This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Y2DNgcEqCiCFEZFppIdUu0ViS9M.roa
File:                     Y2DNgcEqCiCFEZFppIdUu0ViS9M.roa (raw, json)
Hash identifier:          mVqlUqfy1ZfqJEiJXBtF73ndtl7OOjyi9baetp4Du6A=
Subject key identifier:   63:60:CD:81:C1:2A:0A:20:85:11:91:69:A4:87:54:BB:45:62:4B:D3
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019B7758BF83E091E32475406ACB7E267B24
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Y2DNgcEqCiCFEZFppIdUu0ViS9M.roa
Signing time:             Thu 01 Jan 2026 02:17:43 +0000
ROA not before:           Thu 01 Jan 2026 02:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213908
IP address blocks:        194.62.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:bf:83:e0:91:e3:24:75:40:6a:cb:7e:26:7b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 02:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6360cd81c12a0a2085119169a48754bb45624bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:f1:ad:80:b1:e5:5e:29:1c:e8:fa:dc:02:
                    69:06:5e:bb:f5:a1:64:53:a7:f7:e2:79:bf:cc:0f:
                    92:2c:78:05:0c:f0:87:94:64:b9:46:55:5b:85:12:
                    7b:bd:d8:1c:e7:fe:f6:4d:7a:68:58:18:f0:49:10:
                    04:e8:a1:ce:52:4b:0b:66:64:f8:a0:d7:d1:6c:a4:
                    c4:d1:68:4e:a4:9e:76:00:26:81:f1:c6:0c:92:70:
                    1b:4c:70:d7:4d:a1:a0:bf:bd:73:ce:9e:a8:93:b2:
                    72:8a:ed:62:c3:d4:53:0d:f7:52:84:d6:69:56:42:
                    a8:a5:eb:bf:52:3f:30:6c:4f:c7:ea:ad:66:bb:51:
                    db:23:5a:2d:b8:7a:0a:52:69:57:8f:0a:aa:ab:62:
                    9a:b0:27:8b:32:d6:bd:c6:ed:de:28:4f:28:70:c3:
                    04:6a:82:7e:4c:a4:ef:fa:81:79:fe:9f:b0:40:f1:
                    50:56:4e:ea:c2:8c:76:63:b4:2a:55:80:ea:5d:1b:
                    a3:34:18:ae:4b:ca:c4:b2:db:25:02:90:90:7c:3c:
                    04:9e:d0:55:ed:a9:7f:8f:20:ff:bc:f1:96:ce:13:
                    01:fd:d5:f4:15:4e:c1:41:e4:7f:e9:5c:73:47:c8:
                    0b:1a:e4:f5:af:cd:2d:6a:eb:d2:4b:de:83:49:7a:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:60:CD:81:C1:2A:0A:20:85:11:91:69:A4:87:54:BB:45:62:4B:D3
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Y2DNgcEqCiCFEZFppIdUu0ViS9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:a5:53:18:14:3d:95:a3:36:ec:b3:ee:5f:25:61:f6:43:
         7a:c0:1e:63:a1:2e:d1:23:f0:3b:e3:7f:8a:a7:9d:70:d2:0d:
         5a:d9:25:c4:d4:ca:f9:18:1a:91:ed:ab:79:01:18:0f:df:0a:
         27:ea:0c:9a:2d:1e:4d:c3:0e:4d:8c:cb:a7:de:3d:41:3c:9b:
         f9:8a:27:31:4f:5e:46:ae:a2:4b:28:7c:2f:91:36:43:16:17:
         31:fb:90:69:e1:c1:d8:2d:44:05:83:05:a8:bf:00:88:00:c4:
         06:6f:af:99:c0:a4:07:ef:f3:f4:02:b2:52:07:b1:53:3d:1f:
         b7:28:9f:ee:08:1c:e3:27:ae:78:93:df:e6:07:ae:e4:cc:00:
         f4:69:bd:25:96:ad:f4:d3:62:47:e7:61:8e:7a:b9:2a:07:f3:
         70:f2:c7:b0:4e:87:df:12:2b:56:fa:bc:ce:67:35:1d:bd:b9:
         22:9a:de:03:a3:5f:f5:23:dd:b2:24:97:51:18:36:d9:16:c6:
         6b:7a:54:bb:39:a1:91:60:9f:07:e1:7a:92:b7:f5:37:e8:1f:
         ca:25:91:6c:90:11:4b:48:ce:dc:c2:76:75:ba:af:64:71:ed:
         f3:19:ef:ff:c7:24:c8:23:a0:60:d2:a5:2f:66:b2:f5:40:71:
         61:d3:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:11:47 2026 by rpki-client