This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/sYpCWYEGHBpPol8xs5yUhVl8QI0.roa
File:                     sYpCWYEGHBpPol8xs5yUhVl8QI0.roa (raw, json)
Hash identifier:          W4JWhEpgOclBlVstX4fS+F/OWeHUKAV9srk4Q1R7yOg=
Subject key identifier:   B1:8A:42:59:81:06:1C:1A:4F:A2:5F:31:B3:9C:94:85:59:7C:40:8D
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019BB13E6372526403A002F5E4C252C03CD7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/sYpCWYEGHBpPol8xs5yUhVl8QI0.roa
Signing time:             Mon 12 Jan 2026 08:06:54 +0000
ROA not before:           Mon 12 Jan 2026 08:06:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     984
IP address blocks:        87.229.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b1:3e:63:72:52:64:03:a0:02:f5:e4:c2:52:c0:3c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jan 12 08:06:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b18a425981061c1a4fa25f31b39c9485597c408d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:d5:1e:fc:d1:ab:93:c8:97:a8:81:b6:f8:
                    49:4a:b1:ad:44:fb:02:69:61:47:dc:8c:fc:9a:58:
                    c6:30:cf:20:e8:bc:09:42:24:0a:a5:c0:3c:3a:bb:
                    67:dd:0a:c4:16:52:66:5a:d5:98:88:9a:24:d3:1d:
                    42:ae:92:28:70:5a:69:78:1b:87:a9:63:ff:da:66:
                    b5:86:b1:da:2b:fb:ad:b4:d2:0a:ab:5d:fc:76:31:
                    73:a9:d1:46:70:90:89:20:5e:f5:0e:56:ee:5c:a2:
                    d9:08:51:7a:f0:57:85:53:c0:f9:1e:39:3d:f7:8e:
                    3d:99:7e:43:dd:e2:de:10:11:29:6f:a3:6a:1e:31:
                    fe:aa:f9:70:b8:40:1a:14:d6:47:2b:52:10:e6:f0:
                    5b:69:96:2a:05:9f:50:99:cb:3b:3b:fc:ab:79:3e:
                    63:c8:37:ee:fa:8e:49:90:19:a2:0e:23:4b:d2:25:
                    04:58:dd:74:59:61:ee:9c:ea:aa:74:08:a7:a9:90:
                    92:90:fc:1f:ce:e7:b4:b2:29:0e:60:4c:68:d3:64:
                    44:f5:64:91:80:d5:7a:17:ae:60:a4:e3:8b:be:b5:
                    52:07:aa:ec:ca:95:8c:78:34:90:3d:a7:6b:48:b0:
                    80:e2:53:9e:e3:33:c0:77:f8:45:68:d9:9c:4e:3e:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:42:59:81:06:1C:1A:4F:A2:5F:31:B3:9C:94:85:59:7C:40:8D
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/sYpCWYEGHBpPol8xs5yUhVl8QI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:81:29:c1:ac:be:74:b0:c0:b5:de:b5:42:f8:ff:a0:e1:38:
         15:83:24:18:80:7f:a1:64:b5:4d:99:e9:0b:c4:e7:0b:3e:c2:
         ee:f7:c1:2b:73:7c:81:4a:2e:ef:f6:28:b7:d9:9d:8c:01:19:
         17:bc:3b:a5:30:6f:29:6f:0e:b6:fc:3e:86:0b:62:f2:81:d9:
         ef:11:8e:52:aa:b0:eb:89:e1:22:19:83:2b:e3:1f:c8:b6:80:
         2c:12:ca:59:a5:dc:67:87:bf:9f:5c:8b:82:7a:68:fd:09:07:
         ed:4c:0c:e1:4a:ae:e0:6c:7d:58:10:eb:ed:01:c0:a8:0a:9a:
         0d:80:74:05:d6:97:b8:70:73:54:3b:92:08:fc:db:56:ca:df:
         e2:0b:c9:94:9e:68:aa:d7:ba:e8:db:b9:7a:4f:99:75:08:66:
         0b:05:19:f4:60:fd:71:c1:fd:6c:d1:a1:11:9f:e0:f5:f4:d9:
         49:4b:80:bc:0c:3f:3d:ec:8d:d9:fb:c3:2a:ce:2e:eb:17:7c:
         69:2c:eb:4a:b9:de:09:de:28:5d:20:00:a6:f5:ab:f1:39:bf:
         26:1b:43:c7:70:ab:a8:9b:56:1f:90:6b:61:b2:66:77:ae:50:
         cb:52:96:a0:04:8a:56:43:7a:c0:35:90:c9:f0:91:2b:a2:6b:
         eb:af:c7:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZuxPmNyUmQDoAL15MJSwDzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwMTEyMDgwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMThhNDI1OTgxMDYxYzFhNGZhMjVmMzFiMzljOTQ4NTU5N2M0MDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwDVHvzRq5PIl6iBtvhJSrGtRPsC
aWFH3Iz8mljGMM8g6LwJQiQKpcA8Ortn3QrEFlJmWtWYiJok0x1CrpIocFppeBuH
qWP/2ma1hrHaK/uttNIKq138djFzqdFGcJCJIF71DlbuXKLZCFF68FeFU8D5Hjk9
9449mX5D3eLeEBEpb6NqHjH+qvlwuEAaFNZHK1IQ5vBbaZYqBZ9Qmcs7O/yreT5j
yDfu+o5JkBmiDiNL0iUEWN10WWHunOqqdAinqZCSkPwfzue0sikOYExo02RE9WSR
gNV6F65gpOOLvrVSB6rsypWMeDSQPadrSLCA4lOe4zPAd/hFaNmcTj7kAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGKQlmBBhwaT6JfMbOclIVZfECNMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvc1lwQ1dZRUdIQnBQb2w4eHM1eVVoVmw4UUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UoMA0G
CSqGSIb3DQEBCwUAA4IBAQBbgSnBrL50sMC13rVC+P+g4TgVgyQYgH+hZLVNmekL
xOcLPsLu98Erc3yBSi7v9ii32Z2MARkXvDulMG8pbw62/D6GC2LygdnvEY5SqrDr
ieEiGYMr4x/ItoAsEspZpdxnh7+fXIuCemj9CQftTAzhSq7gbH1YEOvtAcCoCpoN
gHQF1pe4cHNUO5II/NtWyt/iC8mUnmiq17ro27l6T5l1CGYLBRn0YP1xwf1s0aER
n+D19NlJS4C8DD897I3Z+8Mqzi7rF3xpLOtKud4J3ihdIACm9avxOb8mG0PHcKuo
m1YfkGthsmZ3rlDLUpagBIpWQ3rANZDJ8JEromvrr8ff
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:28:06 2026 by rpki-client