This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/sY2TntCf1cm5rPVJjS36b5m6tZc.roa
File:                     sY2TntCf1cm5rPVJjS36b5m6tZc.roa (raw, json)
Hash identifier:          TkRTS5xgT3a1OQtVhPAIwsqGlZKttwReXi6Ay6Ls3bI=
Subject key identifier:   B1:8D:93:9E:D0:9F:D5:C9:B9:AC:F5:49:8D:2D:FA:6F:99:BA:B5:97
Certificate issuer:       /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial:       019B797E5EBE30560B01FED3E36A1AC26F17
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/sY2TntCf1cm5rPVJjS36b5m6tZc.roa
Signing time:             Thu 01 Jan 2026 12:18:03 +0000
ROA not before:           Thu 01 Jan 2026 12:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42982
IP address blocks:        193.200.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:5e:be:30:56:0b:01:fe:d3:e3:6a:1a:c2:6f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
        Validity
            Not Before: Jan  1 12:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b18d939ed09fd5c9b9acf5498d2dfa6f99bab597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:82:04:d3:47:a1:8f:13:fd:87:de:14:e8:
                    a0:48:29:54:c1:d6:b8:16:dc:26:ca:e0:14:c6:08:
                    57:fc:17:21:25:c3:db:4b:01:06:b8:f7:f5:9c:64:
                    18:88:57:bc:94:07:31:8a:30:44:7d:51:6b:f8:63:
                    a1:ee:79:89:9d:1d:44:e2:7b:54:5b:f0:d4:4b:90:
                    fc:00:e6:3f:b8:05:7e:bb:9c:2d:bc:94:a5:c2:a2:
                    13:f5:e8:95:5f:a1:ae:a7:b4:7a:0d:4c:90:55:bd:
                    a8:00:4d:9f:d1:f7:37:59:d0:37:36:42:e1:81:30:
                    73:3a:6f:7f:10:f8:58:51:eb:e2:56:87:c4:f9:41:
                    e0:6e:32:34:5d:c4:09:57:56:50:8d:ef:6a:f7:1c:
                    08:4e:9d:a5:37:a3:fe:28:19:f9:da:ea:b0:64:2d:
                    1b:3f:d6:d5:b2:fa:8e:ad:c8:9d:e0:9c:53:3d:5a:
                    c5:f4:2b:92:8b:64:f1:75:73:4f:63:20:f5:34:ad:
                    67:b5:ed:dc:c5:64:74:be:75:3e:7b:48:54:d8:36:
                    87:31:3b:de:73:dc:99:55:26:62:94:3c:6e:fb:3c:
                    ed:01:ac:2b:b4:74:cf:20:b8:cf:3a:d3:db:81:fd:
                    24:9c:81:1b:d3:d6:74:a9:20:30:e6:90:5d:e7:c4:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:93:9E:D0:9F:D5:C9:B9:AC:F5:49:8D:2D:FA:6F:99:BA:B5:97
            X509v3 Authority Key Identifier:
                keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/sY2TntCf1cm5rPVJjS36b5m6tZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:13:67:36:56:93:82:f7:2d:44:43:4b:7f:02:cb:db:d3:66:
         21:a8:3c:65:05:12:c0:6d:ec:36:ac:33:41:08:c4:09:66:94:
         0b:57:49:d0:1f:88:c1:55:27:d5:45:52:3b:89:1d:1c:d5:6b:
         c3:4b:da:17:71:80:81:fc:e2:2d:f7:18:ff:41:6c:32:7f:63:
         24:08:13:51:4f:16:d3:13:71:e6:f1:98:57:4c:34:ee:10:11:
         6f:43:0e:e9:e6:f4:ce:9c:bf:33:1b:34:cb:ba:03:b9:dd:42:
         05:46:cc:d0:9c:ac:27:15:9a:67:8b:98:58:e6:70:df:99:27:
         e9:5f:80:2f:b8:ce:70:62:b1:03:26:b2:ba:b0:8d:5f:6b:f5:
         e0:2b:d2:24:d5:21:d2:4a:e3:2f:7f:58:4d:a1:e7:b0:64:ba:
         f2:0f:44:9f:46:f2:c9:57:96:d7:40:e2:aa:87:26:42:ec:14:
         6e:a8:af:87:62:90:54:82:12:0a:2b:ac:9f:56:44:dd:8d:3f:
         43:0b:58:c8:f7:89:fa:dc:14:e5:fe:8f:f7:e7:4e:90:db:7d:
         c5:e9:fa:77:d2:01:5a:14:bd:fd:f8:e8:a9:6e:3e:ce:0c:14:
         b9:ab:da:81:b4:c1:f6:c1:29:4d:54:8f:6c:52:f0:8c:bc:6b:
         cf:f1:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:17 2026 by rpki-client