This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/y0EOGWIKk7WR342AYtoS4ft8s8g.roa
File:                     y0EOGWIKk7WR342AYtoS4ft8s8g.roa (raw, json)
Hash identifier:          F6PTeIw5ik/EvHxhZTEzM2YWypGnV0TJXxvPjQa9SsU=
Subject key identifier:   CB:41:0E:19:62:0A:93:B5:91:DF:8D:80:62:DA:12:E1:FB:7C:B3:C8
Certificate issuer:       /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial:       019B7758AEE61442DAAE543FE2307F4A014E
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/y0EOGWIKk7WR342AYtoS4ft8s8g.roa
Signing time:             Thu 01 Jan 2026 02:17:39 +0000
ROA not before:           Thu 01 Jan 2026 02:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209846
IP address blocks:        192.16.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:ae:e6:14:42:da:ae:54:3f:e2:30:7f:4a:01:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
        Validity
            Not Before: Jan  1 02:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cb410e19620a93b591df8d8062da12e1fb7cb3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:fd:37:ee:5e:20:71:f0:db:75:4d:d2:72:
                    03:76:c6:5f:7a:a0:42:c6:06:d4:56:fe:2b:13:56:
                    06:d2:95:3f:96:5b:f4:07:e0:26:66:eb:53:ac:c7:
                    88:68:ff:31:66:a9:96:06:4a:d7:70:36:50:ea:96:
                    8b:42:9f:46:e4:f8:4a:e0:a4:e2:35:e7:8e:b0:4f:
                    aa:7f:c7:96:c6:3a:d2:3d:c9:12:5f:8f:65:d5:dc:
                    9a:2a:c8:cc:78:ad:9c:e7:26:80:b7:eb:a2:c6:89:
                    57:4e:d5:0e:99:0d:57:26:4f:95:2a:23:5f:58:b2:
                    b4:1d:e1:cd:1f:13:7f:57:f4:03:78:39:26:b1:ef:
                    56:77:bc:4e:a0:ca:f0:7f:39:3c:e3:2c:b4:18:a1:
                    63:c1:65:59:69:2a:63:a8:e6:f2:c2:34:e9:f0:ef:
                    1d:63:cb:e5:15:9c:bc:1f:ff:45:ab:99:a2:f2:e4:
                    63:b3:29:03:98:21:9d:96:db:5e:ad:91:ce:fc:fe:
                    31:0f:ad:dd:f1:75:43:61:f0:7b:4c:ec:54:c5:99:
                    42:e6:2d:c7:83:63:d2:9e:08:f1:b0:8e:24:89:f2:
                    cd:27:3a:40:ab:d0:d2:9b:f7:2a:4e:42:24:74:ce:
                    67:05:27:cb:12:e9:84:d1:4f:d0:bc:1c:a3:e1:1c:
                    99:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:0E:19:62:0A:93:B5:91:DF:8D:80:62:DA:12:E1:FB:7C:B3:C8
            X509v3 Authority Key Identifier:
                keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/y0EOGWIKk7WR342AYtoS4ft8s8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a1:36:8d:eb:29:91:bb:58:4c:d3:cf:fe:2d:be:5f:ef:0f:
         54:3d:41:ac:45:18:07:5b:d2:1c:f8:c9:74:58:ec:43:c4:6d:
         ff:a5:0a:96:ca:31:20:59:0d:ad:aa:46:3d:40:3f:38:11:6a:
         e1:c3:78:81:b4:a3:cd:c4:60:aa:51:5c:1e:88:cf:26:d9:a5:
         b2:0e:d8:2a:3f:e0:7e:4c:71:28:c2:55:d9:82:56:e7:40:f3:
         3f:cf:38:ae:1a:d0:38:7d:31:23:bf:55:e8:be:51:5b:42:e2:
         12:7a:94:4f:19:68:35:ff:78:2e:08:7f:98:8b:38:4f:34:4b:
         98:bb:6f:4c:a9:b8:2d:8b:e5:24:ad:93:8f:dd:64:9b:e8:d2:
         de:97:f5:a5:ed:8f:9a:e2:b7:93:b6:3f:c5:f6:6b:af:54:0d:
         f2:3f:30:0a:c2:2b:9a:07:57:f6:78:0a:2b:5d:33:f7:38:02:
         83:8a:56:fa:e8:da:4f:7e:81:e1:10:1b:3e:2a:83:31:de:e3:
         1d:0a:6f:22:62:4d:4e:29:b7:e5:b4:6a:6d:d1:3c:89:8e:33:
         e7:b4:e5:61:ff:76:88:9c:e2:74:00:a4:dd:67:fd:4c:42:f9:
         c0:ea:63:a1:9b:04:86:74:53:a4:fa:32:69:35:e0:a2:83:86:
         84:88:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:46:48 2026 by rpki-client