This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/YUvzEsTquOte1HkMWQvFhUWBjIU.roa
File:                     YUvzEsTquOte1HkMWQvFhUWBjIU.roa (raw, json)
Hash identifier:          LEjyB6sZ6DrHt6OIQfS+/vr5xSWhi30XnjsS3v5PD6Q=
Subject key identifier:   61:4B:F3:12:C4:EA:B8:EB:5E:D4:79:0C:59:0B:C5:85:45:81:8C:85
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       019B6DF7D7022ADD653B076B5E41E4D598C6
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/YUvzEsTquOte1HkMWQvFhUWBjIU.roa
Signing time:             Tue 30 Dec 2025 06:35:17 +0000
ROA not before:           Tue 30 Dec 2025 06:35:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        62.164.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6d:f7:d7:02:2a:dd:65:3b:07:6b:5e:41:e4:d5:98:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Dec 30 06:35:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=614bf312c4eab8eb5ed4790c590bc58545818c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:15:5a:13:97:06:66:c3:6b:08:13:90:67:
                    47:53:b9:f3:df:cb:eb:a9:f9:dd:31:02:fd:c7:39:
                    54:29:7e:0a:c2:4e:4e:98:94:53:0d:b5:1e:c8:a0:
                    79:07:ec:7e:e0:06:0b:a2:56:68:b1:8a:1c:69:bb:
                    34:4c:df:9a:bb:60:10:fd:95:ea:9e:a8:f1:56:13:
                    b8:7a:8e:55:f9:36:47:f2:45:73:19:15:5a:42:9e:
                    af:62:7b:0b:f8:55:d7:e9:e4:67:08:bd:af:1b:d0:
                    6e:88:4c:a9:a8:97:ea:7b:83:b0:78:b8:d6:95:5a:
                    b8:68:db:b2:29:fb:92:bb:68:9c:e8:33:a6:c5:2b:
                    5a:a2:1c:eb:74:6d:d7:1e:fb:b0:8e:47:b1:ad:d7:
                    b1:4e:8d:6a:c9:aa:06:29:61:e6:3f:c0:30:d0:c4:
                    c9:fc:15:fa:96:66:15:21:db:5b:a7:d1:74:e7:82:
                    db:bd:38:23:af:f7:7b:db:ab:9c:c6:ed:e1:a4:79:
                    bc:7d:9c:2c:6a:aa:63:f5:a2:13:bd:8f:45:0a:f3:
                    e4:36:26:3c:8f:f2:14:56:29:e7:f1:ec:7d:c4:9c:
                    17:a1:4d:88:4f:a9:44:f7:c4:19:3d:65:79:8d:0c:
                    37:53:d8:66:1c:fe:08:73:34:f9:d2:20:0e:6a:70:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:F3:12:C4:EA:B8:EB:5E:D4:79:0C:59:0B:C5:85:45:81:8C:85
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/YUvzEsTquOte1HkMWQvFhUWBjIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.164.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:00:35:71:44:e0:3a:e2:30:f7:ec:71:e5:61:0d:72:50:
         5e:26:b3:c6:c8:4b:f0:ed:0b:aa:9b:51:dc:c5:98:37:c0:9a:
         c2:2f:2a:10:d0:64:f9:ba:52:e7:53:2e:25:eb:cb:60:3b:38:
         ab:c7:88:f6:65:04:8d:19:29:e7:fa:ba:60:df:11:37:a1:d5:
         4e:48:77:6e:ff:63:88:6e:e1:da:53:86:06:bc:e5:8c:63:46:
         be:12:f0:bb:2f:43:22:3d:63:61:18:45:5d:f6:a7:01:3e:d1:
         12:fe:74:80:4c:10:39:35:7f:dd:13:88:33:07:8a:e9:a6:5c:
         21:a1:48:50:df:8a:ce:93:d4:b6:5a:29:f8:47:7e:fd:6c:03:
         68:f8:97:bf:09:27:e7:38:85:8a:69:4a:b8:77:15:3f:36:99:
         43:c4:50:71:a4:b5:1f:86:e6:09:3b:54:3c:34:a8:d9:98:5d:
         5d:8d:05:9c:f1:53:c3:a5:37:cc:a4:63:8c:2f:fe:8f:f8:ba:
         84:ea:7e:6b:4c:44:7f:75:32:ff:88:45:f4:f8:f8:d0:ce:72:
         6b:b2:c0:b3:09:4c:94:10:b3:98:af:d7:f4:3a:35:eb:7a:19:
         40:2b:c2:fe:ce:15:a5:be:63:1d:3c:d3:9a:a2:17:44:12:67:
         ce:3d:80:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZtt99cCKt1lOwdrXkHk1ZjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk
MmRkNTIwHhcNMjUxMjMwMDYzNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTRiZjMxMmM0ZWFiOGViNWVkNDc5MGM1OTBiYzU4NTQ1ODE4Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnigVWhOXBmbDawgTkGdHU7nz38vr
qfndMQL9xzlUKX4Kwk5OmJRTDbUeyKB5B+x+4AYLolZosYocabs0TN+au2AQ/ZXq
nqjxVhO4eo5V+TZH8kVzGRVaQp6vYnsL+FXX6eRnCL2vG9BuiEypqJfqe4OweLjW
lVq4aNuyKfuSu2ic6DOmxStaohzrdG3XHvuwjkexrdexTo1qyaoGKWHmP8Aw0MTJ
/BX6lmYVIdtbp9F054LbvTgjr/d726ucxu3hpHm8fZwsaqpj9aITvY9FCvPkNiY8
j/IUVinn8ex9xJwXoU2IT6lE98QZPWV5jQw3U9hmHP4IczT50iAOanBU8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFL8xLE6rjrXtR5DFkLxYVFgYyFMB8GA1UdIwQY
MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt
YWRlZDFjNDY5ZWFmLzEvWVV2ekVzVHF1T3RlMUhrTVdRdkZoVVdCaklVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm
LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPqTBMA0G
CSqGSIb3DQEBCwUAA4IBAQBTKwA1cUTgOuIw9+xx5WENclBeJrPGyEvw7Quqm1Hc
xZg3wJrCLyoQ0GT5ulLnUy4l68tgOzirx4j2ZQSNGSnn+rpg3xE3odVOSHdu/2OI
buHaU4YGvOWMY0a+EvC7L0MiPWNhGEVd9qcBPtES/nSATBA5NX/dE4gzB4rpplwh
oUhQ34rOk9S2Win4R379bANo+Je/CSfnOIWKaUq4dxU/NplDxFBxpLUfhuYJO1Q8
NKjZmF1djQWc8VPDpTfMpGOML/6P+LqE6n5rTER/dTL/iEX0+PjQznJrssCzCUyU
ELOYr9f0OjXrehlAK8L+zhWlvmMdPNOaohdEEmfOPYB+
-----END CERTIFICATE-----
Generated at Tue Dec 30 21:07:17 2025 by rpki-client