This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa
File:                     wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (raw, json)
Hash identifier:          G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=
Subject key identifier:   C3:2E:B2:6C:27:5C:59:E7:40:8B:83:2D:DE:2C:40:03:B3:D2:E5:AD
Certificate issuer:       /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial:       019B79ED41768FEFE0B4C3C7E536F914C8E7
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa
Signing time:             Thu 01 Jan 2026 14:19:10 +0000
ROA not before:           Thu 01 Jan 2026 14:19:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200678
IP address blocks:        185.247.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:41:76:8f:ef:e0:b4:c3:c7:e5:36:f9:14:c8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
        Validity
            Not Before: Jan  1 14:19:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c32eb26c275c59e7408b832dde2c4003b3d2e5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:08:05:3c:cb:09:2d:4c:cc:0b:f2:29:db:
                    46:c5:8b:87:64:f5:46:bc:a6:e5:cd:7b:c4:a6:57:
                    5d:e4:cc:9e:cd:73:8a:27:27:c0:cc:e3:fe:e0:41:
                    96:2a:34:33:79:7a:b3:fa:fe:97:00:27:a2:d2:51:
                    d1:7a:11:6c:2c:80:f8:5e:53:ff:bf:d7:e1:80:58:
                    99:c4:d7:bd:98:d9:7e:92:c4:08:7f:f3:9b:b3:75:
                    92:bd:4f:88:18:44:30:3a:55:60:2d:a2:20:44:1c:
                    55:ef:26:18:9d:ce:4b:46:29:8e:16:1b:7d:76:a6:
                    6a:7c:98:e9:ca:33:2f:08:cf:9e:ab:93:ea:6d:38:
                    81:d9:e4:c9:30:57:6c:92:b6:a1:46:23:ae:a9:ef:
                    6c:58:ea:70:0f:c4:2c:40:9f:26:53:3e:2c:dd:86:
                    ff:8b:e4:e7:ce:51:e5:c0:b7:5b:56:ff:34:b2:48:
                    a8:57:8b:fb:c0:82:08:2a:b1:ee:84:7d:67:b6:9c:
                    4a:97:4c:4b:a7:86:f3:c9:90:7c:34:b1:fe:bf:cc:
                    d9:4a:ec:c7:49:59:ce:4d:17:b0:c0:9a:6a:32:b7:
                    b4:dd:6d:dc:00:73:f2:e6:02:1a:b2:9f:de:8b:fc:
                    51:4c:c8:13:cb:48:31:9e:3c:0f:62:32:a8:bc:cc:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2E:B2:6C:27:5C:59:E7:40:8B:83:2D:DE:2C:40:03:B3:D2:E5:AD
            X509v3 Authority Key Identifier:
                keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.247.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         df:64:bc:f6:42:d4:a0:82:8e:f4:50:7c:09:ae:cb:0e:46:47:
         c3:bf:28:34:1f:f5:64:8c:a2:a3:e7:10:d4:50:7d:fa:4a:2e:
         aa:bc:b3:eb:b2:e9:24:f8:c0:0d:5b:07:ec:03:c0:0b:07:82:
         cc:13:d4:db:3c:ad:c3:3b:20:5e:20:fe:04:6a:d1:39:f3:8d:
         35:83:83:69:31:9c:84:61:ac:a1:5a:71:31:65:3e:3d:1c:98:
         e6:0f:f1:5b:52:d8:89:8b:c7:04:49:5b:ac:4c:f9:fc:da:e8:
         50:05:a9:0a:15:43:4b:f9:1e:56:97:a7:9c:2d:a0:88:ca:9e:
         a9:b9:09:eb:8d:be:87:f5:0b:8c:2b:c7:c7:e6:48:8a:37:3c:
         0a:fb:be:f6:00:55:45:84:99:4f:ab:06:cf:7c:62:46:09:15:
         f8:ad:a2:46:6d:20:81:ac:45:b8:77:aa:44:8b:9e:63:62:9b:
         0b:f2:0b:52:7a:8f:f2:c4:49:69:22:11:ae:e6:3d:20:49:84:
         97:37:1a:eb:aa:31:a5:5b:aa:29:09:ec:57:e0:0d:b5:df:5b:
         93:52:e3:cd:b6:8c:1a:8b:e3:21:06:77:9e:97:88:a6:a4:e6:
         37:44:1a:a6:ee:ee:4b:06:a7:ae:fc:00:46:da:e6:3c:ad:6a:
         44:9d:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:36:16 2026 by rpki-client