This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ylp5NiXG-DWol4IjywEA3MrLU5k.roa
File:                     ylp5NiXG-DWol4IjywEA3MrLU5k.roa (raw, json)
Hash identifier:          ev143/+cymXpiGa9zVi8mgdvQUw00MuKnS6trW4s38w=
Subject key identifier:   CA:5A:79:36:25:C6:F8:35:A8:97:82:23:CB:01:00:DC:CA:CB:53:99
Certificate issuer:       /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial:       019B7B3628E79FEB3C94095ACD808C1CD3D7
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ylp5NiXG-DWol4IjywEA3MrLU5k.roa
Signing time:             Thu 01 Jan 2026 20:18:25 +0000
ROA not before:           Thu 01 Jan 2026 20:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     271986
IP address blocks:        185.83.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:28:e7:9f:eb:3c:94:09:5a:cd:80:8c:1c:d3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
        Validity
            Not Before: Jan  1 20:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca5a793625c6f835a8978223cb0100dccacb5399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:31:ee:3c:79:6d:91:84:27:7a:81:23:95:
                    cb:0a:e9:a7:ae:2d:8a:00:19:60:3e:3f:ff:cf:d9:
                    d7:df:cb:6e:fc:a0:17:39:68:53:7a:57:51:40:56:
                    75:5d:d0:f8:8c:62:46:ba:d4:81:4b:d0:2b:8a:d1:
                    81:4d:80:3b:60:0a:e9:c6:f1:bb:be:e9:b9:7c:e0:
                    80:0c:e9:8b:31:bd:9f:5e:f4:8c:fc:dd:84:9a:a3:
                    62:b8:5e:85:b8:29:0a:d0:d6:f6:34:98:1f:f4:cd:
                    f2:26:c7:fb:cd:a6:52:05:38:36:b4:c6:11:11:d3:
                    6f:b4:0f:2a:cd:e4:53:4f:df:e1:65:fb:98:4c:3e:
                    ba:52:97:f8:75:17:ac:94:20:29:44:e0:5b:14:e8:
                    39:5a:26:7d:51:ec:a8:b2:d0:85:fc:8a:22:51:21:
                    22:30:3d:5d:5f:26:5c:b9:d1:d8:a1:ef:db:99:37:
                    73:2c:7f:ef:81:c8:6f:93:54:fd:76:d2:27:ee:d8:
                    2e:85:2d:f5:a6:d8:94:93:68:c1:cc:70:c2:12:38:
                    5e:b1:77:20:e5:1d:1b:47:44:3c:cf:0f:f0:f4:c6:
                    4c:31:73:44:d5:f1:b6:69:5e:0f:d9:bf:6d:79:f5:
                    60:9d:11:71:c6:43:02:97:77:87:8c:bc:96:bc:3c:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5A:79:36:25:C6:F8:35:A8:97:82:23:CB:01:00:DC:CA:CB:53:99
            X509v3 Authority Key Identifier:
                keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ylp5NiXG-DWol4IjywEA3MrLU5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:cf:24:34:69:b8:37:da:c5:62:62:cf:e2:43:a5:89:7f:
         3e:9f:bc:e7:89:94:44:bf:74:06:2b:94:7f:17:38:0c:9f:0b:
         27:01:4a:db:41:e2:49:27:13:94:1b:63:1f:b9:bb:26:9f:5a:
         70:99:a0:73:a5:f0:9a:10:eb:ae:84:b0:b3:26:88:5d:a0:af:
         ad:c0:06:b4:5c:bb:80:48:97:51:19:39:4d:d3:8f:ff:53:1a:
         bd:53:35:14:81:c2:50:47:9a:81:bf:eb:c6:fc:7d:f6:19:1e:
         69:52:8d:e7:69:93:cd:40:89:92:49:01:c6:84:29:87:49:52:
         a0:06:5d:fe:5d:fa:2f:38:f7:0e:d2:b7:c4:93:ad:66:60:1d:
         e6:73:d1:7e:e3:02:4d:de:13:d9:b2:19:ca:c3:36:c3:f1:29:
         6e:2e:78:8f:15:cb:6c:02:c7:f9:b9:83:6b:38:8e:06:c4:58:
         cc:9a:8b:dc:48:7c:38:16:62:51:74:09:ef:f2:1a:a1:53:e2:
         4b:0d:d4:23:58:14:c0:e1:9c:7e:b1:83:fb:c3:64:3a:34:b9:
         d8:81:53:12:c8:77:02:63:ab:d7:4d:98:c8:06:7a:65:1a:5d:
         c0:00:f2:1f:95:90:d4:14:d9:b3:4f:41:20:34:1e:c2:d4:62:
         e2:dc:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:31 2026 by rpki-client