This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/YUxchUW6QgVYqToISCVzQtOWeD8.roa
File:                     YUxchUW6QgVYqToISCVzQtOWeD8.roa (raw, json)
Hash identifier:          LnJEQH41x4xf9Uu9Xwd+T7MDgkvoJpJ00JMm+wgyfh4=
Subject key identifier:   61:4C:5C:85:45:BA:42:05:58:A9:3A:08:48:25:73:42:D3:96:78:3F
Certificate issuer:       /CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
Certificate serial:       019B7B36F418D9635BB41EC624B138557D04
Authority key identifier: E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/YUxchUW6QgVYqToISCVzQtOWeD8.roa
Signing time:             Thu 01 Jan 2026 20:19:17 +0000
ROA not before:           Thu 01 Jan 2026 20:19:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60239
IP address blocks:        185.34.202.0/24 maxlen: 24
                          2a04:5ec0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:f4:18:d9:63:5b:b4:1e:c6:24:b1:38:55:7d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
        Validity
            Not Before: Jan  1 20:19:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=614c5c8545ba420558a93a0848257342d396783f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:12:65:19:85:73:05:97:fd:43:8e:07:33:
                    eb:b1:0b:c8:10:18:1f:56:c9:ee:8f:ca:aa:7c:28:
                    2a:2f:f4:1e:d2:38:bb:2d:ab:d4:05:2f:be:41:ed:
                    db:2b:17:ae:05:d5:18:91:0c:dc:98:47:ad:93:ae:
                    05:66:01:d8:b2:1a:4f:1c:a7:22:46:e2:6f:89:8e:
                    44:92:48:c1:70:57:6f:94:13:ba:68:73:1e:a6:43:
                    73:bb:ce:8d:30:ae:04:43:3e:62:fc:08:6d:d5:21:
                    d4:b4:94:5d:ca:28:2b:e2:11:ea:8e:0d:7a:e0:8d:
                    36:af:01:97:83:9f:d3:91:0f:59:c4:a9:a4:60:50:
                    bb:fc:3a:04:6a:73:8c:7d:ed:09:09:20:27:5b:af:
                    00:10:31:96:8f:18:7f:5d:0d:21:63:35:27:60:ec:
                    05:cf:09:b4:13:15:b1:7e:58:26:68:b0:d7:40:2b:
                    74:d6:26:b4:2f:02:05:65:0e:9d:f0:7f:a9:27:a0:
                    2e:61:9b:ba:17:6b:d2:a5:9f:98:2b:a3:65:88:da:
                    b9:21:23:f0:90:26:44:f2:89:08:65:50:fb:e9:8a:
                    cb:38:84:5c:77:1e:66:05:23:e6:6a:84:ad:a1:af:
                    84:b0:f0:be:a8:c4:d0:89:d8:37:97:c9:2c:3f:13:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4C:5C:85:45:BA:42:05:58:A9:3A:08:48:25:73:42:D3:96:78:3F
            X509v3 Authority Key Identifier:
                keyid:E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/YUxchUW6QgVYqToISCVzQtOWeD8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.202.0/24
                IPv6:
                  2a04:5ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:66:6f:8f:47:14:0a:1c:2f:4a:94:a9:ef:1d:27:21:20:50:
         ea:ff:94:c3:26:ab:b4:c4:71:ff:5d:95:fd:6c:6a:7c:5b:44:
         ef:94:1f:69:f4:9f:d9:26:94:8e:cf:2a:58:2e:07:d7:6d:ef:
         bd:9e:6a:cf:a7:65:ed:7a:de:de:4a:a9:5f:52:2c:29:66:5a:
         98:6b:c7:b3:b8:e7:11:d9:70:f9:2b:4f:93:3c:29:c6:fd:03:
         9c:3f:54:ca:fd:01:b3:13:7b:04:04:0f:b3:8d:e5:3e:00:30:
         28:62:6d:00:01:2c:29:0f:fd:7a:14:ac:8b:68:40:07:99:10:
         c5:f6:69:25:cf:7d:da:75:1f:a3:d6:0f:10:f3:3b:59:dc:cb:
         1a:2d:c0:e7:23:5c:26:e1:63:2b:1b:81:16:e4:69:96:8f:8d:
         f9:13:fe:80:91:c8:8b:98:ff:17:c9:68:d7:fa:e3:ca:83:56:
         70:fd:11:c4:35:bf:e6:94:21:01:6a:0c:61:5c:d7:24:d4:48:
         3c:d1:40:ec:70:e0:fd:2e:29:9c:aa:ac:24:73:fb:06:e3:69:
         60:5f:3c:0b:52:90:cd:66:6d:0c:fc:c1:d3:9d:6d:8f:5f:bb:
         79:5c:73:8f:fc:43:5e:ed:eb:a3:98:a5:b5:0c:98:46:fe:b5:
         7f:2c:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:52 2026 by rpki-client