This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yMWqWM9-M28Q50_HYL_mIAuB6EU.roa
File:                     yMWqWM9-M28Q50_HYL_mIAuB6EU.roa (raw, json)
Hash identifier:          FQOiB7ehOwio5WIMh4c4DVEkvJDMWnIDii1qbg9iHFM=
Subject key identifier:   C8:C5:AA:58:CF:7E:33:6F:10:E7:4F:C7:60:BF:E6:20:0B:81:E8:45
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       019C525A43E71A76781FAB87B442AC667D65
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yMWqWM9-M28Q50_HYL_mIAuB6EU.roa
Signing time:             Thu 12 Feb 2026 14:56:13 +0000
ROA not before:           Thu 12 Feb 2026 14:56:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201153
IP address blocks:        93.177.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Feb 2026 15:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:52:5a:43:e7:1a:76:78:1f:ab:87:b4:42:ac:66:7d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Feb 12 14:56:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c8c5aa58cf7e336f10e74fc760bfe6200b81e845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:6b:00:e5:ec:f0:6e:47:9e:a2:32:fc:82:
                    d9:81:6f:3a:c2:a6:89:6f:75:10:c5:b8:2b:dc:1b:
                    b7:c8:79:10:c2:eb:a3:c0:9f:d5:6e:14:76:8c:36:
                    8c:dc:d8:60:bc:da:33:76:0c:3c:43:9d:1c:e1:d4:
                    9e:82:84:e4:9f:ad:04:96:8f:1d:37:0e:eb:ed:20:
                    a7:69:16:90:6d:d8:3f:60:92:2c:4b:fe:1d:b2:33:
                    47:66:19:60:0a:45:3d:92:79:0f:46:b2:c6:59:57:
                    0d:6a:be:51:19:1d:e9:cc:b0:02:58:9a:dc:5d:63:
                    13:c7:68:ba:95:f7:fe:aa:78:d2:a7:a3:3e:2d:f5:
                    ae:c3:5b:75:d6:99:f7:fb:60:7f:0e:d2:21:91:df:
                    8b:34:68:30:1b:e5:f6:85:4f:e4:b8:e2:71:13:58:
                    af:9f:a1:18:f8:d0:e5:a7:18:53:cf:42:15:05:14:
                    de:ab:a6:d9:10:aa:7a:5f:4e:b0:bf:f8:ac:eb:ad:
                    ae:af:1e:90:ba:2a:85:6a:85:64:3f:08:2f:1c:c1:
                    fa:9e:15:5d:da:22:5a:4b:7e:30:4b:24:a9:62:75:
                    fa:38:de:45:8e:be:c0:d9:5a:2c:b3:aa:58:10:59:
                    05:b8:c1:e9:a6:24:19:66:b1:3d:14:2c:40:7e:6d:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C5:AA:58:CF:7E:33:6F:10:E7:4F:C7:60:BF:E6:20:0B:81:E8:45
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yMWqWM9-M28Q50_HYL_mIAuB6EU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:8b:6e:a9:08:ff:e9:df:22:2c:1d:6a:5b:d0:8e:ea:7d:
         73:da:74:c5:eb:ff:e3:f2:06:26:d1:f4:b7:02:24:d4:06:24:
         5f:2e:d9:69:94:fb:70:8e:77:8c:49:a8:52:0f:17:9f:ad:19:
         d6:bb:f0:2f:5d:af:f2:2e:0b:07:54:f6:7e:36:92:49:f8:87:
         fe:69:fd:bd:d5:6d:f5:5f:10:85:2b:d5:6a:fa:d8:d0:10:02:
         b1:6e:e0:c7:40:8a:5b:dc:5e:1a:77:71:42:02:28:01:f7:05:
         db:fa:59:be:a8:a9:05:31:a9:c5:e1:6a:ef:3e:fb:23:05:b3:
         f9:a4:4f:6d:f1:26:9b:fd:17:3f:67:72:59:0e:6e:a7:fb:d6:
         ce:d2:64:0a:8b:0a:42:6a:24:aa:6e:ca:63:3a:e0:b9:69:8a:
         ef:e0:64:62:55:9e:a6:1f:de:21:0e:bc:05:08:c7:10:ef:e5:
         53:55:48:24:83:1d:e6:4f:92:ff:db:ce:72:96:89:ab:5e:5a:
         ac:2c:e7:d3:51:e8:8e:48:49:99:44:4c:be:2b:18:89:8a:38:
         88:cf:4f:ec:60:78:cf:c4:8f:79:d0:a6:9c:a5:a5:73:c0:83:
         17:cd:f2:0a:b0:ef:11:f6:b6:20:a3:b8:ba:0a:08:ba:f7:b7:
         d0:af:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 00:03:42 2026 by rpki-client