This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/yd8JpikDeAGL1RyToXLtaBhLXs0.roa
File:                     yd8JpikDeAGL1RyToXLtaBhLXs0.roa (raw, json)
Hash identifier:          WUNVyCqCAPZ5sr2QAi48VB7rmkpIF+duLJ03LhF4Vtc=
Subject key identifier:   C9:DF:09:A6:29:03:78:01:8B:D5:1C:93:A1:72:ED:68:18:4B:5E:CD
Certificate issuer:       /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial:       019B79ECAF7B027A1074AC3B1BCE4F715421
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/yd8JpikDeAGL1RyToXLtaBhLXs0.roa
Signing time:             Thu 01 Jan 2026 14:18:33 +0000
ROA not before:           Thu 01 Jan 2026 14:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202316
IP address blocks:        185.63.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:af:7b:02:7a:10:74:ac:3b:1b:ce:4f:71:54:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
        Validity
            Not Before: Jan  1 14:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c9df09a6290378018bd51c93a172ed68184b5ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:5e:dc:25:62:8a:e3:e2:a0:4e:42:7e:1d:
                    4d:0b:c2:e8:4b:27:3f:e9:db:e8:7a:b2:d2:56:bf:
                    c9:41:4c:ed:ad:75:48:d9:5f:27:92:7e:56:1a:37:
                    d1:64:e4:ca:d4:87:96:78:c7:37:da:1c:b0:8e:f8:
                    5f:8f:38:13:f6:7d:10:ca:74:ac:d7:63:37:e9:8b:
                    b4:50:fd:67:64:6e:75:a2:e4:f3:16:c3:2f:39:30:
                    8f:de:4c:bf:2f:60:46:2c:f9:98:da:e4:ae:56:e6:
                    00:18:d6:1f:5b:89:e6:3d:80:f5:47:62:de:b8:28:
                    16:24:77:be:12:4e:b3:48:22:3a:d6:7a:9f:72:e9:
                    7d:43:4a:79:6f:20:7d:59:44:85:ce:3c:43:76:46:
                    bf:64:0f:50:12:50:7c:be:b2:bb:4d:b5:5d:79:ee:
                    4d:b0:ee:b2:f2:f7:99:7d:0e:52:53:23:6a:85:84:
                    e5:05:45:c7:3d:e3:d7:f3:5d:2e:56:88:7c:d7:e0:
                    2c:60:24:ce:4e:7f:e4:5b:d2:9b:84:65:9f:f9:b1:
                    be:3e:28:2a:66:44:26:c4:4c:41:f3:1a:96:6d:5a:
                    6b:c2:76:64:15:f4:3c:df:bb:33:fe:47:a2:cb:1e:
                    09:2a:e0:69:8c:49:47:d4:2f:e1:48:99:49:d5:32:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DF:09:A6:29:03:78:01:8B:D5:1C:93:A1:72:ED:68:18:4B:5E:CD
            X509v3 Authority Key Identifier:
                keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/yd8JpikDeAGL1RyToXLtaBhLXs0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:b5:26:a2:47:bb:e2:bf:8d:ec:15:5e:b8:94:fc:6e:f9:
         df:30:71:49:7b:3f:96:a2:8a:c0:ed:55:f4:4a:fd:e1:8f:53:
         36:c3:0e:2f:62:0c:72:23:7c:53:94:f0:e2:59:c9:a0:9b:e7:
         a7:2d:8d:50:42:6f:f7:b5:92:3f:f4:9d:6b:4e:de:f7:6e:df:
         eb:b2:5b:5d:29:47:da:23:af:0b:29:2c:0f:9c:a3:3a:e9:70:
         ed:94:10:df:99:d5:75:6d:b8:5f:73:19:00:b3:e7:cc:f2:dd:
         f0:d8:0d:16:63:57:9a:2d:58:31:47:69:3e:d5:71:f3:69:21:
         ae:7d:60:f6:59:7b:56:19:a6:a3:a5:5b:14:d9:49:fb:47:43:
         8e:db:83:24:c9:71:76:24:73:63:ba:63:7c:f3:25:06:88:fc:
         e0:48:8f:91:28:a2:45:a0:95:06:fb:68:84:6b:45:ae:45:35:
         2d:3c:64:e3:6c:15:33:55:c3:eb:67:71:06:14:8a:0e:09:c9:
         b3:38:57:03:4e:52:07:d7:75:43:3d:e9:6f:33:e2:fc:12:d3:
         a5:12:ef:73:ab:54:8f:f0:80:6e:09:50:0a:ae:85:b2:f9:b0:
         af:65:77:06:a3:d9:aa:70:4e:c6:87:ce:7a:3d:9c:c7:79:f6:
         be:12:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:10:43 2026 by rpki-client