This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/o__yenjb_byTDMgOBxUzVji8MJk.roa
File:                     o__yenjb_byTDMgOBxUzVji8MJk.roa (raw, json)
Hash identifier:          i3sG4QUVi7SpGaea2GgrwUuE6uMpXt1hzOEHLJcR4vo=
Subject key identifier:   A3:FF:F2:7A:78:DB:FD:BC:93:0C:C8:0E:07:15:33:56:38:BC:30:99
Certificate issuer:       /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial:       019B7F15843C353A440599A999C0D2DF7FB0
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/o__yenjb_byTDMgOBxUzVji8MJk.roa
Signing time:             Fri 02 Jan 2026 14:21:15 +0000
ROA not before:           Fri 02 Jan 2026 14:21:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9087
IP address blocks:        193.46.0.0/24 maxlen: 24
                          193.46.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:84:3c:35:3a:44:05:99:a9:99:c0:d2:df:7f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
        Validity
            Not Before: Jan  2 14:21:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a3fff27a78dbfdbc930cc80e0715335638bc3099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:35:08:e7:fd:02:96:6c:c1:c0:7f:de:fc:3f:
                    31:ea:da:c5:ff:54:2a:02:ff:1e:36:1e:ee:d3:8f:
                    a5:2b:54:d1:8f:bb:7a:05:47:2f:de:b1:e1:31:73:
                    38:a6:78:14:c6:c7:e8:9f:0a:be:54:ae:ff:60:2a:
                    68:89:1b:c2:b8:31:26:3e:7c:d5:23:b7:55:c2:7f:
                    12:da:7b:59:9e:f1:c4:8e:14:fc:e2:d7:56:3e:ff:
                    a2:bf:02:5e:45:3d:27:ec:ca:24:61:a3:d6:ee:bc:
                    f7:df:6f:63:02:fe:38:25:11:c6:aa:1b:f5:97:60:
                    62:34:47:62:0f:4b:95:5c:03:2f:7d:d1:d5:18:82:
                    c3:60:c6:fe:f0:04:be:dd:e8:aa:23:81:b5:9b:f6:
                    87:5c:e2:2b:be:e9:09:66:2f:ad:33:df:e5:67:99:
                    11:95:67:6e:07:5b:89:65:0c:f9:71:c1:8b:9a:78:
                    2e:2c:15:3c:09:ec:bb:f4:19:b5:ab:68:50:83:39:
                    c3:19:91:2b:ad:4e:48:25:45:9a:ed:2b:97:65:0a:
                    75:44:5d:56:c5:0d:ff:cd:9d:5f:71:65:e5:48:4d:
                    f8:12:4b:57:b6:9c:57:11:7f:62:5e:b5:06:24:f7:
                    e3:b5:a8:6f:78:82:1a:4f:aa:2b:1f:d2:e9:de:0b:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FF:F2:7A:78:DB:FD:BC:93:0C:C8:0E:07:15:33:56:38:BC:30:99
            X509v3 Authority Key Identifier:
                keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/o__yenjb_byTDMgOBxUzVji8MJk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.0.0/24
                  193.46.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:32:61:29:27:0b:96:07:e1:48:76:70:03:b5:a6:b8:db:94:
         d6:47:d6:95:05:1c:89:77:99:ea:e5:12:fc:ad:32:ac:f7:62:
         d6:05:20:b5:e8:b9:77:dd:e9:17:19:a1:8b:d3:41:c4:62:19:
         3e:40:85:af:d5:76:64:5c:50:eb:a3:7d:af:f9:cc:c6:c4:33:
         ef:59:a0:4f:56:6a:2f:57:cb:79:fc:73:10:61:d3:69:31:46:
         bb:86:be:15:2c:81:50:ab:3b:a9:a7:83:f7:e9:40:f6:7c:85:
         74:71:44:ad:53:36:3f:15:5c:a0:66:fc:4e:2f:e9:e4:a5:09:
         80:49:64:06:d6:cb:66:68:46:34:82:da:fd:0b:fd:16:f8:e3:
         74:d1:40:49:95:b1:a0:e6:54:a1:04:4c:b4:2a:4d:62:3c:33:
         0b:0b:a2:21:78:a8:62:b2:5f:20:c1:e5:48:69:f7:e6:fe:a4:
         e6:9a:d1:e3:20:08:cb:ac:a5:bd:32:e1:20:e0:de:c1:54:9c:
         ab:9e:0e:3f:7c:c6:77:7e:11:11:92:d7:97:ed:29:4a:7d:12:
         7a:f5:86:2e:ae:1e:fb:31:54:d6:80:01:7c:17:b7:7d:6e:ae:
         c1:76:a7:be:20:60:a0:14:40:12:b9:8e:da:57:ab:d6:dc:da:
         fd:2f:e0:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt/FYQ8NTpEBZmpmcDS33+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmE2MjU1ZGVkYWExYTFiNmIxN2NiOGVhOTFlMDJkNDEy
Yjg3MTgwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2ZmZjI3YTc4ZGJmZGJjOTMwY2M4MGUwNzE1MzM1NjM4YmMzMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzUI5/0ClmzBwH/e/D8x6trF/1Qq
Av8eNh7u04+lK1TRj7t6BUcv3rHhMXM4pngUxsfonwq+VK7/YCpoiRvCuDEmPnzV
I7dVwn8S2ntZnvHEjhT84tdWPv+ivwJeRT0n7MokYaPW7rz3329jAv44JRHGqhv1
l2BiNEdiD0uVXAMvfdHVGILDYMb+8AS+3eiqI4G1m/aHXOIrvukJZi+tM9/lZ5kR
lWduB1uJZQz5ccGLmnguLBU8Cey79Bm1q2hQgznDGZErrU5IJUWa7SuXZQp1RF1W
xQ3/zZ1fcWXlSE34EktXtpxXEX9iXrUGJPfjtahveIIaT6orH9Lp3guyxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKP/8np42/28kwzIDgcVM1Y4vDCZMB8GA1UdIwQY
MBaAFF+6YlXe2qGhtrF8uOqR4C1BK4cYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEt
NjFlNTEyYmEyNWI3LzEvb19feWVuamJfYnlURE1nT0J4VXpWamk4TUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEtNjFlNTEyYmEyNWI3
LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS4AAwQA
wS7IMA0GCSqGSIb3DQEBCwUAA4IBAQAIMmEpJwuWB+FIdnADtaa425TWR9aVBRyJ
d5nq5RL8rTKs92LWBSC16Ll33ekXGaGL00HEYhk+QIWv1XZkXFDro32v+czGxDPv
WaBPVmovV8t5/HMQYdNpMUa7hr4VLIFQqzupp4P36UD2fIV0cUStUzY/FVygZvxO
L+nkpQmASWQG1stmaEY0gtr9C/0W+ON00UBJlbGg5lShBEy0Kk1iPDMLC6IheKhi
sl8gweVIaffm/qTmmtHjIAjLrKW9MuEg4N7BVJyrng4/fMZ3fhERkteX7SlKfRJ6
9YYurh77MVTWgAF8F7d9bq7Bdqe+IGCgFEASuY7aV6vW3Nr9L+Am
-----END CERTIFICATE-----
Generated at Wed Jan 21 15:37:13 2026 by rpki-client