This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/yBnLRClcv26kHH0-yKrXDUB9VTc.roa
File:                     yBnLRClcv26kHH0-yKrXDUB9VTc.roa (raw, json)
Hash identifier:          vu1Hy7SJ+dyZJB5g313VHsOIWbGRndTFlRGMCT7xmOQ=
Subject key identifier:   C8:19:CB:44:29:5C:BF:6E:A4:1C:7D:3E:C8:AA:D7:0D:40:7D:55:37
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       019C5BCA57C74EF7F20C421FF0B5E16927FB
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/yBnLRClcv26kHH0-yKrXDUB9VTc.roa
Signing time:             Sat 14 Feb 2026 10:55:12 +0000
ROA not before:           Sat 14 Feb 2026 10:55:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        45.11.190.0/24 maxlen: 24
                          45.11.191.0/24 maxlen: 24
                          188.209.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:5b:ca:57:c7:4e:f7:f2:0c:42:1f:f0:b5:e1:69:27:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Feb 14 10:55:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c819cb44295cbf6ea41c7d3ec8aad70d407d5537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:65:4b:ce:54:d0:87:0e:48:a4:d1:72:9f:72:
                    89:74:99:7b:c9:c8:33:a1:da:2e:01:65:c7:ea:f6:
                    1b:58:97:3c:ed:d3:76:1d:7d:c4:c3:53:e5:82:eb:
                    b6:b8:bc:4e:51:14:a4:31:7b:7a:27:d3:0f:fb:df:
                    cb:37:b9:22:a7:87:c2:d0:79:86:60:7f:c2:c8:69:
                    9f:db:ad:7f:0e:63:76:bd:90:31:d0:47:1c:4d:b7:
                    de:5d:e2:05:e3:91:de:f7:ef:8d:f9:1f:9f:0e:fc:
                    57:ad:32:7c:e2:2e:40:f8:68:98:ac:7f:ea:25:a6:
                    4e:ce:ab:d9:53:2b:9a:ad:79:83:6a:ed:29:55:a4:
                    60:e4:ea:89:50:49:cf:ae:77:95:0d:5e:60:3d:26:
                    77:e1:74:70:02:22:ff:05:b2:66:a3:0b:81:89:6e:
                    df:3f:db:e2:32:90:80:bb:73:4c:99:5e:1a:94:04:
                    6c:92:82:20:ad:1a:9a:23:a4:ff:c8:b0:2b:a1:d3:
                    93:91:f4:b4:ae:9d:de:84:67:47:54:de:d0:fd:85:
                    a3:48:35:03:bc:c1:f0:78:0a:55:b4:01:86:90:2c:
                    64:68:09:4c:75:44:da:f0:4a:12:18:b5:d3:dd:ce:
                    32:19:fb:82:7f:7c:e7:eb:f6:c4:c6:34:0d:4a:de:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:19:CB:44:29:5C:BF:6E:A4:1C:7D:3E:C8:AA:D7:0D:40:7D:55:37
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/yBnLRClcv26kHH0-yKrXDUB9VTc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.190.0/23
                  188.209.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:76:94:71:06:8b:56:67:fe:5a:a9:69:07:eb:6c:bb:d0:41:
         18:e2:b6:d4:de:34:e5:e1:b2:b6:cf:f2:40:ff:b0:1f:38:08:
         99:37:a7:98:56:0b:ce:64:71:55:ba:6e:35:f9:31:06:27:2e:
         57:b5:ab:36:b8:1c:ec:b6:86:76:3d:be:f7:a5:41:c8:52:54:
         c5:93:b1:40:1a:e8:59:88:c1:ed:1c:c5:9c:80:97:2f:c3:61:
         66:b8:d6:13:4d:a4:4a:ab:a4:5f:24:03:23:17:66:8e:d5:b5:
         76:5a:05:ae:62:85:9a:81:ee:8d:b7:c9:5d:77:4e:75:1f:e5:
         2e:99:79:e1:bf:0c:8b:f6:35:d3:92:bd:ed:3d:b9:10:60:1f:
         9a:80:f5:36:aa:70:cb:89:bc:f7:05:0e:fc:41:74:56:55:8d:
         a3:f7:a0:e2:39:8d:1e:77:05:db:8a:d0:c5:81:25:53:61:33:
         4b:b3:9b:29:c5:16:8c:aa:70:f4:cd:90:e8:c8:f0:43:60:cb:
         d2:f7:49:ce:5e:ba:5a:26:0d:77:6c:9e:21:17:a7:48:51:6b:
         e7:fe:b4:0a:11:10:e1:99:1f:f8:4c:86:f4:d9:68:62:36:5a:
         a3:b5:ed:10:64:e9:7f:33:0b:77:26:7c:b3:c8:8f:dd:4c:e9:
         a9:9c:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:25:16 2026 by rpki-client