This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/wYpHa59YPrwp7w7D2dTnVQglgA8.roa
File:                     wYpHa59YPrwp7w7D2dTnVQglgA8.roa (raw, json)
Hash identifier:          BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=
Subject key identifier:   C1:8A:47:6B:9F:58:3E:BC:29:EF:0E:C3:D9:D4:E7:55:08:25:80:0F
Certificate issuer:       /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial:       019B7C7FDDAFAC73D34A7DCAC68F67E66BFC
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/wYpHa59YPrwp7w7D2dTnVQglgA8.roa
Signing time:             Fri 02 Jan 2026 02:18:33 +0000
ROA not before:           Fri 02 Jan 2026 02:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48314
IP address blocks:        185.135.55.0/24 maxlen: 24
                          2a02:faa0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:dd:af:ac:73:d3:4a:7d:ca:c6:8f:67:e6:6b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
        Validity
            Not Before: Jan  2 02:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c18a476b9f583ebc29ef0ec3d9d4e7550825800f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:0f:8a:87:79:01:ac:fc:68:6a:3b:33:f6:
                    4c:38:58:34:95:af:29:fb:05:9b:0d:27:08:e6:25:
                    0b:9b:f5:1b:3f:f3:d9:19:39:b5:a4:2d:39:70:da:
                    9b:9b:fc:57:96:88:7f:f8:38:f7:7a:1f:9e:0b:5b:
                    e6:b3:3d:aa:c1:21:99:f3:28:a4:95:a9:29:2e:1f:
                    f1:5c:94:dc:2f:51:98:72:4c:e1:bc:b2:52:4d:3d:
                    87:f0:3e:f7:50:73:bf:21:7a:29:ba:5c:7e:20:eb:
                    13:07:ed:22:0e:fa:e4:0b:23:75:33:18:d3:a1:47:
                    63:aa:37:86:f4:ce:39:2a:c5:b0:bb:94:44:ca:d1:
                    41:f3:4e:69:0e:9d:a0:2f:b3:02:e4:39:2f:0c:8a:
                    54:a1:43:bb:76:c8:a8:fd:02:a4:96:fd:cf:cc:7a:
                    7a:ac:ae:9e:16:a1:24:19:ff:2e:ae:0d:aa:bc:73:
                    54:ea:87:37:c3:74:83:09:a6:a5:d9:fc:d9:5f:83:
                    c7:5a:6c:a3:46:aa:28:7f:df:ad:be:1b:55:f5:2d:
                    2d:ef:a6:ca:ac:e3:36:2e:7b:be:4c:51:09:9d:5d:
                    d1:af:57:df:b3:51:e3:34:b3:b4:c5:c4:9a:ff:9c:
                    4b:11:7e:99:8e:e2:62:5e:17:03:84:96:b4:f3:bb:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8A:47:6B:9F:58:3E:BC:29:EF:0E:C3:D9:D4:E7:55:08:25:80:0F
            X509v3 Authority Key Identifier:
                keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/wYpHa59YPrwp7w7D2dTnVQglgA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.55.0/24
                IPv6:
                  2a02:faa0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:79:af:24:99:0a:f1:3f:da:6f:ee:a1:20:27:3b:7f:3e:
         99:21:3f:3e:bb:17:5d:a1:a3:6a:a3:ac:92:03:58:33:38:f4:
         71:69:d1:a4:df:d0:c2:1a:64:8c:99:01:82:ed:db:22:ef:48:
         b1:d9:7c:66:b7:72:4e:7b:1f:03:5c:a1:41:d2:25:68:83:b6:
         46:4d:88:12:34:4f:85:25:78:6f:4b:38:5f:df:58:f3:34:f8:
         e5:5c:a5:93:ce:2e:20:16:49:3a:f1:72:3e:b4:9f:e7:5e:95:
         e2:37:2c:9d:78:76:e2:ce:a6:85:46:ee:62:63:b6:4c:4d:30:
         13:3d:6a:72:3f:00:c6:d1:b6:68:9d:32:bf:12:70:40:9d:45:
         10:3e:dd:72:7e:8d:a1:44:ea:01:c5:b7:c3:9d:ff:2b:06:32:
         ee:99:0f:50:19:41:42:f4:d9:8f:6a:b8:38:2e:ca:e6:ad:27:
         59:82:54:3e:aa:9e:a6:59:ee:db:9c:50:2e:a0:a2:24:49:74:
         4c:69:34:0e:66:f1:0b:dd:fd:4f:e9:b0:13:46:9c:6a:88:a6:
         bd:17:60:51:6d:1d:02:4d:80:d5:45:00:7e:81:45:ce:d3:ee:
         65:42:3c:01:94:ce:1e:11:07:de:48:34:f9:76:19:3d:69:54:
         dc:80:55:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:19:49 2026 by rpki-client