This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa
File:                     bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (raw, json)
Hash identifier:          0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=
Subject key identifier:   6D:83:F0:6F:41:01:F9:94:3E:F1:8E:BC:E0:64:A1:3D:68:F2:D4:79
Certificate issuer:       /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial:       019B77C6BC5A3AFAFB48AB7256E9F9745036
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa
Signing time:             Thu 01 Jan 2026 04:17:51 +0000
ROA not before:           Thu 01 Jan 2026 04:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57043
IP address blocks:        92.60.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:bc:5a:3a:fa:fb:48:ab:72:56:e9:f9:74:50:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
        Validity
            Not Before: Jan  1 04:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d83f06f4101f9943ef18ebce064a13d68f2d479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:96:e3:92:f4:f3:87:7b:31:f9:d2:6d:20:
                    b4:f2:ce:58:4f:1a:53:5c:e9:b4:fd:68:51:ba:7b:
                    f5:82:2b:19:12:db:30:16:cb:23:8e:24:c7:37:6c:
                    97:8b:89:6c:76:62:fd:4c:92:0e:76:86:d8:ac:a6:
                    b8:f4:94:7a:23:15:c4:59:76:ee:76:9b:ec:c0:97:
                    5b:6a:6c:93:a8:0c:d7:e7:a3:3a:84:f7:37:6b:48:
                    7f:55:71:a2:1f:1c:bb:d3:9b:41:e8:5d:d0:b2:c8:
                    a6:ff:db:ca:78:f9:10:f3:af:6b:66:67:2b:22:2e:
                    dc:76:ac:a8:ff:25:05:cb:49:fc:de:5f:12:43:7a:
                    5e:c3:e7:0c:c5:c1:b2:14:02:59:33:c4:e9:47:60:
                    a3:b2:2f:ce:e5:a4:11:03:84:55:02:98:27:4d:3b:
                    71:90:fa:a6:88:95:a3:54:68:ff:24:d8:95:96:83:
                    3c:5c:46:3d:c1:7b:6a:8d:cc:37:e0:35:d7:6c:c3:
                    35:25:25:48:e4:79:99:e4:00:2e:bc:88:88:cd:87:
                    84:a0:97:00:83:ac:21:45:0e:e7:cb:4e:66:3d:ca:
                    f0:50:e4:de:2f:cd:f1:b7:12:b8:cd:fc:bd:02:68:
                    8c:ba:94:4c:4c:70:6c:16:f8:fc:b4:f1:e6:ed:26:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:83:F0:6F:41:01:F9:94:3E:F1:8E:BC:E0:64:A1:3D:68:F2:D4:79
            X509v3 Authority Key Identifier:
                keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.60.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:a2:24:82:e3:eb:07:1e:57:a1:36:25:9d:f5:6c:01:95:bc:
         f7:73:4c:74:59:bd:65:6a:f2:fa:91:3d:94:99:33:f0:83:8b:
         1f:e7:16:21:c1:a6:c3:66:2b:7f:06:f0:8d:13:6f:2a:11:84:
         6c:66:71:09:d1:c0:f8:23:cb:84:b9:fc:25:15:c7:da:0a:be:
         26:fb:f2:30:ce:a9:31:9f:30:7f:2a:5f:41:95:b9:6a:26:73:
         6f:1a:a5:47:dc:51:59:a6:1a:92:a4:bd:aa:8a:33:a1:90:fd:
         34:44:a6:9e:a6:d3:46:b0:a3:b9:94:ef:b0:cc:f5:97:68:4e:
         0d:c9:59:7d:2a:c7:a4:70:4b:88:b3:d7:21:b6:be:86:25:71:
         34:bd:ad:1d:c4:31:1b:59:74:6e:ec:3e:0b:aa:9e:75:5d:76:
         db:1c:aa:5c:8b:9d:bf:74:54:c9:d1:e9:1a:cb:12:51:57:2c:
         89:f8:ce:2b:61:52:0b:3f:64:7d:f6:f0:fb:fe:2a:0b:2a:07:
         71:96:f8:10:84:b8:c8:8f:27:0b:41:96:18:7e:f8:d9:66:b0:
         dd:e0:12:18:5f:20:c3:ab:e1:87:8b:8e:e1:70:33:79:20:45:
         1e:0a:ab:f2:75:d8:c5:29:b3:18:56:61:9a:1d:7a:dd:3d:a5:
         8c:56:86:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xrxaOvr7SKtyVun5dFA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk
M2JmMTEwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDgzZjA2ZjQxMDFmOTk0M2VmMThlYmNlMDY0YTEzZDY4ZjJkNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RWW45L084d7MfnSbSC08s5YTxpT
XOm0/WhRunv1gisZEtswFssjjiTHN2yXi4lsdmL9TJIOdobYrKa49JR6IxXEWXbu
dpvswJdbamyTqAzX56M6hPc3a0h/VXGiHxy705tB6F3Qssim/9vKePkQ869rZmcr
Ii7cdqyo/yUFy0n83l8SQ3pew+cMxcGyFAJZM8TpR2Cjsi/O5aQRA4RVApgnTTtx
kPqmiJWjVGj/JNiVloM8XEY9wXtqjcw34DXXbMM1JSVI5HmZ5AAuvIiIzYeEoJcA
g6whRQ7ny05mPcrwUOTeL83xtxK4zfy9AmiMupRMTHBsFvj8tPHm7SZwlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG2D8G9BAfmUPvGOvOBkoT1o8tR5MB8GA1UdIwQY
MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt
MmJhZGNlNDY2ODUzLzEvYllQd2IwRUItWlEtOFk2ODRHU2hQV2p5MUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz
LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDxOMA0G
CSqGSIb3DQEBCwUAA4IBAQAuoiSC4+sHHlehNiWd9WwBlbz3c0x0Wb1lavL6kT2U
mTPwg4sf5xYhwabDZit/BvCNE28qEYRsZnEJ0cD4I8uEufwlFcfaCr4m+/Iwzqkx
nzB/Kl9BlblqJnNvGqVH3FFZphqSpL2qijOhkP00RKaeptNGsKO5lO+wzPWXaE4N
yVl9KsekcEuIs9chtr6GJXE0va0dxDEbWXRu7D4Lqp51XXbbHKpci52/dFTJ0eka
yxJRVyyJ+M4rYVILP2R99vD7/ioLKgdxlvgQhLjIjycLQZYYfvjZZrDd4BIYXyDD
q+GHi47hcDN5IEUeCqvyddjFKbMYVmGaHXrdPaWMVob7
-----END CERTIFICATE-----
Generated at Fri Jan 23 15:21:46 2026 by rpki-client