This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/ygZwfoCP-cYa1d_8M1_L-EP0n6M.roa
File:                     ygZwfoCP-cYa1d_8M1_L-EP0n6M.roa (raw, json)
Hash identifier:          Fq7+FptbMkMbniftg0D76bdlcdgbjcbKaaDFblXLHak=
Subject key identifier:   CA:06:70:7E:80:8F:F9:C6:1A:D5:DF:FC:33:5F:CB:F8:43:F4:9F:A3
Certificate issuer:       /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial:       019B77596C4E39A4FB5BAF0D349D995C8E7D
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/ygZwfoCP-cYa1d_8M1_L-EP0n6M.roa
Signing time:             Thu 01 Jan 2026 02:18:27 +0000
ROA not before:           Thu 01 Jan 2026 02:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9211
IP address blocks:        195.242.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:6c:4e:39:a4:fb:5b:af:0d:34:9d:99:5c:8e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
        Validity
            Not Before: Jan  1 02:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca06707e808ff9c61ad5dffc335fcbf843f49fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:a4:ef:69:41:b5:25:81:0f:dc:79:53:9a:
                    5a:e3:78:6c:07:f5:1d:6e:80:61:ec:44:0e:2b:e3:
                    62:9b:e1:17:cf:8e:7a:e5:1d:95:b2:3c:2b:3e:75:
                    f4:c4:74:fe:d1:f3:f7:5a:4b:e5:7d:a8:d2:d9:11:
                    1b:3c:c8:9d:5d:b4:cb:1e:b3:eb:5d:6e:68:15:cf:
                    97:2f:fa:fe:ba:9f:0b:d0:71:09:81:fe:f1:5b:94:
                    59:c7:95:f1:6c:c3:4e:19:7b:11:62:7c:ea:59:09:
                    21:c9:86:d1:99:04:58:5b:2e:e1:05:26:22:ef:b0:
                    2f:d8:1b:38:77:5a:92:fd:2b:6d:f6:6b:f1:76:61:
                    16:00:d7:20:ef:4a:b7:99:ce:fd:8b:17:14:16:f6:
                    4d:75:90:23:67:5e:e7:9f:dc:b1:9e:94:ea:d5:d5:
                    c6:31:a5:60:ee:d0:a4:ee:ef:d2:d5:42:a2:29:8e:
                    61:aa:26:b8:cf:35:43:5d:45:d5:e5:b9:43:e1:5f:
                    d6:3d:70:b2:2e:88:01:71:4e:dc:0e:e4:a2:c8:97:
                    1d:ec:8b:2d:07:9c:a6:cf:fe:ac:b8:8b:98:15:23:
                    9e:fd:27:f0:9d:b5:3e:31:15:4b:0b:ae:00:66:1d:
                    fa:77:f4:34:4b:67:ad:7a:79:45:29:ce:c6:55:26:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:06:70:7E:80:8F:F9:C6:1A:D5:DF:FC:33:5F:CB:F8:43:F4:9F:A3
            X509v3 Authority Key Identifier:
                keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/ygZwfoCP-cYa1d_8M1_L-EP0n6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.242.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:ab:68:ed:34:0b:68:46:9b:ed:c9:e1:43:9e:14:4c:58:
         c2:77:8f:e5:d2:62:c9:c9:6f:21:56:7e:d1:c1:6a:3b:d4:14:
         ee:45:04:0d:33:bf:4d:fe:8d:2e:bd:fa:3c:88:1e:a8:df:2e:
         00:b3:52:7a:4b:85:ee:21:e4:de:a1:80:55:6c:45:dd:54:7e:
         c2:58:b4:ef:be:d7:e4:6f:56:9a:46:24:22:4c:b9:6b:6f:06:
         20:d0:e0:eb:1e:51:98:6d:10:46:d0:52:56:a9:66:b2:e8:b3:
         70:df:bb:aa:f4:54:8c:39:fd:91:b7:01:58:74:2c:58:eb:ce:
         e8:b4:64:26:d0:c4:e9:f2:b9:87:b8:1e:0d:ef:15:63:6a:42:
         b2:5e:8c:22:2c:ff:15:af:ac:78:d4:06:0f:79:f3:71:96:12:
         d5:3c:3b:f3:5b:e4:78:ba:1e:35:51:ce:13:ba:7b:a2:f7:d4:
         af:84:50:bb:00:32:73:dd:59:85:9c:a9:0b:c4:e4:b2:c5:6b:
         a5:db:60:f0:cf:1e:e5:94:1f:d0:89:96:43:a5:8f:3e:c7:11:
         64:ff:71:47:a0:96:4f:f2:45:d0:df:a9:89:40:65:0f:30:84:
         da:b7:65:1e:e2:8e:00:f0:29:bd:77:69:fa:84:06:7c:87:25:
         02:ce:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:32:41 2026 by rpki-client