This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/yl0eDZjur4I6T_pOkjcamXDbAOU.roa
File:                     yl0eDZjur4I6T_pOkjcamXDbAOU.roa (raw, json)
Hash identifier:          03g8niCNoaSntJSjiSHpf+bPzeoFe8eHF/PalLWvuyg=
Subject key identifier:   CA:5D:1E:0D:98:EE:AF:82:3A:4F:FA:4E:92:37:1A:99:70:DB:00:E5
Certificate issuer:       /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial:       019B7A59EAA08A5FF3DEBD0E3D21D5482D86
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/yl0eDZjur4I6T_pOkjcamXDbAOU.roa
Signing time:             Thu 01 Jan 2026 16:17:51 +0000
ROA not before:           Thu 01 Jan 2026 16:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199059
IP address blocks:        91.205.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:59:ea:a0:8a:5f:f3:de:bd:0e:3d:21:d5:48:2d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
        Validity
            Not Before: Jan  1 16:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ca5d1e0d98eeaf823a4ffa4e92371a9970db00e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:cd:6e:b6:a4:36:1d:af:95:06:5c:e1:48:
                    2f:b8:61:35:bb:bd:b7:13:7b:70:54:2b:e8:94:e4:
                    80:08:3a:f8:b7:3b:8d:22:1d:dd:cc:d7:c9:2a:78:
                    fa:ec:07:5a:65:d6:81:90:86:af:a6:4a:fa:d1:d6:
                    b2:e0:5d:5a:8e:59:bd:99:3b:3f:1c:3f:81:3a:1d:
                    72:f9:e3:1e:ba:bf:5f:90:e7:5e:b5:49:d1:86:ec:
                    89:2d:2a:4e:48:69:62:9a:9b:4a:bb:93:c9:4e:0f:
                    aa:a4:98:14:3c:e7:29:2b:9b:66:9c:a9:b4:80:57:
                    1d:19:26:0f:f8:9b:28:ee:08:2b:1d:d1:bc:2e:7b:
                    43:84:fc:f7:90:6e:2a:4a:06:a5:5f:da:39:57:16:
                    c8:41:c6:a5:b8:11:83:33:76:77:c7:35:62:80:99:
                    dd:da:d5:3a:63:35:7f:47:2a:12:5f:d6:e0:e3:77:
                    5a:c0:f8:0e:16:a8:29:05:69:21:0e:05:a0:90:56:
                    23:d4:86:b5:0d:02:5a:61:4c:cc:3f:1f:8d:0d:32:
                    27:6b:c9:e6:6c:34:06:64:bb:88:47:05:8e:76:25:
                    b3:23:6d:33:a5:e3:0c:2b:cd:65:25:3f:41:b4:65:
                    2b:e5:e3:bb:3c:fe:84:bb:cf:25:ba:32:7e:fa:16:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5D:1E:0D:98:EE:AF:82:3A:4F:FA:4E:92:37:1A:99:70:DB:00:E5
            X509v3 Authority Key Identifier:
                keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/yl0eDZjur4I6T_pOkjcamXDbAOU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:34:13:36:3f:1a:5c:9d:ae:44:97:84:75:ae:13:f0:48:
         59:df:d9:23:46:27:19:db:4a:3b:e2:9c:a8:f8:e9:09:b4:e7:
         f1:89:73:f1:9d:42:3c:e9:66:db:b1:93:0a:12:bd:b7:1b:c7:
         9a:35:2a:14:63:1c:7f:da:8d:42:78:7b:c3:d3:36:48:58:6d:
         7f:23:17:d1:04:d7:1b:00:13:e8:63:8b:e4:e4:10:61:2c:25:
         5c:fb:b0:7f:8d:c4:5c:3a:8a:b2:0b:24:a4:3e:d4:a2:b4:82:
         7d:34:26:58:c1:31:6c:6a:51:ad:bd:e3:b7:e1:9f:25:f2:a2:
         1e:c1:48:5d:fc:bb:db:db:b0:65:68:5b:6f:e9:b2:2a:39:18:
         48:3a:20:6c:fd:c5:10:f4:e1:9c:61:07:73:6c:10:a7:c7:15:
         1a:4e:2f:c2:ec:66:45:cd:ab:2b:fb:79:33:6b:c8:a7:dd:85:
         11:c2:7b:61:5d:80:4d:7c:0b:18:41:d6:7e:7c:b3:a4:b0:f2:
         3a:12:18:2f:35:bc:a0:55:5a:74:af:df:c7:4c:cf:33:b3:da:
         d8:4a:27:f5:9c:6d:51:62:2e:a3:9f:80:1b:40:d6:a4:39:34:
         8d:d2:8e:00:96:1d:3e:86:20:ae:2b:f5:05:00:a5:57:f7:45:
         c5:b0:22:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:43:59 2026 by rpki-client