a3:88:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:21 2026 by rpki-client