This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/YB2rJph3jtykrU245nJwP-cGOQE.roa
File:                     YB2rJph3jtykrU245nJwP-cGOQE.roa (raw, json)
Hash identifier:          aIiLHbCrLpw92COeGL73Eh5jy1guo4i8Y4Mb82Pormc=
Subject key identifier:   60:1D:AB:26:98:77:8E:DC:A4:AD:4D:B8:E6:72:70:3F:E7:06:39:01
Certificate issuer:       /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial:       019B7EA690FDA9D90DD3113ADF81BCAE227B
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/YB2rJph3jtykrU245nJwP-cGOQE.roa
Signing time:             Fri 02 Jan 2026 12:20:03 +0000
ROA not before:           Fri 02 Jan 2026 12:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28985
IP address blocks:        91.216.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:90:fd:a9:d9:0d:d3:11:3a:df:81:bc:ae:22:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
        Validity
            Not Before: Jan  2 12:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=601dab2698778edca4ad4db8e672703fe7063901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:af:d1:1d:da:b9:f7:38:ac:4e:89:a0:3d:
                    ab:45:da:2c:fb:39:b5:19:82:73:79:01:39:d2:0e:
                    b8:6d:ba:59:94:31:87:02:fb:5f:a9:44:52:00:62:
                    0d:ec:8d:aa:32:c4:43:fd:8d:e7:4b:ab:59:c9:d0:
                    e4:27:24:3c:ba:c0:69:97:b3:37:04:52:c5:75:53:
                    50:1b:98:06:19:b2:94:a2:72:65:c6:4c:ec:f1:4f:
                    df:9c:0f:62:e8:99:d5:01:86:7f:47:58:48:3a:1a:
                    34:60:f4:f0:8a:85:6d:7b:ce:bf:ca:15:34:5d:c6:
                    b7:54:c3:b4:25:f6:f6:bd:41:8d:94:66:1c:02:5b:
                    ff:0d:f5:fe:99:b9:80:71:75:a3:f4:ef:e6:18:c2:
                    a4:a0:2d:e7:9c:aa:76:73:cf:54:39:5a:f8:75:02:
                    83:51:0d:00:26:6a:9d:d7:ee:ee:59:7c:da:d1:cd:
                    15:81:a4:7f:dd:75:ab:d5:c4:e8:c0:6a:2b:16:be:
                    d2:ea:d4:a6:c5:09:17:f6:c4:47:3e:59:e1:2b:3d:
                    e1:b2:5a:27:b9:2e:3c:31:30:be:5b:0e:d4:dd:86:
                    e2:b2:ed:3c:3c:79:02:be:e4:71:97:d2:d9:50:89:
                    52:ea:9d:e4:c0:a8:d7:72:5a:10:6b:c7:69:df:d7:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1D:AB:26:98:77:8E:DC:A4:AD:4D:B8:E6:72:70:3F:E7:06:39:01
            X509v3 Authority Key Identifier:
                keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/YB2rJph3jtykrU245nJwP-cGOQE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:33:ba:39:9b:6f:f4:58:7c:a2:41:69:cd:af:95:95:a4:
         8b:57:f5:27:b0:94:ec:cf:f8:b9:cb:13:bd:c4:7a:14:c6:e7:
         f8:f3:d4:fd:58:20:35:1e:1a:89:5f:9e:9a:c7:0f:0d:17:91:
         78:b6:f6:63:dc:70:78:56:db:22:3e:60:2c:01:f8:86:7c:bc:
         ae:e7:4f:49:32:0b:f6:cb:ac:54:e9:d5:19:2a:04:1f:08:03:
         f4:23:da:81:d8:21:14:90:3a:07:da:51:76:15:09:3f:1c:88:
         9c:10:27:2f:15:b7:87:99:86:04:77:4f:4c:68:d6:be:90:58:
         71:79:e1:9c:31:cf:6d:30:a9:a7:c2:ab:85:af:aa:fb:de:7a:
         4f:b4:a1:e6:97:33:02:c8:eb:41:7f:b5:12:3f:f2:17:75:4d:
         a6:5a:48:fd:be:71:37:35:ac:00:e0:82:e0:28:53:7c:3e:87:
         9a:64:06:9e:c2:7a:52:3f:0a:f3:75:c7:2c:ea:f3:d8:b4:c8:
         9e:30:97:a8:72:7b:5d:38:aa:f5:18:42:19:d5:88:8a:ff:97:
         39:83:5c:c9:4b:21:0d:19:72:69:92:83:b5:81:01:20:e2:6a:
         11:c7:5d:99:9a:97:38:af:91:50:97:6b:60:37:9a:ad:12:0e:
         01:15:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:21 2026 by rpki-client