This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/RyTAXO0kucVJKzc8XJ__L9yOiUA.roa
File:                     RyTAXO0kucVJKzc8XJ__L9yOiUA.roa (raw, json)
Hash identifier:          XRsDlSNxnX2HTPHcD0o1CksNeN89d3dz50kkMUn9wcQ=
Subject key identifier:   47:24:C0:5C:ED:24:B9:C5:49:2B:37:3C:5C:9F:FF:2F:DC:8E:89:40
Certificate issuer:       /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial:       019B7F83268E118CCF061EBC194006A2BD5C
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/RyTAXO0kucVJKzc8XJ__L9yOiUA.roa
Signing time:             Fri 02 Jan 2026 16:21:00 +0000
ROA not before:           Fri 02 Jan 2026 16:21:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59974
IP address blocks:        185.69.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:26:8e:11:8c:cf:06:1e:bc:19:40:06:a2:bd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
        Validity
            Not Before: Jan  2 16:21:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4724c05ced24b9c5492b373c5c9fff2fdc8e8940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:1a:d3:ec:c4:11:08:a5:0b:fb:05:14:68:
                    79:f2:c3:c4:5d:10:38:31:87:c4:b6:86:3b:a3:5a:
                    24:81:b2:bd:af:29:db:5f:65:61:d7:30:96:1a:33:
                    95:a3:06:02:e3:cd:8b:22:c8:30:7a:9e:8a:82:eb:
                    d2:79:10:c0:8f:c0:3e:52:c3:a6:ff:8d:d5:29:9b:
                    ab:98:08:f2:c9:a7:06:2e:c7:6a:fa:56:50:23:0c:
                    83:2b:15:9e:ae:a5:b4:ce:3f:82:84:dc:83:93:78:
                    20:13:28:66:53:df:32:45:2a:98:5b:2b:7b:a2:4f:
                    9b:96:b2:ab:26:fa:01:25:b6:6a:21:f3:25:65:7a:
                    98:0c:56:71:a5:b5:90:09:33:11:6e:cb:75:5b:72:
                    a3:d2:74:fd:98:e3:24:7b:39:c9:34:3b:ff:1d:94:
                    22:de:19:0c:42:2a:8e:9f:2b:31:95:06:fb:ba:83:
                    71:12:8f:bd:a2:8b:45:9c:19:2b:bf:87:4a:65:37:
                    6a:a5:44:e3:28:e3:b9:06:8a:67:bb:31:ea:84:7f:
                    43:a9:6f:cb:74:c9:fa:83:8b:65:cb:39:2d:d1:77:
                    c1:1f:e4:da:27:8f:a1:dd:04:de:31:38:c3:97:34:
                    47:dd:52:62:fc:4a:47:5f:db:6c:08:78:6b:07:3b:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:24:C0:5C:ED:24:B9:C5:49:2B:37:3C:5C:9F:FF:2F:DC:8E:89:40
            X509v3 Authority Key Identifier:
                keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/RyTAXO0kucVJKzc8XJ__L9yOiUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:f9:e5:8b:9c:6a:7c:14:4c:44:db:74:4e:3b:ab:21:88:
         76:a9:f7:a1:e1:71:ac:fb:b9:8c:c2:30:a8:a7:ed:b1:04:73:
         62:e4:6d:9e:69:1b:bd:20:56:be:03:83:a0:4f:33:89:9d:02:
         3c:99:63:d2:fd:61:b4:37:9b:75:35:66:ae:e4:c0:b7:b6:83:
         f1:05:d9:48:35:1a:90:18:1c:f0:93:bf:b1:6d:56:47:a7:89:
         fc:55:eb:f3:d7:f1:d5:f7:1f:8b:dd:3f:30:b9:7c:b3:fb:02:
         a6:91:4e:ed:13:cc:ab:37:0a:6d:a5:d7:44:b6:cd:d0:60:46:
         85:cb:29:0a:b0:b3:05:ca:40:fb:1d:40:12:d0:a2:70:42:10:
         98:2f:27:a4:b8:a5:af:59:1c:76:bb:01:13:19:4b:46:d0:03:
         20:7c:19:3f:69:ed:e5:70:72:12:a4:28:2d:83:64:e4:f5:7d:
         9e:25:e4:78:aa:7e:44:7a:21:fc:b1:d1:d6:28:51:35:92:5f:
         ae:e4:f1:8f:6b:d1:f2:a0:ea:f5:a4:a8:0c:e6:c5:27:a3:03:
         3e:5b:df:e5:66:0e:ad:76:e0:f6:ea:26:cc:09:3b:18:02:a7:
         fc:ec:ee:b1:ca:b0:e4:5f:4c:2b:16:58:68:7c:91:bf:90:6d:
         47:32:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:21:01 2026 by rpki-client