This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/Ywo7Rnb2PIY1a7ANezmWJLF5QL0.roa
File:                     Ywo7Rnb2PIY1a7ANezmWJLF5QL0.roa (raw, json)
Hash identifier:          SCSIsdEZbyMjuC8DKEAv4wcXnrW/bCbmZfUciq6h+z4=
Subject key identifier:   63:0A:3B:46:76:F6:3C:86:35:6B:B0:0D:7B:39:96:24:B1:79:40:BD
Certificate issuer:       /CN=147341d30575144be32cd7c8e3ebd4c6329a3141
Certificate serial:       019B7DCB611D82600E6D065A339BA284F282
Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/Ywo7Rnb2PIY1a7ANezmWJLF5QL0.roa
Signing time:             Fri 02 Jan 2026 08:20:39 +0000
ROA not before:           Fri 02 Jan 2026 08:20:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203434
IP address blocks:        45.66.232.0/22 maxlen: 24
                          185.134.164.0/22 maxlen: 24
                          2a00:b0a0::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:61:1d:82:60:0e:6d:06:5a:33:9b:a2:84:f2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141
        Validity
            Not Before: Jan  2 08:20:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=630a3b4676f63c86356bb00d7b399624b17940bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:5e:1d:fe:3d:a2:99:96:f4:4b:d2:25:e9:
                    7e:3c:a5:f4:c3:13:44:ae:ee:e6:c1:ab:2a:08:33:
                    d6:b8:e0:73:4e:65:30:e4:cc:ce:36:8f:9e:c0:d7:
                    cc:41:08:b5:26:c5:39:58:27:4f:8d:db:d0:9f:61:
                    f5:5c:6b:36:71:a3:86:93:79:7d:e3:04:66:bb:4f:
                    2e:0a:f8:50:65:b3:8f:a4:0f:e2:e3:e2:c4:87:ad:
                    e7:b5:6d:1c:30:63:dc:fa:81:29:2e:ac:8e:a6:40:
                    42:e4:9d:6a:bd:7b:89:2f:83:97:b9:67:80:6c:c3:
                    77:ab:78:79:ad:ce:a0:a0:d1:61:48:4f:76:8a:4f:
                    a8:a3:93:c4:72:0e:4e:ed:f8:dc:5b:b9:83:86:01:
                    ae:24:2c:50:d2:65:c1:07:e1:ab:a1:75:7b:24:9e:
                    1a:2d:fc:d8:1a:4b:b3:9a:95:28:29:37:5e:b2:4b:
                    4d:45:78:ed:ce:2d:72:fd:92:34:5f:b2:1c:1f:bf:
                    fc:28:44:07:16:6d:ab:79:2d:bd:af:db:17:92:c9:
                    3d:10:68:bd:7c:a5:17:46:e0:2f:ff:34:6c:38:08:
                    b5:42:0f:f1:db:09:66:e8:e0:94:e4:66:5b:66:00:
                    27:44:11:6e:15:89:b6:78:4a:21:6d:55:a6:60:5a:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0A:3B:46:76:F6:3C:86:35:6B:B0:0D:7B:39:96:24:B1:79:40:BD
            X509v3 Authority Key Identifier:
                keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/Ywo7Rnb2PIY1a7ANezmWJLF5QL0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.232.0/22
                  185.134.164.0/22
                IPv6:
                  2a00:b0a0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:66:1a:87:54:a7:ae:7a:88:73:09:c9:d6:8e:bb:a3:17:c1:
         34:16:3f:59:d6:c2:94:eb:b0:18:49:3d:5f:c2:40:ab:b4:fa:
         94:fc:69:43:00:23:e0:8f:b3:77:f4:e6:91:b5:55:52:79:7b:
         53:f2:29:05:e0:9e:bd:5f:5f:9d:9f:80:5d:ed:0f:f0:54:20:
         32:60:ea:81:81:1e:1d:2d:05:96:ac:82:40:88:2b:86:97:4b:
         ce:a4:b2:9a:64:b7:40:1c:1a:07:da:0c:c7:53:73:2d:34:32:
         54:32:82:bb:ec:69:fb:13:35:b6:bc:6b:c4:d3:f0:89:25:34:
         a0:d0:df:b3:82:64:56:0b:89:48:bc:8f:6e:41:0a:7c:d0:f7:
         87:8d:06:6f:cb:91:5b:8e:a3:fc:ef:ba:57:af:34:73:bf:b3:
         08:b4:43:ab:35:81:8a:4c:a7:fb:0d:a6:0c:7d:c3:a5:47:aa:
         f4:26:49:f7:71:c2:d2:8e:ae:1e:98:17:65:fd:63:bb:ee:34:
         f6:75:9a:a7:69:7c:54:bb:23:4a:eb:ae:21:3d:77:20:ed:e4:
         1e:28:6b:7d:10:83:1c:36:8c:f3:8c:fd:ef:f0:2b:4b:f4:5c:
         af:07:21:0e:60:2b:9f:8a:87:c5:a5:69:95:68:6d:de:2a:56:
         51:53:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:24 2026 by rpki-client