This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/ynQWqqRQzgYY2w7C-ZLiYaA0Cxo.roa
File:                     ynQWqqRQzgYY2w7C-ZLiYaA0Cxo.roa (raw, json)
Hash identifier:          tf5X3dbrn9gwldWFkRsRF/32dVlJk97Ns13Rw6axOok=
Subject key identifier:   CA:74:16:AA:A4:50:CE:06:18:DB:0E:C2:F9:92:E2:61:A0:34:0B:1A
Certificate issuer:       /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial:       019B7E38EACAA5E1428304B366E902C845CD
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/ynQWqqRQzgYY2w7C-ZLiYaA0Cxo.roa
Signing time:             Fri 02 Jan 2026 10:20:17 +0000
ROA not before:           Fri 02 Jan 2026 10:20:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210728
IP address blocks:        194.26.103.0/24 maxlen: 24
                          2a11:2440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:ea:ca:a5:e1:42:83:04:b3:66:e9:02:c8:45:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
        Validity
            Not Before: Jan  2 10:20:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca7416aaa450ce0618db0ec2f992e261a0340b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:90:1c:a0:80:8b:98:b8:99:59:79:86:f8:
                    2f:09:74:fe:4d:42:80:21:9c:27:1c:e7:f9:a6:ed:
                    a9:3b:b5:95:d6:a2:11:65:ed:87:77:bf:16:54:99:
                    6d:35:39:9f:87:f2:5d:32:6f:a2:c7:94:bf:dc:a3:
                    8e:cf:a2:47:89:05:d6:72:b3:a7:69:b0:d3:4a:18:
                    b0:40:43:c1:b9:51:5b:b4:02:53:44:73:58:a1:19:
                    67:44:e2:93:ff:d6:ed:b0:98:72:74:32:13:3a:5b:
                    95:a4:21:0a:0e:9e:e4:e9:2b:aa:ec:b7:49:b2:e5:
                    ab:69:93:4c:97:c2:2e:42:23:b6:5c:2d:69:72:a6:
                    3e:ae:a4:e8:bf:a0:11:f0:5d:a3:4d:50:4e:11:0e:
                    10:2e:17:16:6d:54:a0:91:61:f0:5a:f7:61:65:2a:
                    5b:f1:32:07:93:9c:c8:70:d0:b4:e5:34:33:25:cb:
                    cf:08:6c:af:c8:33:5a:1e:b6:85:b3:8e:c9:7c:90:
                    0a:e0:01:4e:88:a2:3d:83:ea:ba:80:0d:b2:d6:18:
                    9c:f8:5f:d3:dc:9f:62:39:f0:15:85:b5:ae:67:d3:
                    5c:ee:4a:93:0b:bd:ee:d2:5a:41:73:9c:ed:b6:0f:
                    2e:54:29:34:1d:b6:de:e7:b4:26:33:c3:b5:b3:8f:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:74:16:AA:A4:50:CE:06:18:DB:0E:C2:F9:92:E2:61:A0:34:0B:1A
            X509v3 Authority Key Identifier:
                keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/ynQWqqRQzgYY2w7C-ZLiYaA0Cxo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.103.0/24
                IPv6:
                  2a11:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:bf:21:9f:3a:bb:07:2f:a7:68:69:41:cb:ae:d3:4f:a0:be:
         3d:dd:b6:bd:b6:5e:f6:4a:00:b0:3e:c3:72:88:26:9d:15:34:
         80:91:37:fb:a8:c0:98:45:32:8a:89:b6:6d:c5:f8:5a:39:2e:
         ba:9a:85:50:4f:de:27:59:9a:54:fc:3c:d1:05:e6:72:51:b7:
         8c:95:f6:45:35:ab:33:3c:13:9e:c5:8f:bc:17:30:a2:7b:98:
         74:80:26:80:3b:13:f3:85:b1:f2:ee:47:05:5c:08:8f:12:b0:
         c4:95:b0:ae:e1:e8:db:db:2f:e0:56:ca:57:a7:89:73:ec:a2:
         a1:13:a1:91:ac:38:4a:a3:e1:a1:a9:3c:bb:7c:8e:32:f9:65:
         9f:f1:38:6a:99:88:9b:c2:7d:b7:27:e9:6d:7e:c2:18:91:2c:
         a0:b2:ad:32:04:09:70:4a:8d:d2:2a:ed:68:38:e1:98:f3:6b:
         ba:4e:ec:5e:f5:66:7e:e8:3a:ed:40:fc:af:84:94:8f:7a:3f:
         ce:9b:0d:bd:34:b1:a3:a9:c2:7b:03:87:c6:b0:99:ba:82:51:
         fe:01:00:da:de:86:93:d1:bf:96:00:f2:e7:dc:6c:ed:d9:e4:
         13:c4:94:50:5f:8c:99:09:b8:8f:30:68:05:3b:f4:c0:c7:fb:
         32:2f:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:22 2026 by rpki-client