This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/bYA_hDz-uHsDwzycumiOlbXWrtA.roa
File:                     bYA_hDz-uHsDwzycumiOlbXWrtA.roa (raw, json)
Hash identifier:          Yl9BNnwj6zQSqqxSRXXKmcquJUlgVyqLxCnPkLZIOXw=
Subject key identifier:   6D:80:3F:84:3C:FE:B8:7B:03:C3:3C:9C:BA:68:8E:95:B5:D6:AE:D0
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       019B76EBA0B1B70C46ACCF7A92D5E69D227B
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/bYA_hDz-uHsDwzycumiOlbXWrtA.roa
Signing time:             Thu 01 Jan 2026 00:18:32 +0000
ROA not before:           Thu 01 Jan 2026 00:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        62.228.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:a0:b1:b7:0c:46:ac:cf:7a:92:d5:e6:9d:22:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan  1 00:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d803f843cfeb87b03c33c9cba688e95b5d6aed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:c8:0d:a0:c5:9a:82:4f:9d:02:9c:c3:63:
                    84:fd:8a:d2:99:23:28:64:7b:5f:44:7a:15:54:43:
                    5b:ec:a0:6d:ad:c6:8b:4c:6c:e4:31:d9:e8:62:d9:
                    b0:69:d4:7f:95:d3:b7:56:83:f6:73:dc:6f:62:d9:
                    1a:26:50:4d:44:52:12:55:16:10:e7:2e:97:ca:00:
                    98:4f:30:c2:59:bb:69:3d:8f:fe:a3:28:ad:63:a8:
                    90:d2:f9:70:58:57:57:83:94:e3:72:97:0a:30:9c:
                    88:75:3d:8a:a2:1a:a8:ab:29:59:d2:c1:25:0d:da:
                    dc:fc:8d:23:c3:95:73:6f:85:d2:ce:c7:34:82:c4:
                    ac:9e:fa:8a:ec:61:f1:72:d7:e1:cc:c2:86:33:09:
                    7d:df:42:b7:b0:ba:42:c3:34:0e:3f:a1:e2:fb:36:
                    e5:66:8e:e6:de:de:71:53:20:f2:a4:2a:15:9b:8c:
                    e4:38:c2:28:03:35:fe:ee:f3:3d:00:51:47:32:0e:
                    2e:38:16:17:5f:7e:79:0d:7d:f5:e8:e2:53:06:d9:
                    2d:fb:ab:08:4e:4c:4e:d4:3b:fa:8c:24:47:35:be:
                    09:73:62:b7:5a:7c:d5:e4:82:e7:1d:d7:dc:36:99:
                    da:8d:70:ce:d7:52:f5:34:6e:33:ce:d9:dc:9c:33:
                    4c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:80:3F:84:3C:FE:B8:7B:03:C3:3C:9C:BA:68:8E:95:B5:D6:AE:D0
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/bYA_hDz-uHsDwzycumiOlbXWrtA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.228.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:fa:76:9c:0f:d9:be:3b:59:53:22:8b:b9:4b:7a:2b:c7:4e:
         79:ef:e0:4a:1e:d7:3a:b6:ce:d4:92:25:20:ec:c1:3d:ea:fb:
         d5:84:7a:75:07:de:58:f6:3d:95:3c:c8:7e:a7:22:13:5f:83:
         cc:97:14:08:fc:a5:a1:75:4b:44:e5:ce:3f:48:b8:fa:a8:46:
         6a:26:8c:ee:60:91:70:2d:2f:03:15:8e:0b:91:95:d2:6f:30:
         fd:40:ab:7e:e3:81:e0:c0:d5:01:17:52:51:84:c4:56:e2:cb:
         a1:06:94:de:dc:51:ed:54:8f:7d:d3:8f:bd:b3:a1:4c:09:0f:
         e9:9a:34:f6:1a:60:59:1e:9a:37:96:53:4e:71:65:2c:06:fc:
         a8:46:05:8b:66:00:a4:70:85:9b:d3:88:be:68:73:1b:66:5b:
         4a:9e:e2:b9:4a:4d:1c:ac:d7:36:cc:78:10:55:b4:0c:41:49:
         e6:74:2c:66:26:0e:c4:38:11:0a:32:56:54:ed:c2:4e:e2:84:
         80:1e:53:22:55:d4:da:36:d6:0f:76:a2:37:85:23:ed:8c:fd:
         92:34:5d:db:ac:a1:45:1d:56:fa:5b:94:c2:cc:80:99:27:80:
         d6:33:23:59:e9:18:78:40:d1:b5:d4:d0:06:8d:f0:6a:fc:c4:
         41:78:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:03:57 2026 by rpki-client