This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/vr-KcEvzFupIdELOEs6eVsczP7A.roa
File:                     vr-KcEvzFupIdELOEs6eVsczP7A.roa (raw, json)
Hash identifier:          sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=
Subject key identifier:   BE:BF:8A:70:4B:F3:16:EA:48:74:42:CE:12:CE:9E:56:C7:33:3F:B0
Certificate issuer:       /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial:       019B7F15DD8FBA7F435960632EE0759FEFF0
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/vr-KcEvzFupIdELOEs6eVsczP7A.roa
Signing time:             Fri 02 Jan 2026 14:21:38 +0000
ROA not before:           Fri 02 Jan 2026 14:21:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211167
IP address blocks:        195.35.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:dd:8f:ba:7f:43:59:60:63:2e:e0:75:9f:ef:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
        Validity
            Not Before: Jan  2 14:21:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bebf8a704bf316ea487442ce12ce9e56c7333fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:fc:b0:7e:06:29:09:3f:d1:f5:b5:5a:f5:
                    c0:46:23:6c:3b:bd:58:95:44:ce:e3:21:88:51:95:
                    7b:c4:24:97:9f:6a:db:fb:7e:e1:f6:f2:97:99:d9:
                    df:74:4e:1a:fc:3f:9e:8d:ba:4e:17:9b:5d:73:43:
                    35:10:41:d4:d1:21:47:cf:d9:b0:4f:71:da:a5:ea:
                    b3:d0:66:2e:7a:aa:7b:b3:de:f8:20:7c:cd:a6:c8:
                    37:23:f1:cc:a6:09:22:0f:61:89:75:ec:99:db:1a:
                    c7:46:bf:e1:e7:f0:c0:4d:7e:88:82:2d:86:31:3d:
                    7e:5e:1e:88:39:42:29:79:87:cc:5a:45:e6:e4:f6:
                    3b:d9:7c:9b:47:b8:7d:26:11:ef:e9:e9:dc:53:f0:
                    11:b1:d8:df:b9:a6:58:8d:81:e5:56:82:04:1b:0e:
                    f4:d6:62:e6:5a:00:11:ba:bd:e9:8b:15:f0:ac:c9:
                    f1:69:04:27:87:2d:51:e7:23:3c:22:eb:b8:43:6e:
                    1f:c8:86:90:2f:d7:51:93:ba:2d:73:ad:90:76:be:
                    7a:eb:56:4c:16:ce:40:9c:5a:21:34:27:b8:54:72:
                    c6:af:3e:43:73:37:8c:a8:e4:4b:0d:e8:16:d0:03:
                    53:62:e4:b6:ba:1e:b4:52:80:f0:20:21:04:45:04:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BF:8A:70:4B:F3:16:EA:48:74:42:CE:12:CE:9E:56:C7:33:3F:B0
            X509v3 Authority Key Identifier:
                keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/vr-KcEvzFupIdELOEs6eVsczP7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.35.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:fd:be:35:8c:dc:a9:86:df:54:ca:83:e0:0c:c8:ce:c0:ae:
         57:0a:83:a1:d2:38:13:4a:ea:df:97:7d:c7:98:f3:b1:5e:96:
         f9:1e:f9:31:a5:df:c5:97:9a:65:cf:18:1b:70:8f:f7:56:e2:
         cb:c2:7f:d6:b6:c2:92:97:5e:21:50:ae:af:cf:a1:e3:8d:0e:
         eb:cb:79:bf:f4:b4:12:d8:32:8e:78:b5:51:8e:d8:b4:61:40:
         8e:36:57:16:c5:48:70:c3:08:84:d7:9d:4c:54:9f:19:c0:59:
         e7:58:d4:3e:9f:04:99:c1:51:d4:2c:bf:5d:1f:ec:04:c2:6e:
         2b:dc:40:86:9a:4a:d9:93:59:18:20:b9:7c:86:88:29:f4:59:
         20:7c:2f:9b:e8:a8:11:60:33:64:a0:2c:a0:e8:d2:3d:7c:c0:
         ea:8c:39:b3:da:9d:64:ff:31:41:8c:48:3d:09:74:7a:2b:ea:
         05:25:27:35:33:ba:77:f2:89:ed:0b:61:6b:2b:50:45:85:eb:
         93:91:7f:55:30:c2:52:eb:56:8d:6b:7b:b4:5d:ea:ac:18:5e:
         59:01:af:70:48:a7:3b:33:48:51:68:c5:8e:2a:e6:0d:b0:53:
         a5:cc:86:b7:f8:9a:9d:33:ab:75:c8:62:47:e2:fd:87:df:4a:
         c3:0b:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:15 2026 by rpki-client