This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/yrM0soQqx_j0-1MHLmyxRBwRLbM.roa
File:                     yrM0soQqx_j0-1MHLmyxRBwRLbM.roa (raw, json)
Hash identifier:          W92AJMwPEMvy6l2A/2J7r66vBSLFPMTIh8GEtzvHHq0=
Subject key identifier:   CA:B3:34:B2:84:2A:C7:F8:F4:FB:53:07:2E:6C:B1:44:1C:11:2D:B3
Certificate issuer:       /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial:       019BBC13E4FCBFD0E73B16ABF27C4B422474
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/yrM0soQqx_j0-1MHLmyxRBwRLbM.roa
Signing time:             Wed 14 Jan 2026 10:36:18 +0000
ROA not before:           Wed 14 Jan 2026 10:36:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50867
IP address blocks:        212.115.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:bc:13:e4:fc:bf:d0:e7:3b:16:ab:f2:7c:4b:42:24:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
        Validity
            Not Before: Jan 14 10:36:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cab334b2842ac7f8f4fb53072e6cb1441c112db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:64:de:a7:ed:bd:0b:71:74:7c:92:41:eb:
                    c0:fd:6d:3b:1a:aa:e2:d1:4e:f6:dc:65:1a:b3:34:
                    7c:72:aa:75:3b:23:6c:fd:ad:8f:40:fb:55:78:2b:
                    e7:3b:74:30:e5:08:48:60:3c:c6:13:07:89:04:fd:
                    64:de:03:f1:8d:b1:6c:de:31:e9:c6:4f:a1:00:95:
                    c2:17:62:bd:aa:d1:25:d0:3e:c3:00:2f:b6:07:78:
                    a8:c5:f7:f7:1f:eb:c4:f9:4f:e1:9b:62:89:59:ea:
                    17:06:6d:1f:55:60:41:3a:d0:e9:67:ca:4e:00:8c:
                    d4:52:aa:4b:ee:29:f4:d9:ea:08:c9:c9:df:f0:38:
                    ab:3c:a0:09:04:5c:88:aa:75:dc:95:8d:7a:b8:75:
                    db:5d:56:15:28:9d:05:bd:e3:3c:f9:22:1d:1d:8e:
                    ab:68:90:0e:94:2a:55:63:05:7b:5b:d1:7f:05:73:
                    82:b7:8d:81:b5:8d:d3:e4:a0:cf:66:17:21:87:fd:
                    86:4f:c0:ad:91:7b:ba:a3:2f:bc:f2:ac:8a:8a:88:
                    5a:af:85:ca:88:45:52:62:e0:81:e6:6e:3a:36:97:
                    39:b6:7a:6f:0b:73:99:5a:89:a5:0c:a4:79:a8:22:
                    c4:0e:0e:5e:e7:68:c6:34:e3:4d:3c:63:67:4f:71:
                    e8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B3:34:B2:84:2A:C7:F8:F4:FB:53:07:2E:6C:B1:44:1C:11:2D:B3
            X509v3 Authority Key Identifier:
                keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/yrM0soQqx_j0-1MHLmyxRBwRLbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.115.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:6d:1d:70:70:29:d8:34:db:3e:b3:02:cd:b3:43:05:26:da:
         45:27:19:7b:2e:cb:a2:5e:9f:e8:05:4a:85:39:dc:5d:09:bb:
         61:c0:0c:83:ca:4c:15:af:d5:48:57:99:ae:48:cf:77:f5:27:
         f5:b7:65:49:f2:8a:c2:82:e6:20:b8:e4:f9:20:5a:4d:35:8a:
         08:f5:9f:06:55:1e:52:c8:90:28:6b:7f:94:d9:cf:c2:b6:bd:
         17:d9:d9:3c:7f:7a:f9:d5:38:cc:45:de:ea:36:f9:c4:a5:7c:
         d1:86:10:19:d1:85:61:49:f0:cd:c1:e5:8b:7f:19:76:fe:98:
         14:67:d6:9f:3c:15:cf:d7:77:de:fe:f1:eb:31:74:71:b0:ff:
         1a:4d:f2:38:ed:88:7f:d4:4f:c1:03:bf:ec:a6:2c:ec:46:e1:
         9b:ef:ff:55:44:54:f0:29:6d:fe:2b:6e:2d:f5:39:05:86:e6:
         b0:d2:f1:29:99:ac:f5:11:a7:a3:03:4f:0f:ca:a8:6d:21:3a:
         45:eb:21:a8:65:74:bc:a0:88:03:98:7b:c1:e2:6d:e2:1f:21:
         60:17:e9:9a:92:92:1e:93:79:a6:c8:c3:44:b1:fa:67:9e:b2:
         29:db:40:69:70:d0:ac:bf:6f:70:6c:74:83:d3:e9:ff:68:40:
         08:d0:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:15:17 2026 by rpki-client