This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/yStu7fUJ4d3XFcfOQg22LsTiouA.roa
File:                     yStu7fUJ4d3XFcfOQg22LsTiouA.roa (raw, json)
Hash identifier:          ctxQ3m3dI3y/AfnIPbS2bBuBtxSFTcTZOSoaflEqyZo=
Subject key identifier:   C9:2B:6E:ED:F5:09:E1:DD:D7:15:C7:CE:42:0D:B6:2E:C4:E2:A2:E0
Certificate issuer:       /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial:       019B7EA6D4F8A983919FBAD11DC7D5ADAAE1
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/yStu7fUJ4d3XFcfOQg22LsTiouA.roa
Signing time:             Fri 02 Jan 2026 12:20:21 +0000
ROA not before:           Fri 02 Jan 2026 12:20:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197864
IP address blocks:        195.225.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:d4:f8:a9:83:91:9f:ba:d1:1d:c7:d5:ad:aa:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
        Validity
            Not Before: Jan  2 12:20:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c92b6eedf509e1ddd715c7ce420db62ec4e2a2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:b6:55:d5:df:11:ce:5e:47:d3:23:50:a5:
                    2b:63:da:97:04:0c:1e:0e:8b:62:7a:8b:e1:bf:1e:
                    c0:c4:c8:42:70:55:7e:ee:92:40:3d:15:a7:67:c8:
                    bc:6b:3a:43:32:11:9b:01:58:f9:e4:66:2e:2a:90:
                    47:3c:c4:b4:61:77:31:96:98:ab:0c:5c:dd:a5:99:
                    62:8e:2b:ef:f4:65:13:bc:4c:a1:72:0b:de:2c:24:
                    27:fc:c0:25:47:27:72:f5:d2:e3:72:eb:3f:2c:3a:
                    c8:29:c3:60:2d:48:5a:7e:a0:50:f1:27:d4:a5:f6:
                    f4:bf:7d:6f:eb:a5:e0:15:71:c5:bb:a1:8f:35:a0:
                    79:cf:64:d6:58:4a:99:7e:39:b9:88:31:1c:51:87:
                    53:09:e1:a2:d6:bb:ac:bc:49:6d:3c:4a:66:d3:16:
                    cd:89:07:24:ed:f6:ee:36:7f:f5:69:70:7f:9b:a5:
                    2a:c8:d6:9b:6b:fc:8a:d2:9e:f7:c5:43:26:44:fe:
                    78:30:7e:ae:6c:d0:b3:3d:80:12:f8:c6:bf:53:52:
                    d3:9b:f4:d0:69:6a:b2:ad:c0:a9:2b:4e:1c:f3:98:
                    16:80:34:bd:d9:02:f8:12:96:0e:23:fb:f0:ec:86:
                    68:4a:ce:22:30:84:44:e9:c3:16:71:63:a3:6a:df:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2B:6E:ED:F5:09:E1:DD:D7:15:C7:CE:42:0D:B6:2E:C4:E2:A2:E0
            X509v3 Authority Key Identifier:
                keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/yStu7fUJ4d3XFcfOQg22LsTiouA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.225.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:eb:5d:9b:70:9a:ef:c0:5f:f0:11:bb:e9:8d:6a:68:88:
         e0:79:b3:8d:4b:ba:ed:80:02:79:b7:5e:74:7d:78:92:15:37:
         e1:d4:46:81:db:66:d1:b6:6d:55:c5:60:8c:ce:dc:4d:ac:4c:
         a8:00:7c:fb:1b:e6:22:69:47:f4:3f:16:48:16:56:41:6e:87:
         7f:2d:2d:8c:33:37:14:0e:87:4f:32:64:cd:c6:77:7b:c4:56:
         e2:8c:ce:15:e3:59:3b:ce:f6:40:c5:2c:a2:09:a5:e8:eb:4a:
         33:8c:c8:08:e7:37:8a:42:69:43:fa:53:29:42:e2:9a:3f:fa:
         af:1a:f9:4e:b6:da:27:d1:11:a8:6c:44:2e:b4:02:bc:cc:40:
         41:fc:99:b2:6f:e7:73:0c:ba:05:3a:b2:19:d4:70:2f:49:27:
         4c:70:00:1a:3e:be:68:fd:c0:ce:c3:9d:8e:96:4f:23:9f:de:
         a8:ad:a0:ff:84:b0:1f:ec:d0:ae:f9:e6:85:02:a2:22:13:ae:
         a2:47:21:a1:6d:88:23:56:65:bd:24:0d:6b:b6:dc:4c:66:96:
         c5:df:2c:41:11:4a:25:f6:d7:a8:3a:85:79:e4:8f:98:c9:e4:
         7a:89:5f:f0:ec:7c:fb:fe:40:01:91:0d:00:76:e3:3b:b2:ea:
         48:dd:a3:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+ptT4qYORn7rRHcfVrarhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjZjMjM4ZjdmZmRhY2YxNWM4MDJlMzIwYjUyZTA5ODA4
NjljZWMwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTJiNmVlZGY1MDllMWRkZDcxNWM3Y2U0MjBkYjYyZWM0ZTJhMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ62VdXfEc5eR9MjUKUrY9qXBAwe
Dotieovhvx7AxMhCcFV+7pJAPRWnZ8i8azpDMhGbAVj55GYuKpBHPMS0YXcxlpir
DFzdpZlijivv9GUTvEyhcgveLCQn/MAlRydy9dLjcus/LDrIKcNgLUhafqBQ8SfU
pfb0v31v66XgFXHFu6GPNaB5z2TWWEqZfjm5iDEcUYdTCeGi1rusvEltPEpm0xbN
iQck7fbuNn/1aXB/m6UqyNaba/yK0p73xUMmRP54MH6ubNCzPYAS+Ma/U1LTm/TQ
aWqyrcCpK04c85gWgDS92QL4EpYOI/vw7IZoSs4iMIRE6cMWcWOjat9x8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkrbu31CeHd1xXHzkINti7E4qLgMB8GA1UdIwQY
MBaAFJZmwjj3/9rPFcgC4yC1LgmAhpzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzIt
YTAwMGQ3NjllMDI2LzEveVN0dTdmVUo0ZDNYRmNmT1FnMjJMc1Rpb3VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81MDc1M2EtOTFhYS00NDdiLWIyMzItYTAwMGQ3NjllMDI2
LzEvbG1iQ09QZl8yczhWeUFMaklMVXVDWUNHbk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+EyMA0G
CSqGSIb3DQEBCwUAA4IBAQBH/+tdm3Ca78Bf8BG76Y1qaIjgebONS7rtgAJ5t150
fXiSFTfh1EaB22bRtm1VxWCMztxNrEyoAHz7G+YiaUf0PxZIFlZBbod/LS2MMzcU
DodPMmTNxnd7xFbijM4V41k7zvZAxSyiCaXo60ozjMgI5zeKQmlD+lMpQuKaP/qv
GvlOtton0RGobEQutAK8zEBB/Jmyb+dzDLoFOrIZ1HAvSSdMcAAaPr5o/cDOw52O
lk8jn96oraD/hLAf7NCu+eaFAqIiE66iRyGhbYgjVmW9JA1rttxMZpbF3yxBEUol
9teoOoV55I+YyeR6iV/w7Hz7/kABkQ0AduM7supI3aP0
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:03 2026 by rpki-client