This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/9yp_xXi4AD9vAWt-qovSVVUqem4.roa
File:                     9yp_xXi4AD9vAWt-qovSVVUqem4.roa (raw, json)
Hash identifier:          SDA1gIC6xxx6D4XZwQHFf5cE1Jsmp5JZRGUqmhH05I0=
Subject key identifier:   F7:2A:7F:C5:78:B8:00:3F:6F:01:6B:7E:AA:8B:D2:55:55:2A:7A:6E
Certificate issuer:       /CN=8d630b89d0b22f2ebd9e84de83511c94e3874f0b
Certificate serial:       019B7CED30F2DACCD03E398A97ACBF003D44
Authority key identifier: 8D:63:0B:89:D0:B2:2F:2E:BD:9E:84:DE:83:51:1C:94:E3:87:4F:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/9yp_xXi4AD9vAWt-qovSVVUqem4.roa
Signing time:             Fri 02 Jan 2026 04:17:57 +0000
ROA not before:           Fri 02 Jan 2026 04:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47290
IP address blocks:        195.182.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:30:f2:da:cc:d0:3e:39:8a:97:ac:bf:00:3d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d630b89d0b22f2ebd9e84de83511c94e3874f0b
        Validity
            Not Before: Jan  2 04:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f72a7fc578b8003f6f016b7eaa8bd255552a7a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:09:23:45:99:76:8b:c2:a1:f4:5a:48:d3:
                    28:0a:15:f1:c9:67:17:93:e6:30:62:69:01:0d:ff:
                    05:fb:67:56:c9:29:03:af:07:eb:ae:7a:a7:64:7d:
                    90:1d:26:0d:42:e8:72:2b:12:6a:bc:64:72:15:28:
                    be:cb:ee:72:09:80:89:8e:0c:59:31:68:19:a1:f8:
                    ee:db:22:ff:c9:ca:68:fc:ea:02:a8:ae:39:72:a7:
                    b0:3f:99:8c:62:6e:11:d9:5d:ee:31:bb:7c:d4:f2:
                    70:76:7c:4a:9e:fc:7f:55:b4:94:e7:9f:d3:08:ce:
                    77:1d:23:8b:b6:fb:2a:3c:ae:8d:ce:f0:aa:30:84:
                    5f:42:7b:38:5b:a0:e7:14:e4:7a:54:b5:d9:4d:dd:
                    c1:0b:a1:30:38:d1:6b:e7:d6:c2:df:95:5d:17:b1:
                    2a:76:46:d2:8b:36:41:38:cf:2e:d1:7a:8b:8a:a7:
                    f7:b0:dc:b5:83:f3:87:e0:37:b3:ce:a6:ba:a9:16:
                    50:9c:ee:26:fb:2c:25:93:07:59:9e:30:60:b3:f2:
                    fd:cb:cd:8a:ea:e5:bd:58:d4:9b:f0:a0:f6:10:8a:
                    15:bd:c1:5f:cb:f8:63:98:41:fc:4f:85:66:8b:42:
                    08:f7:c1:49:b9:6e:c2:2a:0c:4e:03:f5:e1:93:bb:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:7F:C5:78:B8:00:3F:6F:01:6B:7E:AA:8B:D2:55:55:2A:7A:6E
            X509v3 Authority Key Identifier:
                keyid:8D:63:0B:89:D0:B2:2F:2E:BD:9E:84:DE:83:51:1C:94:E3:87:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWMLidCyLy69noTeg1EclOOHTws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/9yp_xXi4AD9vAWt-qovSVVUqem4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/2024e2-4a49-491a-b082-d775c0021b60/1/jWMLidCyLy69noTeg1EclOOHTws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.182.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:04:e3:9c:0a:94:b9:32:ef:c4:32:39:85:de:87:03:43:77:
         c8:85:aa:93:2e:cc:b6:ec:f5:39:2a:3f:e1:dd:09:77:da:5e:
         7e:92:e3:91:51:e8:82:35:c6:3a:bb:5f:c2:8c:d9:3b:41:56:
         54:db:c7:c6:73:d5:40:b3:9b:ab:c1:8d:4d:31:f6:3c:1f:7c:
         e8:1b:be:eb:96:96:61:d9:3f:ba:6e:01:28:36:46:42:0a:e1:
         a7:52:fc:84:f6:67:f5:ca:49:c8:65:19:30:09:3a:fc:b3:8d:
         8e:2b:d6:8b:3f:14:6c:0f:1b:6e:e0:7c:82:75:c7:69:4e:59:
         5f:67:9b:96:eb:d9:74:c5:3a:1a:59:b6:05:ce:2f:3c:7e:a5:
         a0:55:3c:61:b5:ce:90:5b:bf:28:b6:ba:c5:1f:f3:35:8d:a2:
         74:f1:6e:2c:5e:57:97:78:28:dd:10:f0:aa:c2:b1:e0:57:f7:
         8c:93:0f:e6:ea:a8:7a:7c:0a:e0:d3:8f:a7:77:e1:60:86:cb:
         5d:b5:41:ad:4d:7a:62:44:80:28:83:ee:48:d4:35:ca:e3:06:
         fb:7c:68:fb:8b:58:c0:3d:17:cf:e7:63:c9:cf:4e:b1:e7:72:
         cd:52:19:4a:d5:cb:dd:de:3e:48:3c:7a:e4:ce:64:05:1f:5f:
         d7:1f:fe:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87TDy2szQPjmKl6y/AD1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjMwYjg5ZDBiMjJmMmViZDllODRkZTgzNTExYzk0ZTM4
NzRmMGIwHhcNMjYwMTAyMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzJhN2ZjNTc4YjgwMDNmNmYwMTZiN2VhYThiZDI1NTU1MmE3YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv38JI0WZdovCofRaSNMoChXxyWcX
k+YwYmkBDf8F+2dWySkDrwfrrnqnZH2QHSYNQuhyKxJqvGRyFSi+y+5yCYCJjgxZ
MWgZofju2yL/ycpo/OoCqK45cqewP5mMYm4R2V3uMbt81PJwdnxKnvx/VbSU55/T
CM53HSOLtvsqPK6NzvCqMIRfQns4W6DnFOR6VLXZTd3BC6EwONFr59bC35VdF7Eq
dkbSizZBOM8u0XqLiqf3sNy1g/OH4Dezzqa6qRZQnO4m+ywlkwdZnjBgs/L9y82K
6uW9WNSb8KD2EIoVvcFfy/hjmEH8T4Vmi0II98FJuW7CKgxOA/Xhk7v5wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcqf8V4uAA/bwFrfqqL0lVVKnpuMB8GA1UdIwQY
MBaAFI1jC4nQsi8uvZ6E3oNRHJTjh08LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldNTGlkQ3lMeTY5bm9UZWcxRWNsT09IVHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yMDI0ZTItNGE0OS00OTFhLWIwODIt
ZDc3NWMwMDIxYjYwLzEvOXlwX3hYaTRBRDl2QVd0LXFvdlNWVlVxZW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yMDI0ZTItNGE0OS00OTFhLWIwODItZDc3NWMwMDIxYjYw
LzEvaldNTGlkQ3lMeTY5bm9UZWcxRWNsT09IVHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YjMA0G
CSqGSIb3DQEBCwUAA4IBAQBiBOOcCpS5Mu/EMjmF3ocDQ3fIhaqTLsy27PU5Kj/h
3Ql32l5+kuORUeiCNcY6u1/CjNk7QVZU28fGc9VAs5urwY1NMfY8H3zoG77rlpZh
2T+6bgEoNkZCCuGnUvyE9mf1yknIZRkwCTr8s42OK9aLPxRsDxtu4HyCdcdpTllf
Z5uW69l0xToaWbYFzi88fqWgVTxhtc6QW78otrrFH/M1jaJ08W4sXleXeCjdEPCq
wrHgV/eMkw/m6qh6fArg04+nd+FghstdtUGtTXpiRIAog+5I1DXK4wb7fGj7i1jA
PRfP52PJz06x53LNUhlK1cvd3j5IPHrkzmQFH1/XH/4V
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:22 2026 by rpki-client