This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/YwRJ2tVF3VFoI8oBKxmxmrlWvzU.roa
File:                     YwRJ2tVF3VFoI8oBKxmxmrlWvzU.roa (raw, json)
Hash identifier:          e5XlfGq0oDoZyjw7Mj6ppUzfy4+mxsWTLSJb/MkUC8s=
Subject key identifier:   63:04:49:DA:D5:45:DD:51:68:23:CA:01:2B:19:B1:9A:B9:56:BF:35
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       019B7AC7CAADD62EC50CDF56DD1D378A5ED3
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/YwRJ2tVF3VFoI8oBKxmxmrlWvzU.roa
Signing time:             Thu 01 Jan 2026 18:17:52 +0000
ROA not before:           Thu 01 Jan 2026 18:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214012
IP address blocks:        185.201.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:ca:ad:d6:2e:c5:0c:df:56:dd:1d:37:8a:5e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Jan  1 18:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=630449dad545dd516823ca012b19b19ab956bf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:51:d2:9b:f3:f2:7b:ef:ee:f4:92:56:9a:
                    66:17:fb:28:55:7a:e8:4a:af:ac:2a:1c:be:2f:97:
                    5d:03:0c:de:7c:04:98:bc:fe:61:1b:35:c4:b5:dc:
                    4a:c2:23:0b:80:1a:f0:68:b2:e0:cf:da:0a:e7:8a:
                    08:d5:3d:ac:f5:75:16:54:1c:39:5a:cd:66:0d:68:
                    db:3a:a3:b1:89:51:8d:40:4f:51:56:de:09:83:b7:
                    39:42:a9:e0:83:7d:f2:7e:13:55:e6:40:bc:a1:f9:
                    e1:dc:c0:fe:29:e3:ed:f6:d1:58:c5:73:cf:27:a7:
                    02:13:79:a0:fa:33:da:46:09:37:30:76:2b:ad:2b:
                    15:95:0d:8b:19:1a:7f:3e:9c:94:8a:fe:e5:94:f2:
                    10:23:5f:d7:88:60:a7:e1:a8:2a:bd:fe:26:0e:dc:
                    ec:ec:4b:b5:0c:f7:7f:cc:c1:61:64:17:9e:89:62:
                    1d:58:2f:ba:1a:0f:cb:3a:39:51:9b:ce:40:74:57:
                    e9:54:c4:60:38:70:4b:04:c6:6c:c2:60:e2:a9:4e:
                    d5:48:c8:23:45:06:90:bc:f2:a3:ff:43:8d:37:a8:
                    81:24:04:b0:d4:32:33:83:71:a3:c3:18:97:cc:d2:
                    c6:2e:98:b5:9d:d9:9d:d5:7a:16:61:82:ad:b2:44:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:04:49:DA:D5:45:DD:51:68:23:CA:01:2B:19:B1:9A:B9:56:BF:35
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/YwRJ2tVF3VFoI8oBKxmxmrlWvzU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:8c:ec:0d:36:05:2f:f5:56:d1:8b:98:5f:42:5c:07:81:ee:
         4b:ae:7f:a8:66:e0:5f:71:3c:3c:5d:ec:df:0f:fe:f2:a1:49:
         9e:b9:9c:20:26:0e:3e:8e:14:02:ed:83:90:e9:8c:8a:bb:4b:
         0b:df:a8:26:44:80:36:df:c5:12:16:46:db:2d:87:3a:ef:1b:
         ec:55:47:c6:7a:0a:a6:61:23:86:7e:55:fd:cf:bc:bd:60:79:
         52:9d:b6:20:33:ee:f2:c6:3d:cb:46:38:32:58:5b:b8:58:ff:
         75:01:e8:a3:43:97:a9:a9:ef:bd:f5:10:40:b4:71:c1:6c:7f:
         72:a9:a2:10:bf:3f:ff:8c:4b:aa:2f:56:51:04:e0:3e:87:96:
         b8:6c:b6:4c:4f:6d:07:17:b8:c7:fb:43:be:2a:f5:e1:8b:23:
         8e:a3:66:2b:79:0b:d8:0d:c2:f0:49:1e:62:96:b0:8c:89:6b:
         49:9e:19:94:ff:d7:0d:f2:3e:37:94:a0:cc:50:96:53:d0:63:
         1a:51:4d:22:01:dd:70:71:0e:35:02:4e:fd:ed:5b:7f:f0:d1:
         f9:d3:bb:48:67:e2:fa:26:ff:76:fd:83:70:46:50:7c:c0:d3:
         a1:39:b1:99:2b:dd:72:51:08:fc:38:b8:cf:95:9a:ca:dc:23:
         e6:dd:03:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x8qt1i7FDN9W3R03il7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2
YmE2ODMwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzA0NDlkYWQ1NDVkZDUxNjgyM2NhMDEyYjE5YjE5YWI5NTZiZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnydR0pvz8nvv7vSSVppmF/soVXro
Sq+sKhy+L5ddAwzefASYvP5hGzXEtdxKwiMLgBrwaLLgz9oK54oI1T2s9XUWVBw5
Ws1mDWjbOqOxiVGNQE9RVt4Jg7c5Qqngg33yfhNV5kC8ofnh3MD+KePt9tFYxXPP
J6cCE3mg+jPaRgk3MHYrrSsVlQ2LGRp/PpyUiv7llPIQI1/XiGCn4agqvf4mDtzs
7Eu1DPd/zMFhZBeeiWIdWC+6Gg/LOjlRm85AdFfpVMRgOHBLBMZswmDiqU7VSMgj
RQaQvPKj/0ONN6iBJASw1DIzg3GjwxiXzNLGLpi1ndmd1XoWYYKtskSQUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGMESdrVRd1RaCPKASsZsZq5Vr81MB8GA1UdIwQY
MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt
M2NmM2I0NjNhODZhLzEvWXdSSjJ0VkYzVkZvSThvQkt4bXhtcmxXdnpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh
LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuclFMA0G
CSqGSIb3DQEBCwUAA4IBAQC5jOwNNgUv9VbRi5hfQlwHge5Lrn+oZuBfcTw8Xezf
D/7yoUmeuZwgJg4+jhQC7YOQ6YyKu0sL36gmRIA238USFkbbLYc67xvsVUfGegqm
YSOGflX9z7y9YHlSnbYgM+7yxj3LRjgyWFu4WP91AeijQ5epqe+99RBAtHHBbH9y
qaIQvz//jEuqL1ZRBOA+h5a4bLZMT20HF7jH+0O+KvXhiyOOo2YreQvYDcLwSR5i
lrCMiWtJnhmU/9cN8j43lKDMUJZT0GMaUU0iAd1wcQ41Ak797Vt/8NH507tIZ+L6
Jv92/YNwRlB8wNOhObGZK91yUQj8OLjPlZrK3CPm3QMo
-----END CERTIFICATE-----
Generated at Sun Jan 18 13:13:31 2026 by rpki-client