This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YXGGKG2G7hS4cwFeB6B0CtnmQCs.roa
File:                     YXGGKG2G7hS4cwFeB6B0CtnmQCs.roa (raw, json)
Hash identifier:          HiuTDab1bLOJIvviiMIQIxO1X7v1sSOnmSlN6+7+8tY=
Subject key identifier:   61:71:86:28:6D:86:EE:14:B8:73:01:5E:07:A0:74:0A:D9:E6:40:2B
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B356936294AC895823FDE04717FB69E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YXGGKG2G7hS4cwFeB6B0CtnmQCs.roa
Signing time:             Thu 01 Jan 2026 20:17:36 +0000
ROA not before:           Thu 01 Jan 2026 20:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39203
IP address blocks:        81.181.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:69:36:29:4a:c8:95:82:3f:de:04:71:7f:b6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=617186286d86ee14b873015e07a0740ad9e6402b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:d8:53:d1:6f:b4:e2:d7:7a:08:e2:dd:87:
                    09:f5:12:ea:ec:cf:33:88:a3:fb:ce:c4:bb:96:4b:
                    08:51:01:d3:e7:fc:32:30:ac:75:f3:13:6c:ad:22:
                    81:93:a2:d3:6d:25:b6:a8:8d:c5:60:a5:0b:69:cb:
                    ab:05:7e:32:e7:46:67:8e:55:03:32:e9:8d:ac:58:
                    98:6a:e6:2e:a6:91:33:65:64:58:4a:25:13:30:3c:
                    d0:46:11:f3:db:8b:e1:10:ac:44:e1:65:dc:99:29:
                    f3:f6:80:1b:87:e0:25:cc:bc:14:76:c1:40:42:77:
                    74:c0:9e:be:4a:24:6e:4b:9a:a5:55:1a:74:24:a9:
                    9a:f9:ec:3a:a7:f4:3f:ff:d8:f9:09:43:f6:bd:b9:
                    dd:3c:ba:15:da:b4:8d:c8:6c:bc:f3:db:df:2d:b3:
                    37:bc:f8:07:c2:8e:a3:2b:5a:31:51:f2:68:95:d6:
                    7c:3f:70:75:c9:f4:67:db:09:89:7e:ce:a5:f3:82:
                    54:37:0d:77:09:d1:29:ed:f7:15:1b:84:ef:35:57:
                    a7:42:82:9a:2b:54:30:c5:22:db:61:de:cb:ad:7c:
                    6a:e1:71:ca:f0:42:28:e2:30:42:5a:7b:05:96:8d:
                    08:7a:cb:52:64:6b:ff:6f:7d:b3:a0:05:e4:dc:d5:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:71:86:28:6D:86:EE:14:B8:73:01:5E:07:A0:74:0A:D9:E6:40:2B
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YXGGKG2G7hS4cwFeB6B0CtnmQCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:07:7e:1b:22:4b:12:dd:30:62:5e:db:ae:4e:18:b8:69:5e:
         ac:d8:dd:0a:56:f9:93:68:08:6f:7f:bd:2d:e6:5b:08:6f:2a:
         ce:25:08:3f:20:27:28:34:a3:99:55:62:24:e1:f2:46:57:58:
         ae:d2:a5:59:0c:a6:09:a0:6a:2f:61:0f:6a:e9:6c:26:d0:d9:
         89:f9:9a:a4:e9:f8:b4:a3:1b:45:05:fe:a7:06:5e:6e:b6:5d:
         f6:bf:f2:0b:0e:3f:d0:1f:59:9d:b9:49:a9:30:f9:23:ef:44:
         e2:f5:6b:bc:ab:f9:b2:b3:30:55:77:d6:e5:57:dd:a3:f6:41:
         ef:f4:37:02:99:a9:07:79:9e:7c:7c:f0:91:a6:1e:c8:61:87:
         bb:68:53:95:24:28:89:3e:b3:e6:1a:11:32:d9:59:a9:32:19:
         85:13:79:fc:4a:bf:42:18:7c:af:84:2a:c4:09:51:5d:07:21:
         86:86:fe:41:73:b7:bf:07:70:04:09:e8:07:69:78:1e:53:7c:
         db:82:28:93:20:a9:e0:9b:72:3f:b0:40:8e:d3:2a:5c:d4:d0:
         1e:91:ef:db:6e:5a:ce:3e:ac:28:86:e3:72:d3:60:d6:40:f2:
         66:97:a2:07:8e:e4:71:29:25:c6:7c:ca:5e:f1:48:b8:99:7f:
         30:df:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:19 2026 by rpki-client