This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/yYkIK7iiHzx2jAmuALfuoXQn_Is.roa
File:                     yYkIK7iiHzx2jAmuALfuoXQn_Is.roa (raw, json)
Hash identifier:          gxk/AWSXI5drD+6qtBL8cwOZXbNZIUQAyoeMR1t9KzA=
Subject key identifier:   C9:89:08:2B:B8:A2:1F:3C:76:8C:09:AE:00:B7:EE:A1:74:27:FC:8B
Certificate issuer:       /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial:       019B77C68246688B81E4A0CDF73834CD10F5
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/yYkIK7iiHzx2jAmuALfuoXQn_Is.roa
Signing time:             Thu 01 Jan 2026 04:17:36 +0000
ROA not before:           Thu 01 Jan 2026 04:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29608
IP address blocks:        193.227.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:82:46:68:8b:81:e4:a0:cd:f7:38:34:cd:10:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
        Validity
            Not Before: Jan  1 04:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c989082bb8a21f3c768c09ae00b7eea17427fc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:ef:6e:e6:76:b0:3e:c4:fd:b9:d8:25:ea:
                    2d:9a:c9:4b:d3:08:84:ed:e8:16:0e:ba:01:9d:d7:
                    24:2c:dd:b5:15:f1:34:7c:eb:75:7d:66:17:6d:f8:
                    04:3e:3d:26:0f:8c:53:a2:51:12:de:ba:ed:e6:1f:
                    f1:df:81:30:3b:db:13:be:95:f3:43:68:c0:c7:1f:
                    b5:ff:1e:61:1f:db:8b:6b:8c:ff:5b:a9:2a:f6:34:
                    1b:d6:f9:b6:cc:5d:52:a8:3c:64:ca:6a:cb:49:da:
                    d5:c5:ef:3c:73:a0:0e:6f:a6:fc:57:44:fb:a8:f4:
                    fe:d2:0e:a9:38:99:45:d8:2a:83:42:a5:5a:2a:d8:
                    43:fa:68:4b:8f:27:3f:e7:6b:83:38:3a:66:33:e6:
                    15:38:cc:e4:6c:2d:70:48:55:51:c9:d7:82:4a:01:
                    d6:59:52:54:54:15:d8:e4:23:e4:77:2e:a7:c3:15:
                    87:d9:34:a1:d5:00:d8:a2:30:84:66:c8:04:93:c4:
                    f3:e8:e5:9a:94:b3:53:26:ac:c7:98:0d:d6:47:88:
                    25:2a:ab:66:55:1a:51:59:e4:e9:74:b7:1b:b4:d2:
                    ef:fc:1f:7a:ce:08:7b:91:b6:16:cc:1b:e5:0b:16:
                    af:19:57:ef:a0:e3:9a:aa:b5:13:53:83:8e:ad:4c:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:89:08:2B:B8:A2:1F:3C:76:8C:09:AE:00:B7:EE:A1:74:27:FC:8B
            X509v3 Authority Key Identifier:
                keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/yYkIK7iiHzx2jAmuALfuoXQn_Is.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:9e:14:d9:b5:99:4e:17:1c:19:be:90:ca:ca:5b:db:fc:52:
         1d:12:d1:4c:c4:b6:55:10:dd:31:3d:a5:34:17:78:19:b4:10:
         1f:7d:ed:10:55:98:22:ce:3f:16:b8:43:03:4a:ba:46:8c:3e:
         98:cc:f7:46:1a:3e:1b:0d:88:7d:72:02:07:8f:ed:86:d2:ae:
         b9:f5:dd:62:e6:64:1a:33:1f:94:2d:b3:d0:01:ee:43:e7:63:
         f1:fc:39:01:f0:c1:cb:b8:29:40:c2:b0:86:7d:7c:a8:2d:3a:
         6b:23:9f:31:cd:cb:af:55:36:35:f5:64:10:72:0b:90:15:33:
         a9:cf:53:5a:2b:87:9f:61:63:2f:7a:a1:b2:ef:40:c3:8d:39:
         39:d8:ba:26:cb:72:66:8b:a5:1c:a7:1b:b8:f3:99:1c:14:8c:
         72:dc:48:ea:3b:84:e1:64:98:c4:0c:2e:35:8a:1a:74:f0:fe:
         8e:6b:31:13:16:05:38:e5:c5:4c:a4:38:f0:3a:a0:ed:ba:58:
         33:6f:98:dc:44:c1:6a:02:22:e1:f3:28:db:da:93:2b:bb:e1:
         2f:07:69:e0:eb:9b:a6:97:00:0e:61:04:df:aa:ad:37:12:36:
         6b:70:90:04:41:aa:29:e6:2f:58:5e:44:0d:31:80:c1:27:6f:
         e1:56:6f:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xoJGaIuB5KDN9zg0zRD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjAxZDJlYTFmOTQ4Y2EwMThjMzM1YmVkYTcyZGJlYzA3
OWQ2ZTYwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTg5MDgyYmI4YTIxZjNjNzY4YzA5YWUwMGI3ZWVhMTc0MjdmYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxTvbuZ2sD7E/bnYJeotmslL0wiE
7egWDroBndckLN21FfE0fOt1fWYXbfgEPj0mD4xTolES3rrt5h/x34EwO9sTvpXz
Q2jAxx+1/x5hH9uLa4z/W6kq9jQb1vm2zF1SqDxkymrLSdrVxe88c6AOb6b8V0T7
qPT+0g6pOJlF2CqDQqVaKthD+mhLjyc/52uDODpmM+YVOMzkbC1wSFVRydeCSgHW
WVJUVBXY5CPkdy6nwxWH2TSh1QDYojCEZsgEk8Tz6OWalLNTJqzHmA3WR4glKqtm
VRpRWeTpdLcbtNLv/B96zgh7kbYWzBvlCxavGVfvoOOaqrUTU4OOrUzb/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMmJCCu4oh88dowJrgC37qF0J/yLMB8GA1UdIwQY
MBaAFIpgHS6h+UjKAYwzW+2nLb7AedbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEt
YTQyNTgyMDcwOTQ5LzEveVlrSUs3aWlIengyakFtdUFMZnVvWFFuX0lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEtYTQyNTgyMDcwOTQ5
LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwePkMA0G
CSqGSIb3DQEBCwUAA4IBAQBpnhTZtZlOFxwZvpDKylvb/FIdEtFMxLZVEN0xPaU0
F3gZtBAffe0QVZgizj8WuEMDSrpGjD6YzPdGGj4bDYh9cgIHj+2G0q659d1i5mQa
Mx+ULbPQAe5D52Px/DkB8MHLuClAwrCGfXyoLTprI58xzcuvVTY19WQQcguQFTOp
z1NaK4efYWMveqGy70DDjTk52Lomy3Jmi6Ucpxu485kcFIxy3EjqO4ThZJjEDC41
ihp08P6OazETFgU45cVMpDjwOqDtulgzb5jcRMFqAiLh8yjb2pMru+EvB2ng65um
lwAOYQTfqq03EjZrcJAEQaop5i9YXkQNMYDBJ2/hVm8i
-----END CERTIFICATE-----
Generated at Tue Feb 10 05:55:07 2026 by rpki-client