This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/_Yb8JcsvPd5H288TFLWZS-_6c4c.roa
File:                     _Yb8JcsvPd5H288TFLWZS-_6c4c.roa (raw, json)
Hash identifier:          2sMxss7BEP8Ir/J7oOQyWTF2Jp8rk3pLE/ynTqG7PTo=
Subject key identifier:   FD:86:FC:25:CB:2F:3D:DE:47:DB:CF:13:14:B5:99:4B:EF:FA:73:87
Certificate issuer:       /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial:       019B7D5C89831E84DAB7FF2C937BC0196E59
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/_Yb8JcsvPd5H288TFLWZS-_6c4c.roa
Signing time:             Fri 02 Jan 2026 06:19:35 +0000
ROA not before:           Fri 02 Jan 2026 06:19:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200798
IP address blocks:        185.95.208.0/22 maxlen: 24
                          2a05:fc00::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:89:83:1e:84:da:b7:ff:2c:93:7b:c0:19:6e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
        Validity
            Not Before: Jan  2 06:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd86fc25cb2f3dde47dbcf1314b5994beffa7387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:66:76:f1:0c:2e:1f:bf:21:18:c3:c6:51:
                    8e:4c:49:a8:c4:e8:3f:83:e4:0e:00:9b:85:48:1d:
                    8f:ab:d4:dc:22:a0:15:5b:50:3d:b6:c2:2a:93:b6:
                    f8:58:af:2b:c4:16:83:9c:10:7d:b4:02:b9:5b:3f:
                    a1:02:ca:a5:ba:be:70:6d:2a:7a:99:42:60:67:ca:
                    5f:b3:ce:72:bd:c2:a7:28:6b:c5:73:5c:54:4d:83:
                    15:18:db:71:0e:8c:3e:c3:22:13:e1:15:8d:d7:58:
                    35:6c:4a:bd:af:0a:ff:f4:cb:37:79:98:9d:36:a2:
                    47:66:ad:be:e9:54:1b:ca:2f:35:53:7a:86:8b:2a:
                    a2:8c:b2:d3:b5:e0:24:fb:3e:95:87:3a:a5:d4:4e:
                    ad:02:f0:92:69:33:e5:39:76:87:1b:09:06:9b:0d:
                    1e:ef:cb:1c:b5:12:27:54:d4:9d:2f:bc:b9:97:45:
                    cc:6a:7d:fe:34:d2:c8:87:58:20:ae:3b:74:ed:95:
                    f2:ec:a3:9f:03:26:bb:cd:32:97:3f:e1:4b:e8:f9:
                    62:bb:03:46:77:16:b4:68:36:06:af:89:78:57:8b:
                    2d:6c:29:21:b6:af:10:92:c1:0e:ec:77:01:f6:22:
                    4e:d8:a9:2f:e5:e5:9a:7e:95:11:02:33:f9:70:1f:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:86:FC:25:CB:2F:3D:DE:47:DB:CF:13:14:B5:99:4B:EF:FA:73:87
            X509v3 Authority Key Identifier:
                keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/_Yb8JcsvPd5H288TFLWZS-_6c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.95.208.0/22
                IPv6:
                  2a05:fc00::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:71:6e:83:22:56:6b:34:e7:59:fa:99:68:0d:9e:ac:cc:00:
         02:78:78:29:7c:82:82:8b:2c:46:45:c8:78:92:df:c4:5a:f2:
         a8:15:e0:53:29:1d:be:7f:9b:79:f0:5a:07:5b:60:b4:96:57:
         68:9e:02:82:6b:bb:15:fe:e5:58:1b:fd:58:86:02:f7:0d:3a:
         65:e7:44:26:7a:4f:bb:f4:6a:2b:a7:a5:d6:b2:c2:29:db:65:
         34:46:0d:38:eb:c4:73:a1:5c:67:a9:90:3c:52:7a:8d:c7:e2:
         71:04:ed:5b:d4:ee:50:9e:99:6a:b6:22:9c:40:ce:39:e9:0f:
         49:20:15:89:4e:85:07:91:5b:2c:a7:87:ed:5e:96:ca:89:9a:
         b2:a7:13:ed:8a:0d:1c:70:ac:50:c7:6d:fd:ad:2b:47:f4:18:
         b7:f1:84:b5:29:92:93:c2:60:6e:40:7c:0e:85:40:24:fb:d9:
         f8:ce:dd:9b:6b:c3:bc:68:c0:c2:a0:fc:e6:f0:52:53:93:4e:
         72:23:41:e7:5a:fd:12:93:16:ff:df:b7:1d:18:94:da:e5:89:
         5e:0a:22:fe:4c:ed:5b:8b:f9:7c:6a:7e:ab:ca:03:c0:36:62:
         f0:ce:20:08:c9:41:da:79:c7:af:f0:d5:c4:f5:14:ce:59:9a:
         7a:b7:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:09 2026 by rpki-client