This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/yUKFZeoKxy_IydCROx3RAxlkij4.roa
File:                     yUKFZeoKxy_IydCROx3RAxlkij4.roa (raw, json)
Hash identifier:          tQWywAFGnlvDGY+xP5LWd6/G2Ef4/YYyX7hiYF4DqWQ=
Subject key identifier:   C9:42:85:65:EA:0A:C7:2F:C8:C9:D0:91:3B:1D:D1:03:19:64:8A:3E
Certificate issuer:       /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial:       019B7CEE4F32476BB6D4C807EC760A1BC224
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/yUKFZeoKxy_IydCROx3RAxlkij4.roa
Signing time:             Fri 02 Jan 2026 04:19:11 +0000
ROA not before:           Fri 02 Jan 2026 04:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44949
IP address blocks:        83.142.128.0/23 maxlen: 23
                          83.142.128.0/24 maxlen: 24
                          83.142.129.0/24 maxlen: 24
                          195.160.202.0/24 maxlen: 24
                          195.160.203.0/24 maxlen: 24
                          2a07:ec80:210::/48 maxlen: 48
                          2a07:ec80:211::/48 maxlen: 48
                          2a07:ec80:221::/48 maxlen: 48
                          2a07:ec80:230::/48 maxlen: 48
                          2a07:ec80:231::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:4f:32:47:6b:b6:d4:c8:07:ec:76:0a:1b:c2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
        Validity
            Not Before: Jan  2 04:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c9428565ea0ac72fc8c9d0913b1dd10319648a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:31:26:e9:8f:55:a9:08:62:7b:1e:df:81:
                    9b:03:3f:be:a0:cd:0b:7e:e3:b1:75:df:4f:0a:5e:
                    02:80:ff:1a:09:44:b7:1c:1b:a8:85:3a:cc:a0:0c:
                    58:19:0c:6e:8a:44:5c:de:3b:c3:95:4f:f1:60:28:
                    ac:fb:fb:2a:1b:fb:98:b6:19:a7:ee:8a:fa:cf:74:
                    2a:2a:8c:a2:03:45:80:dd:88:4a:a7:a9:0b:68:f5:
                    a8:92:dd:91:92:ba:33:ce:05:e0:4b:9b:d9:a7:d6:
                    da:e7:8e:e0:4d:0a:99:74:dd:df:20:ed:04:a7:38:
                    9b:bc:1b:b3:a9:b8:65:35:45:df:d7:c1:7d:25:5e:
                    22:91:ef:d6:2f:fa:5f:08:be:f6:35:6d:f1:7b:33:
                    d9:d6:4b:c4:52:5e:b2:e2:0e:f5:24:ff:19:d0:64:
                    f2:28:85:42:d9:de:d9:f3:ba:9b:7e:53:82:c0:65:
                    6c:58:6d:df:aa:d1:1f:ce:2d:f5:0a:62:92:94:73:
                    24:ab:b7:19:40:33:97:88:cc:99:1d:64:f1:56:84:
                    de:1f:77:22:82:a8:6f:02:a8:1b:7c:0c:0e:83:ec:
                    bc:cc:af:d9:9e:7f:31:8b:07:15:59:11:a4:1e:ef:
                    a8:bc:7c:7a:bd:8c:a8:4e:8e:60:bc:a7:b9:c2:86:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:42:85:65:EA:0A:C7:2F:C8:C9:D0:91:3B:1D:D1:03:19:64:8A:3E
            X509v3 Authority Key Identifier:
                keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/yUKFZeoKxy_IydCROx3RAxlkij4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.128.0/23
                  195.160.202.0/23
                IPv6:
                  2a07:ec80:210::/47
                  2a07:ec80:221::/48
                  2a07:ec80:230::/47

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:da:51:5c:90:36:aa:44:5c:f5:45:23:02:28:54:16:27:
         d5:f1:75:fa:85:03:1d:59:74:4f:37:a2:a9:ac:c3:a2:00:41:
         7f:a2:55:85:0d:76:54:5e:7b:37:88:e8:58:d2:ac:cf:18:ad:
         b6:a5:e1:1e:3f:94:03:25:2e:fb:fe:46:43:76:b8:1c:df:31:
         5a:79:26:c1:0a:8a:9b:f4:87:8f:9e:26:d2:22:da:72:1a:ac:
         97:2d:0a:ed:79:d4:4e:f5:ba:e3:21:d2:8f:ba:52:4e:b8:b4:
         27:42:54:49:83:0d:cf:74:25:5e:d3:c2:e7:c3:9e:4a:80:cc:
         27:ff:35:e5:9e:a1:1b:9d:fa:62:e8:b3:b6:fa:72:aa:01:6f:
         86:ff:ee:e5:86:34:ac:84:f6:15:71:5e:ff:ca:7e:8c:4b:e4:
         cc:f3:5e:16:85:0d:13:21:e0:14:94:23:1f:60:24:a4:22:5b:
         c3:a9:5b:8f:d3:83:1d:3e:d6:84:b3:d8:44:83:b9:64:2a:ce:
         77:bc:f7:cd:b1:fc:7d:43:e5:ea:18:d7:a1:ed:75:c8:40:fa:
         4f:89:a7:37:7a:bd:65:fa:7c:88:48:3f:17:30:44:97:e9:2e:
         0f:c3:95:41:12:d4:78:45:6c:ca:bb:9f:c5:e2:e7:6a:37:06:
         ba:c1:67:8e
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZt87k8yR2u21MgH7HYKG8IkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk
ZjkxNjkwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTQyODU2NWVhMGFjNzJmYzhjOWQwOTEzYjFkZDEwMzE5NjQ4YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj4xJumPVakIYnse34GbAz++oM0L
fuOxdd9PCl4CgP8aCUS3HBuohTrMoAxYGQxuikRc3jvDlU/xYCis+/sqG/uYthmn
7or6z3QqKoyiA0WA3YhKp6kLaPWokt2RkrozzgXgS5vZp9ba547gTQqZdN3fIO0E
pzibvBuzqbhlNUXf18F9JV4ike/WL/pfCL72NW3xezPZ1kvEUl6y4g71JP8Z0GTy
KIVC2d7Z87qbflOCwGVsWG3fqtEfzi31CmKSlHMkq7cZQDOXiMyZHWTxVoTeH3ci
gqhvAqgbfAwOg+y8zK/Znn8xiwcVWRGkHu+ovHx6vYyoTo5gvKe5wobU6wIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFMlChWXqCscvyMnQkTsd0QMZZIo+MB8GA1UdIwQY
MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt
ODNjMjE1N2JkYWMwLzEveVVLRlplb0t4eV9JeWRDUk94M1JBeGxraWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw
LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzASBAIAATAMAwQBU46AAwQB
w6DKMCEEAgACMBsDBwEqB+yAAhADBwAqB+yAAiEDBwEqB+yAAjAwDQYJKoZIhvcN
AQELBQADggEBAE582lFckDaqRFz1RSMCKFQWJ9XxdfqFAx1ZdE83oqmsw6IAQX+i
VYUNdlReezeI6FjSrM8Yrbal4R4/lAMlLvv+RkN2uBzfMVp5JsEKipv0h4+eJtIi
2nIarJctCu151E71uuMh0o+6Uk64tCdCVEmDDc90JV7TwufDnkqAzCf/NeWeoRud
+mLos7b6cqoBb4b/7uWGNKyE9hVxXv/KfoxL5MzzXhaFDRMh4BSUIx9gJKQiW8Op
W4/Tgx0+1oSz2ESDuWQqzne8982x/H1D5eoY16HtdchA+k+Jpzd6vWX6fIhIPxcw
RJfpLg/DlUES1HhFbMq7n8Xi52o3BrrBZ44=
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:17 2026 by rpki-client