This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/yPdEnBlETthfb3n2w6_5p1naims.roa
File:                     yPdEnBlETthfb3n2w6_5p1naims.roa (raw, json)
Hash identifier:          FMus24cOQ5H8kqoUzdVY1kxUQ7CnaxtzdvTHW/XwsqU=
Subject key identifier:   C8:F7:44:9C:19:44:4E:D8:5F:6F:79:F6:C3:AF:F9:A7:59:DA:8A:6B
Certificate issuer:       /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial:       019B76EB2ED1467D38D747EFE98F094CE391
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/yPdEnBlETthfb3n2w6_5p1naims.roa
Signing time:             Thu 01 Jan 2026 00:18:02 +0000
ROA not before:           Thu 01 Jan 2026 00:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207813
IP address blocks:        5.252.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:2e:d1:46:7d:38:d7:47:ef:e9:8f:09:4c:e3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
        Validity
            Not Before: Jan  1 00:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c8f7449c19444ed85f6f79f6c3aff9a759da8a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:c3:97:00:83:d1:cc:df:17:2f:8f:8a:4b:
                    c5:d6:7d:4e:30:74:ef:49:c9:d6:16:4e:ce:38:89:
                    52:3c:a3:5c:27:b7:32:fe:a4:bb:5c:43:2a:30:72:
                    61:59:b2:56:39:69:fd:e8:70:a7:c4:a6:f1:dc:2e:
                    74:f9:bb:78:dd:7e:d7:fe:ad:83:e7:7f:99:1d:23:
                    15:ca:5b:41:b4:ff:6c:5f:6b:59:82:86:b5:d7:c2:
                    e6:58:59:6a:32:e4:c8:3e:ff:23:bb:95:e5:f8:fb:
                    0f:09:93:99:10:25:ee:33:2a:77:e1:bb:39:ac:9e:
                    60:cf:6a:a0:18:76:de:24:14:95:66:28:62:08:81:
                    cb:6e:37:3b:88:d1:ea:39:f5:b7:13:1d:94:1f:1b:
                    18:f9:64:5f:f8:a2:f0:ff:34:e1:30:0e:7d:a4:b8:
                    23:a1:7c:0c:84:fe:be:30:dc:d6:8c:ef:23:41:b4:
                    2a:a2:ef:09:02:95:b4:87:55:ec:34:bb:ba:93:fe:
                    86:07:f9:b7:bd:2e:e3:c8:37:6e:2e:c5:45:35:a1:
                    2d:33:d7:6c:88:d6:3b:1a:32:ac:85:97:1d:51:aa:
                    17:da:cd:fb:6b:97:0a:9f:e2:22:5a:f3:e7:8a:0b:
                    a2:01:3e:f1:15:26:a4:15:37:85:a3:c2:d4:90:78:
                    06:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:44:9C:19:44:4E:D8:5F:6F:79:F6:C3:AF:F9:A7:59:DA:8A:6B
            X509v3 Authority Key Identifier:
                keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/yPdEnBlETthfb3n2w6_5p1naims.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         eb:8e:dc:08:f2:3c:3f:e7:d7:2a:bf:3f:28:cb:e3:8c:fd:5d:
         43:da:53:95:24:7b:ab:b5:fc:00:4d:3a:bb:a9:ae:cb:36:62:
         cc:8f:70:f2:ee:ba:e6:de:da:b4:1f:75:86:1a:14:1d:b1:7d:
         fb:b9:09:b2:93:5d:9d:56:2b:15:73:39:be:f8:4b:c4:30:d4:
         f4:27:49:ff:b3:fe:ad:87:f5:76:b2:1d:ed:fb:eb:10:26:8e:
         a6:d7:d8:81:80:5d:c2:97:6f:56:8f:51:62:b2:85:32:6b:bb:
         a4:ec:2b:09:24:3d:aa:6a:dc:12:f1:af:f9:2f:d4:97:09:66:
         a6:38:98:14:ee:01:f8:79:b5:0e:7b:e9:03:fa:5b:26:c4:c6:
         be:0f:86:75:2a:cc:ac:2a:be:20:dd:05:8b:c8:31:bb:c1:30:
         5f:c9:bb:7c:bf:35:0d:2d:ba:4f:95:0b:55:27:a2:02:19:00:
         5a:ef:20:a4:45:79:0c:4c:26:3a:16:c6:3a:a9:f2:73:16:58:
         86:a4:96:e3:e0:8e:1c:c4:af:71:80:33:da:3e:bc:a4:08:a2:
         41:5e:4a:ee:dd:ad:0a:22:b4:e2:79:e3:61:7b:48:2e:6f:94:
         7c:7d:fb:c5:c3:3e:2c:c8:bc:25:6b:30:55:b1:16:5c:f0:5d:
         4d:09:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:23 2026 by rpki-client