This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/YbqyFQHsyNiGPozUsbcgzr5hODk.roa
File:                     YbqyFQHsyNiGPozUsbcgzr5hODk.roa (raw, json)
Hash identifier:          qv+sCX2iRQVTs2P5WEjNxou8g+zlStYtIq+3187kxGQ=
Subject key identifier:   61:BA:B2:15:01:EC:C8:D8:86:3E:8C:D4:B1:B7:20:CE:BE:61:38:39
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       019C2F364A43D5CA71D7AD8550619F7EFD38
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/YbqyFQHsyNiGPozUsbcgzr5hODk.roa
Signing time:             Thu 05 Feb 2026 19:10:12 +0000
ROA not before:           Thu 05 Feb 2026 19:10:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        83.147.194.0/24 maxlen: 24
                          178.253.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2f:36:4a:43:d5:ca:71:d7:ad:85:50:61:9f:7e:fd:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Feb  5 19:10:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=61bab21501ecc8d8863e8cd4b1b720cebe613839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:80:f0:cc:be:be:07:48:c1:12:82:02:06:
                    7a:83:1b:8a:60:52:4a:d6:e2:24:06:04:37:52:5d:
                    6c:aa:a8:c7:12:cc:ca:1d:5b:a1:eb:f2:8b:ad:75:
                    08:e1:d1:17:46:3e:c8:27:5e:8e:dc:a5:41:6e:90:
                    88:f8:5c:27:43:57:0c:ce:99:21:85:db:e6:90:3a:
                    7b:8e:13:0b:05:40:c2:96:83:1d:d1:ee:48:70:0d:
                    e0:75:2e:20:c7:80:9d:fd:19:9e:ae:6c:8a:0b:f4:
                    59:5f:2a:f3:0f:de:aa:62:8d:20:78:15:e1:f7:8c:
                    d0:10:73:1a:e0:64:a4:7e:07:90:13:98:d0:9b:55:
                    55:5f:61:0d:dd:4a:0a:a0:e4:0b:f1:48:be:33:50:
                    f9:3e:c0:31:45:6e:3e:db:16:51:ee:a0:83:68:1f:
                    39:9f:77:40:82:92:9a:ff:50:73:80:6f:8a:d9:dc:
                    66:c8:ba:5e:1a:00:52:06:48:ec:8c:fc:d8:ef:03:
                    00:d4:96:44:81:2d:6a:5a:4f:fc:1b:4d:97:a6:ee:
                    9a:68:bb:da:51:63:76:70:03:dd:58:3a:e7:7e:73:
                    98:bd:d6:03:b5:12:45:20:ad:22:87:8f:08:a8:e5:
                    9e:29:c8:1e:03:b1:56:e8:3d:3e:77:cd:f8:f1:ce:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BA:B2:15:01:EC:C8:D8:86:3E:8C:D4:B1:B7:20:CE:BE:61:38:39
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/YbqyFQHsyNiGPozUsbcgzr5hODk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.194.0/24
                  178.253.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:1c:7e:e3:5e:b2:6e:98:c2:87:7f:49:54:31:d8:13:41:e4:
         c2:ab:c4:7a:d2:c7:ee:59:72:a9:37:08:f2:1d:47:0a:b8:de:
         54:93:39:66:83:18:a2:dc:4e:1c:23:aa:a4:c2:02:7d:32:d3:
         e5:e8:80:22:f4:ea:e0:b6:a8:ca:91:24:2c:b7:16:fa:c6:21:
         de:84:c2:3c:55:f9:e0:31:b6:1c:a7:09:60:ec:b8:36:ef:60:
         11:85:dd:c5:74:9c:bd:3d:f3:af:79:28:91:07:8f:2f:66:b9:
         b9:5b:c6:2e:68:39:c6:b7:2c:11:4e:80:53:da:fc:68:5b:9f:
         68:10:51:f1:78:7e:65:f9:2f:dd:b5:e8:03:b0:1a:87:52:aa:
         c3:23:52:f2:14:82:34:0f:87:e2:93:15:07:b5:68:33:08:8d:
         12:76:d8:f3:fa:5f:b3:24:99:2d:48:30:b4:d0:23:b1:a4:a2:
         ac:f5:01:58:3c:79:a4:65:e5:77:12:f0:9f:7b:9b:2e:b9:a5:
         5e:11:12:86:ab:ea:6f:1c:e2:94:07:ce:61:a9:f5:b0:dd:76:
         37:98:ba:0c:97:f2:90:6a:f5:20:c2:87:e4:e3:c4:c7:39:c7:
         19:b8:43:12:a0:4d:07:c2:92:73:4a:00:20:67:aa:c7:74:ea:
         16:0e:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:23:42 2026 by rpki-client