This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa
File:                     Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (raw, json)
Hash identifier:          7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=
Subject key identifier:   63:59:67:41:4E:3C:CC:B3:1A:66:3E:63:8C:C3:6E:D6:3A:82:A4:7D
Certificate issuer:       /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial:       019B7B362CBC2216EA2E5BA621CDDC8DB193
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa
Signing time:             Thu 01 Jan 2026 20:18:26 +0000
ROA not before:           Thu 01 Jan 2026 20:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197932
IP address blocks:        37.60.200.0/21 maxlen: 24
                          193.39.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:2c:bc:22:16:ea:2e:5b:a6:21:cd:dc:8d:b1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
        Validity
            Not Before: Jan  1 20:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=635967414e3cccb31a663e638cc36ed63a82a47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:4b:c4:26:b9:e8:90:c3:30:05:ef:8d:bf:
                    68:aa:5e:d6:2b:dc:29:bc:b3:ed:18:b6:2a:eb:f1:
                    ed:f8:c0:cf:71:bd:2b:d6:8f:8b:9c:26:54:c8:94:
                    98:71:b8:57:2d:87:35:0c:9c:da:6c:fb:5f:05:82:
                    13:f1:5a:a8:36:19:d9:00:3b:c0:ee:b3:0b:f3:da:
                    d1:61:e8:7f:5d:a3:50:7f:0f:9f:80:70:26:0d:fd:
                    af:91:2d:b7:ed:03:d8:5a:5a:55:27:ee:d6:a0:53:
                    88:4e:3b:14:60:c0:17:78:0b:c4:c2:62:f8:b0:75:
                    1e:66:97:5f:30:0a:88:eb:a1:61:10:62:88:88:4a:
                    4f:02:d2:13:73:e9:ac:81:1e:ea:6a:5c:88:f7:70:
                    de:7a:78:c8:00:30:e3:98:54:ff:19:c1:dc:c9:20:
                    61:2f:01:47:2f:cb:5b:62:23:2f:37:2f:11:4c:86:
                    b7:dc:d1:7d:6a:d3:77:60:aa:a1:bb:10:8e:f5:67:
                    a9:f6:f4:79:5f:27:d2:89:37:14:a3:93:5a:c7:51:
                    02:3b:a5:ef:d4:dc:3f:c7:4b:80:ae:54:90:a3:05:
                    a0:8b:66:59:e4:a3:d3:86:4c:0d:a9:e2:32:d2:84:
                    bf:74:d7:8b:ea:37:6b:4a:d2:5c:24:74:ec:a3:02:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:67:41:4E:3C:CC:B3:1A:66:3E:63:8C:C3:6E:D6:3A:82:A4:7D
            X509v3 Authority Key Identifier:
                keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.60.200.0/21
                  193.39.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:fd:1a:db:2b:b1:a0:56:d4:f8:7b:3e:e2:0f:b8:51:7f:e6:
         ae:5e:63:8d:5b:58:c9:28:2d:0f:93:06:9f:3c:19:d4:52:15:
         4c:b8:1a:62:5d:fd:d0:c0:21:11:6a:b5:25:81:78:27:f8:20:
         96:88:ab:3d:c6:e8:48:0e:00:ea:4e:86:d4:f3:5d:51:6a:18:
         f6:68:d2:57:07:58:64:2f:02:90:28:c2:87:b9:c7:f0:27:8a:
         66:ec:b5:11:59:67:19:db:c1:78:96:75:ed:a1:02:a6:f5:bf:
         ce:b9:69:5f:32:74:2d:32:e1:b8:6c:2f:96:46:4a:a5:6f:8a:
         54:50:c1:84:36:66:10:b6:16:7d:14:a2:72:6a:ae:5c:5b:93:
         f6:4d:da:5e:85:6f:55:6b:ad:dc:f6:8a:88:76:e6:72:31:17:
         f8:42:18:21:8f:87:1c:15:4c:88:21:b8:a7:26:61:61:fc:2a:
         f2:10:57:b7:81:7e:a3:92:9d:82:e8:bc:99:bd:ba:a1:b6:0f:
         34:56:ff:91:7a:ed:70:0b:69:25:dc:97:aa:0c:ef:1c:cd:c8:
         12:2c:04:d9:6b:09:ed:f2:3b:26:03:72:e1:7d:07:67:ce:9e:
         2e:23:7e:ab:49:34:23:3a:1e:f7:ad:19:94:79:3f:5a:14:40:
         b8:61:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:55 2026 by rpki-client