This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1yEuy4--LpEjZMwcGU4XYRQtK8k.roa
File:                     1yEuy4--LpEjZMwcGU4XYRQtK8k.roa (raw, json)
Hash identifier:          y6OhFCsGp+jONFOI59qoKWFku0DzfMF9GX10vYtd6ZI=
Subject key identifier:   D7:21:2E:CB:8F:BE:2E:91:23:64:CC:1C:19:4E:17:61:14:2D:2B:C9
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019C05AD9F0E329DC30C61FC9F050C320106
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1yEuy4--LpEjZMwcGU4XYRQtK8k.roa
Signing time:             Wed 28 Jan 2026 17:36:30 +0000
ROA not before:           Wed 28 Jan 2026 17:36:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201988
IP address blocks:        144.31.169.0/24 maxlen: 24
                          144.31.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:05:ad:9f:0e:32:9d:c3:0c:61:fc:9f:05:0c:32:01:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Jan 28 17:36:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7212ecb8fbe2e912364cc1c194e1761142d2bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:51:d7:56:78:fe:c7:34:36:1c:4c:17:a4:
                    4c:cd:09:77:48:77:a3:81:60:9e:40:80:35:3e:b7:
                    55:ca:40:38:03:5f:ad:82:1b:79:f6:04:a2:10:c3:
                    ca:dd:6a:c0:e5:6c:7c:8e:24:95:75:0d:cf:2e:69:
                    fa:c9:1d:40:4c:70:20:d9:33:66:c6:14:f5:1d:54:
                    05:72:e9:b6:6a:a1:70:e7:d9:b8:d3:43:bc:f7:81:
                    dc:1b:86:86:72:82:28:5e:e5:ac:43:0a:7e:05:24:
                    ff:2c:e2:3f:36:ff:33:03:9c:02:cf:c2:6b:bb:76:
                    82:b9:35:5c:7c:c9:7c:10:c0:5a:e8:d7:8c:28:ee:
                    08:6b:16:72:10:6c:a5:14:44:b3:e5:61:e1:20:00:
                    33:bf:c0:d0:cc:e2:1c:2d:bf:cc:7f:c4:17:66:61:
                    91:e1:4b:d4:49:76:61:c3:a1:69:7d:bc:dc:bb:7a:
                    23:1e:d9:b8:6e:97:e1:cb:54:72:8b:f7:5f:21:dd:
                    4f:9f:7a:2e:a3:2b:13:88:27:5d:e2:92:2f:fe:ba:
                    d5:82:da:31:f3:c9:96:d2:03:96:57:65:ab:20:98:
                    e1:69:58:49:2e:6a:59:98:8a:07:7b:4b:66:ec:f6:
                    2f:60:f6:8e:07:dd:c5:40:ae:f5:3b:4e:74:53:2a:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:21:2E:CB:8F:BE:2E:91:23:64:CC:1C:19:4E:17:61:14:2D:2B:C9
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1yEuy4--LpEjZMwcGU4XYRQtK8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.31.169.0/24
                  144.31.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:0d:21:c0:6c:89:c0:d8:7c:d2:7f:85:66:72:3f:26:c6:18:
         2e:dc:0f:d9:3a:60:b6:af:36:67:72:84:ac:03:c8:8d:2c:92:
         4d:f5:b2:a0:92:f6:c7:c1:7c:8b:d7:93:0c:eb:df:f1:06:6b:
         09:69:45:75:2c:7f:fd:ba:53:fb:16:1d:5d:e4:db:5d:62:32:
         0c:64:b2:f0:93:cc:a3:d0:bb:7f:4a:b9:8d:0f:39:60:df:c7:
         ba:e5:67:e2:e3:cf:35:c7:5c:80:56:44:d7:da:b7:a0:7f:76:
         e7:d4:e4:e1:35:49:03:91:89:e0:b7:dc:6b:88:30:17:9f:19:
         0b:7f:28:61:fa:a3:4b:0e:8d:76:e2:c2:49:5f:59:69:ac:30:
         98:4e:15:8b:42:66:d6:4e:11:5c:b8:10:8c:f1:9a:89:5b:14:
         96:61:2c:b0:1e:0f:3d:83:43:07:82:7a:1c:82:b4:f7:11:ff:
         1e:3a:6d:65:8a:fe:92:f1:19:17:27:9d:cd:94:92:a5:47:a1:
         1a:fa:90:bc:84:b6:69:3f:e0:ed:f3:89:32:1f:93:7a:45:11:
         d3:56:2c:a4:70:88:06:3a:d0:4e:65:2f:d6:64:00:d9:54:a5:
         7d:f7:e6:fc:86:35:7b:34:85:6f:ae:92:3b:02:82:76:ab:16:
         35:31:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:03:37 2026 by rpki-client