This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/YsYMCe9LReXjPKopmUA0EjsK0dc.roa
File:                     YsYMCe9LReXjPKopmUA0EjsK0dc.roa (raw, json)
Hash identifier:          y+81aZ09kbsZWCpPgtxvvuaCFjv5jJ1HQMWCIGPci3U=
Subject key identifier:   62:C6:0C:09:EF:4B:45:E5:E3:3C:AA:29:99:40:34:12:3B:0A:D1:D7
Certificate issuer:       /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial:       019B79ED4A6C78117E76311BB1FF8253D899
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/YsYMCe9LReXjPKopmUA0EjsK0dc.roa
Signing time:             Thu 01 Jan 2026 14:19:12 +0000
ROA not before:           Thu 01 Jan 2026 14:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206685
IP address blocks:        159.255.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:4a:6c:78:11:7e:76:31:1b:b1:ff:82:53:d8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
        Validity
            Not Before: Jan  1 14:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=62c60c09ef4b45e5e33caa29994034123b0ad1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:09:5e:75:e2:e9:4f:95:71:6d:dc:6a:df:
                    e6:85:99:af:4c:a7:9d:bd:90:06:f0:2b:6e:38:48:
                    be:e7:c2:74:e8:c5:30:a4:d8:11:e3:38:6e:14:76:
                    e9:e5:59:35:8f:79:cd:f7:79:3d:57:3b:d0:30:88:
                    47:f5:a7:33:26:bd:7f:03:21:74:c1:48:82:75:06:
                    c8:51:20:5a:08:4c:ae:de:10:82:ee:e8:b1:08:1f:
                    be:e7:bb:17:ea:08:6d:30:ad:ca:eb:f5:9e:f9:a8:
                    6f:ea:dc:99:3e:e1:ce:ca:31:95:79:df:42:e2:59:
                    c9:75:da:d2:2e:3c:21:73:b1:86:62:72:e1:d9:23:
                    bd:9c:b6:d3:c6:04:1d:ab:8f:03:43:49:f9:f6:fd:
                    e1:1a:4d:56:d9:19:c7:da:f7:09:11:dc:2b:ce:07:
                    44:d5:58:1d:29:14:99:b0:6e:ca:7a:ff:54:b6:41:
                    95:80:83:4e:75:56:5e:e6:c8:e3:b2:14:a7:1c:e8:
                    40:2b:8a:66:bd:ce:38:0f:b6:ad:bb:15:7d:6d:c7:
                    32:c6:f4:24:31:30:1e:3d:49:74:2d:4e:f0:74:31:
                    90:1e:d3:cf:38:26:b3:aa:6e:54:b2:24:b3:87:d4:
                    ce:30:3d:76:9d:55:ef:72:63:c9:79:7a:be:da:cd:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C6:0C:09:EF:4B:45:E5:E3:3C:AA:29:99:40:34:12:3B:0A:D1:D7
            X509v3 Authority Key Identifier:
                keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/YsYMCe9LReXjPKopmUA0EjsK0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.255.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:4b:1d:bf:35:1c:8c:09:2e:d5:cc:32:cb:ea:7c:75:e7:99:
         6d:62:b0:36:4c:1e:c1:68:00:a6:00:95:f8:72:08:24:6a:fc:
         b9:34:fe:ed:41:7d:70:98:69:bf:41:98:43:c9:06:de:51:3d:
         62:f2:56:c7:1c:57:97:cc:75:bf:b6:95:80:1f:fe:de:88:11:
         ab:0e:91:ac:4b:1f:43:b1:89:aa:75:a2:7a:fd:9a:59:c1:ef:
         a0:42:a5:33:e9:da:ba:51:c1:26:d5:37:32:cc:0f:d3:2a:f0:
         0a:cc:e7:a7:e4:61:a6:71:02:4c:02:e2:3b:96:22:8e:11:b5:
         4e:a2:9a:01:9b:58:2b:07:d4:19:38:b1:c5:0d:dc:c8:c0:8a:
         39:44:7a:3f:68:b4:77:69:f6:12:a6:97:ca:7b:a3:dc:41:64:
         ca:1e:7f:5a:56:94:12:f5:4d:72:20:b3:ba:8b:1e:3b:9c:d0:
         b0:f8:6f:4d:19:a7:b2:52:4d:de:ab:73:d7:92:58:3e:27:b7:
         92:99:e7:4c:d8:31:0f:8b:5b:e0:c8:ec:aa:91:00:d9:6d:79:
         93:da:3a:cc:8c:a6:46:01:db:df:34:18:c0:fa:64:d4:66:64:
         89:2c:d7:42:5d:88:a2:33:fe:e3:ee:43:51:21:af:92:00:4f:
         a2:ec:c3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:23 2026 by rpki-client