This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/_Myr3fZN1tCVYld8vCIdG7V1e8k.roa
File:                     _Myr3fZN1tCVYld8vCIdG7V1e8k.roa (raw, json)
Hash identifier:          UdvBEvfyvQ6h8H0q4zyZtW4WPV4vjg0onxiSmal+y2E=
Subject key identifier:   FC:CC:AB:DD:F6:4D:D6:D0:95:62:57:7C:BC:22:1D:1B:B5:75:7B:C9
Certificate issuer:       /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial:       019B78A2C58E54AB6357FBCAFC2963B2DA2B
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/_Myr3fZN1tCVYld8vCIdG7V1e8k.roa
Signing time:             Thu 01 Jan 2026 08:18:11 +0000
ROA not before:           Thu 01 Jan 2026 08:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201634
IP address blocks:        185.69.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:c5:8e:54:ab:63:57:fb:ca:fc:29:63:b2:da:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
        Validity
            Not Before: Jan  1 08:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fcccabddf64dd6d09562577cbc221d1bb5757bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f4:4f:cd:04:84:fc:79:a2:36:46:d3:ff:64:
                    68:fc:09:36:0b:99:96:45:55:59:ac:80:08:6e:b1:
                    35:71:4f:e6:91:06:50:24:ec:3c:25:c2:35:8d:cc:
                    17:66:55:31:74:56:ac:24:bd:b6:f3:88:aa:ea:c0:
                    a2:b3:d6:0a:d6:a3:d6:5d:7a:dc:5b:5b:12:86:bb:
                    22:31:3b:c5:85:6d:ad:9f:94:3b:04:25:0d:76:be:
                    12:aa:de:cb:bf:32:bc:dc:2e:28:eb:2f:5b:f6:ea:
                    2b:10:b1:e7:85:28:bb:ec:a7:4d:b9:11:d2:a7:e1:
                    09:7c:d4:a1:a2:9b:84:ac:71:d2:aa:ac:8c:28:d7:
                    d9:56:12:35:17:06:49:26:17:f5:ad:e2:3e:ab:fc:
                    65:de:3b:50:20:f6:00:f6:9d:42:14:c8:fa:9e:9c:
                    c7:80:f3:22:40:cb:8e:d8:ec:92:56:d3:18:b3:25:
                    8f:dc:b0:8a:8b:be:a5:36:12:a5:b5:b9:d8:b2:f8:
                    77:13:7c:66:8e:4e:e7:78:e1:ea:d4:e9:f7:8d:c3:
                    42:04:30:84:94:16:3d:6b:7a:ae:98:86:16:73:6f:
                    e8:3e:93:ca:26:5e:20:e4:5d:92:8a:9e:c7:7d:e9:
                    21:7c:99:35:04:1a:7d:36:77:69:30:7e:b5:a8:56:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CC:AB:DD:F6:4D:D6:D0:95:62:57:7C:BC:22:1D:1B:B5:75:7B:C9
            X509v3 Authority Key Identifier:
                keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/_Myr3fZN1tCVYld8vCIdG7V1e8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:00:fb:ad:1f:81:f0:ab:0b:f6:fc:c1:50:20:16:6f:09:30:
         f1:5a:b4:59:9e:5b:cc:51:14:dd:a5:c7:ff:ea:d3:c5:0b:27:
         ba:c9:a7:13:cb:9c:23:e8:33:0f:e0:93:9f:f9:14:75:94:5f:
         58:ff:a2:ad:84:c0:e7:9c:b1:22:bf:f7:19:a8:ed:7c:e2:1b:
         1b:1d:80:bd:5b:98:43:d9:87:7e:7d:ab:bf:9f:17:e2:45:15:
         bd:bb:ad:32:77:c0:3d:2b:9d:2b:b1:c4:0b:e7:9a:87:12:73:
         27:b6:00:67:84:ed:7e:39:b5:47:84:8c:75:9a:25:89:58:fb:
         9c:b9:08:27:a1:d1:31:75:14:9e:f8:d3:16:f7:ed:f0:23:51:
         b4:89:5a:d3:ff:91:ec:01:74:e5:df:53:44:b6:a1:6c:1e:b2:
         6a:cf:0d:d6:4b:fb:32:39:5d:18:44:0b:9c:b0:87:b9:46:86:
         bc:3c:c0:c4:d7:27:4c:d0:50:60:5e:22:e4:09:09:c7:8e:18:
         56:2d:ca:d6:24:f2:a6:3c:f4:65:a1:c7:89:99:3c:b6:2f:25:
         57:09:a3:b3:09:c3:0e:12:74:37:ca:e8:7f:4d:b4:a8:2f:b0:
         ef:e5:aa:e5:7a:f4:51:5d:29:0e:b7:11:38:72:d6:e8:bb:5c:
         6c:c3:58:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4osWOVKtjV/vK/CljstorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj
MGRkMWIwHhcNMjYwMTAxMDgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2NjYWJkZGY2NGRkNmQwOTU2MjU3N2NiYzIyMWQxYmI1NzU3YmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vRPzQSE/HmiNkbT/2Ro/Ak2C5mW
RVVZrIAIbrE1cU/mkQZQJOw8JcI1jcwXZlUxdFasJL2284iq6sCis9YK1qPWXXrc
W1sShrsiMTvFhW2tn5Q7BCUNdr4Sqt7LvzK83C4o6y9b9uorELHnhSi77KdNuRHS
p+EJfNShopuErHHSqqyMKNfZVhI1FwZJJhf1reI+q/xl3jtQIPYA9p1CFMj6npzH
gPMiQMuO2OySVtMYsyWP3LCKi76lNhKltbnYsvh3E3xmjk7neOHq1On3jcNCBDCE
lBY9a3qumIYWc2/oPpPKJl4g5F2Sip7HfekhfJk1BBp9NndpMH61qFbpFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPzMq932TdbQlWJXfLwiHRu1dXvJMB8GA1UdIwQY
MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt
ZDdmNDVlMGE3NzM2LzEvX015cjNmWk4xdENWWWxkOHZDSWRHN1YxZThrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2
LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUUgMA0G
CSqGSIb3DQEBCwUAA4IBAQCZAPutH4Hwqwv2/MFQIBZvCTDxWrRZnlvMURTdpcf/
6tPFCye6yacTy5wj6DMP4JOf+RR1lF9Y/6KthMDnnLEiv/cZqO184hsbHYC9W5hD
2Yd+fau/nxfiRRW9u60yd8A9K50rscQL55qHEnMntgBnhO1+ObVHhIx1miWJWPuc
uQgnodExdRSe+NMW9+3wI1G0iVrT/5HsAXTl31NEtqFsHrJqzw3WS/syOV0YRAuc
sIe5Roa8PMDE1ydM0FBgXiLkCQnHjhhWLcrWJPKmPPRloceJmTy2LyVXCaOzCcMO
EnQ3yuh/TbSoL7Dv5arlevRRXSkOtxE4ctbou1xsw1ju
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:30 2026 by rpki-client