This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/YkYmFRFQjRoPvU_hicebsQX8a8g.roa
File:                     YkYmFRFQjRoPvU_hicebsQX8a8g.roa (raw, json)
Hash identifier:          4o+kF+/NXELwhX0ByEdRkFq9MAmHr0Ll0jHX/Dc4ntQ=
Subject key identifier:   62:46:26:15:11:50:8D:1A:0F:BD:4F:E1:89:C7:9B:B1:05:FC:6B:C8
Certificate issuer:       /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial:       019B78A3554DDF734263D967C3C15F48381F
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/YkYmFRFQjRoPvU_hicebsQX8a8g.roa
Signing time:             Thu 01 Jan 2026 08:18:48 +0000
ROA not before:           Thu 01 Jan 2026 08:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197883
IP address blocks:        83.97.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:55:4d:df:73:42:63:d9:67:c3:c1:5f:48:38:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
        Validity
            Not Before: Jan  1 08:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6246261511508d1a0fbd4fe189c79bb105fc6bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:91:da:3d:50:18:87:a7:69:47:1e:58:48:
                    e0:e3:be:da:f6:6a:12:f4:60:2a:ce:ab:f0:19:e7:
                    39:10:2c:af:6b:ca:69:90:92:a4:41:2a:58:9c:9f:
                    e9:4f:b4:73:ba:aa:b9:d8:be:d6:ce:ec:25:75:6b:
                    54:7f:d8:b6:92:fb:77:8b:df:a9:0c:35:03:e1:30:
                    35:70:b0:70:92:6a:f0:56:27:5f:55:10:6d:04:cf:
                    a9:ab:6e:13:c1:20:af:79:6f:3e:87:f3:7b:88:f8:
                    91:ff:f6:7e:83:2c:2b:92:84:92:66:fe:ac:20:53:
                    3d:8c:fd:ce:19:e7:96:23:b5:14:73:79:ec:77:35:
                    c8:94:ee:a0:19:2f:3c:a0:ab:aa:ef:05:6b:ea:30:
                    4e:fa:32:20:24:65:64:a9:09:8b:62:9e:7c:a2:e8:
                    6c:fa:a9:d6:ae:d5:d3:0e:38:6e:09:77:20:01:0b:
                    a7:67:39:df:4e:4d:65:76:58:76:95:be:59:2e:6d:
                    c0:ae:ae:ee:d8:bb:4b:bd:e3:21:40:42:4f:b5:41:
                    84:39:cf:73:6e:38:d9:75:a8:dc:e5:42:ae:88:75:
                    40:f8:5b:12:f2:dd:6d:07:e2:5f:ac:88:42:70:e8:
                    86:09:95:44:9a:09:4e:41:8f:9c:44:68:74:f0:a7:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:46:26:15:11:50:8D:1A:0F:BD:4F:E1:89:C7:9B:B1:05:FC:6B:C8
            X509v3 Authority Key Identifier:
                keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/YkYmFRFQjRoPvU_hicebsQX8a8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.97.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f6:71:16:dc:1a:ca:2f:d0:ab:2c:a5:17:c1:36:c3:5a:d9:
         81:c6:20:ed:d3:d6:01:c6:9a:95:64:fa:7a:34:61:7c:41:a5:
         65:ec:78:94:c5:b1:5e:83:1d:a6:eb:1d:f4:8d:28:87:27:5f:
         34:a2:35:ea:ab:b0:58:55:27:02:7b:b7:b6:3a:26:c3:4d:fb:
         c3:95:ff:e9:5a:90:65:3e:51:4a:1a:3a:34:83:6e:c0:2d:f1:
         f7:57:d0:7a:68:1b:3d:d7:fe:40:db:b7:70:21:66:df:21:4e:
         6e:26:bd:bc:f2:2b:5d:9c:97:4e:d8:c0:b7:18:f1:1a:e0:b6:
         97:33:4a:e4:13:92:7c:93:ba:6c:71:9c:71:5e:41:27:51:87:
         3e:d9:b8:a4:76:a5:f4:8f:43:9c:b3:42:f6:dd:70:70:73:9a:
         2b:78:67:d6:d2:f9:13:1e:09:19:93:6a:71:33:c9:56:96:14:
         85:4a:74:30:52:95:58:f0:4c:1b:37:a4:78:c6:62:76:30:67:
         18:33:07:22:f7:eb:b7:eb:7b:6c:f4:de:04:97:39:8b:d8:29:
         c5:d2:82:42:cd:ef:69:b7:04:08:d8:4a:60:aa:44:0f:eb:d8:
         1c:27:cc:1b:0c:da:c3:38:e9:f1:23:e1:f4:b0:2b:14:39:78:
         69:15:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:38 2026 by rpki-client