This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa
File:                     RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa (raw, json)
Hash identifier:          +mZHJEVEx50dKyXD00LKvcDkY+DRVgSg2B5Jqah+/wo=
Subject key identifier:   45:88:E6:C3:04:9E:8A:D1:3B:61:F9:46:43:E0:57:56:E1:0E:C3:E6
Certificate issuer:       /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial:       019C476E3D95875170C793984647586C4C78
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa
Signing time:             Tue 10 Feb 2026 12:02:12 +0000
ROA not before:           Tue 10 Feb 2026 12:02:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        91.108.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:47:6e:3d:95:87:51:70:c7:93:98:46:47:58:6c:4c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
        Validity
            Not Before: Feb 10 12:02:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4588e6c3049e8ad13b61f94643e05756e10ec3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:f9:a1:f5:73:99:2d:c1:1a:d7:bf:60:83:
                    39:23:47:e2:1a:21:0a:12:0b:e1:08:2f:86:da:d3:
                    c4:09:d2:37:b8:8b:59:0e:58:78:f0:c6:0e:02:6b:
                    d6:03:4b:57:3e:7e:de:ef:aa:3d:eb:bd:db:9c:c8:
                    52:50:ad:59:40:fd:5a:94:03:28:73:57:d8:35:43:
                    77:c2:86:2e:4b:12:6b:96:83:90:1f:31:6d:33:5a:
                    a4:23:46:f4:a3:dc:d2:43:b8:2a:4b:0e:33:4f:6f:
                    3a:79:97:5e:bb:67:13:91:18:31:b9:89:26:fa:2f:
                    2a:0b:c1:df:e9:4c:9b:62:9b:6c:6e:aa:77:89:87:
                    ec:de:fa:be:ff:c4:a2:b9:05:5b:c2:15:27:08:62:
                    69:37:d0:db:af:cd:5e:f4:0e:e5:38:73:d4:7a:31:
                    15:2d:98:82:af:5d:81:2e:26:f6:bb:c7:1a:3e:f5:
                    ff:8d:ee:31:e2:63:dc:f0:53:70:e9:b2:bf:8e:a5:
                    06:c7:10:1c:11:69:7d:07:23:07:d0:5e:87:25:ad:
                    39:5f:25:e8:e1:ff:5a:2d:64:a4:bc:2a:79:2f:e7:
                    25:e7:af:b2:98:25:06:75:ee:f1:cc:9c:9e:98:30:
                    70:8f:8b:2e:5c:64:a5:4a:7b:5a:f5:c2:c9:38:5c:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:88:E6:C3:04:9E:8A:D1:3B:61:F9:46:43:E0:57:56:E1:0E:C3:E6
            X509v3 Authority Key Identifier:
                keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.108.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:e9:5d:28:05:43:40:9e:3b:6c:ed:ac:26:c7:f8:15:7e:
         b8:47:46:1c:f6:10:6e:94:bc:4f:a8:75:27:6f:84:b3:c8:54:
         d8:f8:f3:60:3d:b4:58:11:1e:9f:b0:da:5d:04:ed:28:bd:30:
         98:41:94:c9:b8:24:d9:bb:94:76:aa:03:b4:4d:6a:63:f4:55:
         90:a1:d7:36:e9:41:5b:52:75:f2:17:07:9d:2a:07:ff:be:8c:
         cd:1c:0c:2f:c3:4b:30:54:c3:43:a1:6c:88:92:a3:19:2b:d1:
         42:d5:f5:1c:0a:ea:4b:a9:fe:d8:51:8b:5d:48:e8:c9:1b:2a:
         b3:bb:a8:ce:f4:3a:32:94:fe:3f:dc:f7:71:2d:30:60:93:62:
         16:57:30:00:cd:df:28:d1:2c:e4:74:75:65:c2:13:46:2b:e8:
         72:84:b9:d9:bd:f2:39:35:ff:c4:00:e3:7f:2e:9b:f1:ba:16:
         60:bd:89:cd:8a:0f:47:ea:fe:8a:88:ed:1d:58:11:d4:1b:6e:
         af:ae:ad:91:f3:26:9a:08:d8:9b:9d:c7:af:79:c8:e4:44:a9:
         f1:b0:c2:f2:b8:eb:cc:ef:d5:2d:e7:87:24:0c:f9:cf:6e:2a:
         33:b9:dc:22:46:3e:02:04:87:48:66:6a:1b:f6:ad:4f:4c:68:
         79:df:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:33 2026 by rpki-client