This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa
File:                     yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa (raw, json)
Hash identifier:          MAEY7tBraubtKoodWTH2DPA+SuxElYKFE3cdaGB9ZX4=
Subject key identifier:   C8:05:09:35:87:14:FF:71:5D:9B:60:3E:83:D0:43:62:1A:1B:78:C6
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       019B7F812D19EFE24AC0A379B40C57D75DA1
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa
Signing time:             Fri 02 Jan 2026 16:18:50 +0000
ROA not before:           Fri 02 Jan 2026 16:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35831
IP address blocks:        94.31.54.0/24 maxlen: 24
                          213.152.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:81:2d:19:ef:e2:4a:c0:a3:79:b4:0c:57:d7:5d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Jan  2 16:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c80509358714ff715d9b603e83d043621a1b78c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:cc:86:42:63:ce:e9:df:e5:fa:f5:64:1f:
                    ff:d5:51:4d:a9:01:ee:ea:f4:75:0c:38:a9:77:69:
                    9d:b4:c2:1c:ff:09:85:c7:38:f8:a4:81:6e:9c:08:
                    76:24:52:23:fd:6d:4b:63:c8:56:9c:d0:b5:bd:d7:
                    c4:67:a8:4d:db:a9:13:4b:0b:c1:3e:f1:a4:bd:e5:
                    62:b3:ec:d1:67:5a:51:61:45:35:1b:1e:87:93:1b:
                    b6:57:6c:29:0a:9b:d7:a5:9e:b7:fa:8d:11:54:d4:
                    00:a2:86:61:ae:ed:b6:e6:51:0b:5e:d6:c9:5e:90:
                    98:7a:91:8f:d4:4c:24:71:d7:20:e2:1c:63:e4:94:
                    66:e8:a1:37:1f:2c:7b:d9:df:7f:66:8b:9e:d0:99:
                    c2:95:0e:d7:d1:0b:8b:07:46:64:18:e8:88:34:95:
                    03:67:66:c8:1b:ea:26:95:39:f9:0e:95:34:95:fc:
                    0b:dd:a0:d1:41:10:b2:11:92:b5:5b:0a:f7:20:b8:
                    a0:7c:cc:87:ca:c4:92:1b:fe:04:4e:67:fb:17:a9:
                    04:f6:8a:0a:be:e2:66:96:71:45:57:83:89:42:32:
                    c3:1d:29:31:95:f2:31:79:0b:6b:98:3b:1d:e0:3c:
                    6f:6d:9d:53:4f:8f:c2:b9:11:c7:d8:6a:60:62:bd:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:05:09:35:87:14:FF:71:5D:9B:60:3E:83:D0:43:62:1A:1B:78:C6
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.31.54.0/24
                  213.152.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:1d:4c:17:f7:40:e6:42:eb:41:46:69:1f:b9:c3:76:68:1a:
         b7:83:ce:0f:53:c1:98:03:26:71:53:0f:67:5d:ef:dd:ae:b4:
         d1:4b:12:52:aa:6d:25:83:0d:1f:7f:0d:e6:20:fb:e2:a8:e2:
         ec:f3:f0:dc:d9:86:e5:f0:54:d0:de:1b:ed:b3:93:7f:b6:2b:
         41:56:8e:fe:19:48:3c:d3:e2:cf:6a:b0:c0:49:50:97:b7:4f:
         66:7c:a4:e7:23:34:28:ad:b5:d9:9d:45:3a:cd:39:39:7d:a0:
         9d:e1:fb:93:6b:02:d4:04:1e:72:97:21:8c:93:e7:16:4d:49:
         b3:9b:bb:d0:3b:34:08:be:c5:51:29:6d:e1:be:c3:b9:ee:70:
         58:4e:3b:c3:18:b1:29:97:b8:2e:28:9a:9b:c1:3d:12:c7:a0:
         f8:b9:d1:25:44:38:40:d8:67:39:57:97:f3:50:cf:7f:9e:bc:
         1c:ba:d3:f7:08:cc:4a:4c:35:b7:1e:36:c1:07:f7:10:c6:fe:
         f6:91:19:86:7e:b7:3f:46:1d:9f:1f:8b:34:f7:0b:a3:c3:fc:
         17:a8:2b:4e:4d:f5:d3:05:07:b6:c9:5f:af:1a:ea:23:fb:e6:
         52:06:d8:a8:bd:58:89:da:e3:4b:4d:af:c0:40:2c:16:98:93:
         88:25:27:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 03:49:27 2026 by rpki-client