This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/1yFMGL63tC1PXlDAdsFEPuOyju8.roa
File:                     1yFMGL63tC1PXlDAdsFEPuOyju8.roa (raw, json)
Hash identifier:          SRYhWEbmaMuAgpzLHDCfmDz10ZYe7eiwt0wBLsDg8wU=
Subject key identifier:   D7:21:4C:18:BE:B7:B4:2D:4F:5E:50:C0:76:C1:44:3E:E3:B2:8E:EF
Certificate issuer:       /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial:       019C1AA731EA31F436C8064779320E7AE898
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/1yFMGL63tC1PXlDAdsFEPuOyju8.roa
Signing time:             Sun 01 Feb 2026 19:21:30 +0000
ROA not before:           Sun 01 Feb 2026 19:21:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62000
IP address blocks:        45.112.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1a:a7:31:ea:31:f4:36:c8:06:47:79:32:0e:7a:e8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
        Validity
            Not Before: Feb  1 19:21:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7214c18beb7b42d4f5e50c076c1443ee3b28eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:b8:23:5b:a0:03:3d:71:5f:66:30:19:4e:
                    2d:f1:50:73:6a:32:b1:0d:90:28:ef:32:07:b0:f4:
                    b7:d4:af:db:d3:66:6d:16:c3:3e:e0:63:93:a4:be:
                    45:7f:07:c5:bb:f2:94:ed:70:a6:61:66:f7:d9:5e:
                    ed:ee:34:4e:a3:47:82:f1:be:f2:7f:32:a6:7a:fb:
                    24:1c:a1:2a:ed:34:07:e0:74:6e:23:69:e2:f0:42:
                    0f:2c:ab:4c:a4:36:60:08:00:68:09:26:97:f6:33:
                    65:9b:54:f3:2c:e7:5a:bc:23:60:96:ea:72:6c:95:
                    49:6d:29:50:2e:50:47:bc:fe:4e:61:c4:4b:d3:da:
                    04:89:58:3f:04:22:2e:37:67:f1:92:fe:fa:82:ce:
                    ea:4d:e9:32:af:4f:8a:e6:a8:f2:e5:69:82:b5:b9:
                    41:44:43:93:87:76:5d:1b:81:15:a2:43:a5:7e:4f:
                    6d:73:d1:53:4e:61:68:28:12:05:96:50:c6:b4:66:
                    d0:3f:da:44:5a:a1:80:1a:92:93:aa:52:bf:ac:c5:
                    cf:59:1b:ae:65:0c:3c:c6:61:17:25:89:02:69:98:
                    3b:65:51:7f:cd:ac:9f:5d:01:54:ed:f7:b2:13:36:
                    80:16:4c:2a:ea:5c:54:d8:ce:52:f3:81:0c:6e:9b:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:21:4C:18:BE:B7:B4:2D:4F:5E:50:C0:76:C1:44:3E:E3:B2:8E:EF
            X509v3 Authority Key Identifier:
                keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/1yFMGL63tC1PXlDAdsFEPuOyju8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:6e:b5:71:ce:66:ac:f2:3c:ce:c8:ee:7c:0c:ee:6b:a8:5f:
         7f:99:d2:51:e7:62:a6:21:50:16:73:d1:5c:23:63:d7:db:18:
         0b:95:aa:d3:21:bb:67:ce:8c:77:f9:12:3a:6f:0d:26:66:3c:
         cc:8a:79:6d:76:3d:0c:08:59:d7:06:21:a0:1a:ab:22:ba:de:
         14:81:28:83:7a:33:dc:e7:1d:62:01:a4:9c:c3:01:52:3d:f4:
         83:a3:13:e3:9c:a2:5b:90:9d:2f:56:ed:d0:dd:0b:4d:c3:47:
         97:3d:22:14:2d:87:40:00:d8:d5:9a:5e:5c:60:da:35:e2:2e:
         81:0d:83:95:8e:52:d6:b6:e7:c4:93:3f:44:0e:13:0c:0d:92:
         e2:63:8d:89:ab:e0:66:70:3b:28:03:b3:ce:a8:a0:7b:c0:6b:
         5f:08:8f:b2:44:cc:e1:8b:e7:93:5d:e9:ab:5b:bf:5a:34:8b:
         e8:ff:80:5c:2d:34:5d:b1:ec:c3:6d:1b:96:9a:f0:c2:14:ea:
         01:b8:be:06:5c:72:f5:0c:d3:36:9e:cb:c8:cf:2d:82:1b:d5:
         ca:7b:b9:2f:a1:15:fb:92:41:8e:bb:29:bc:9c:31:fd:02:41:
         4f:78:4c:24:b2:99:5d:3b:0c:55:65:49:8e:60:bc:29:f2:84:
         18:07:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:41:32 2026 by rpki-client