This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Vpt94WKMyXCUYBQWVxBcB24_zHs.roa
File:                     Vpt94WKMyXCUYBQWVxBcB24_zHs.roa (raw, json)
Hash identifier:          NIJhlgliC3wdwXUiVVRoUYzKRIs+Z/SmXeAHs1OcJhU=
Subject key identifier:   56:9B:7D:E1:62:8C:C9:70:94:60:14:16:57:10:5C:07:6E:3F:CC:7B
Certificate issuer:       /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial:       019B76EB990FCA0EFC6D377CD5393BAD0450
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Vpt94WKMyXCUYBQWVxBcB24_zHs.roa
Signing time:             Thu 01 Jan 2026 00:18:30 +0000
ROA not before:           Thu 01 Jan 2026 00:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1213
IP address blocks:        134.226.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:99:0f:ca:0e:fc:6d:37:7c:d5:39:3b:ad:04:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
        Validity
            Not Before: Jan  1 00:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=569b7de1628cc9709460141657105c076e3fcc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:6d:8f:f6:60:09:0d:76:83:30:2c:c4:0a:
                    c7:98:ee:54:83:bb:9f:e4:44:7b:d7:24:cd:b4:b6:
                    00:94:75:dc:7c:32:6e:8e:56:27:d0:9d:f3:0a:3e:
                    a8:b5:68:6e:dc:07:89:42:08:36:0c:b8:dd:b6:43:
                    e8:7f:50:0e:07:35:98:78:3b:ef:7a:9b:48:63:c8:
                    40:97:8e:bf:18:1b:95:6f:aa:bc:81:e4:19:1d:a4:
                    c5:47:8e:30:d1:33:cc:4a:7f:85:31:e2:ee:d4:4b:
                    a1:dd:6d:91:79:cc:ed:9c:7c:23:18:d5:55:e6:f2:
                    a6:e2:99:c4:33:6a:5e:19:41:c7:3e:29:0a:f3:09:
                    0b:89:4a:43:27:9e:19:92:54:b8:58:59:b7:25:b2:
                    cd:8e:a4:30:5f:a3:57:c4:30:d1:60:48:70:1a:fd:
                    f5:12:3a:98:5e:1a:be:64:71:2f:dd:73:b5:69:83:
                    bc:19:6c:b4:a6:a9:6e:b1:af:fd:7f:51:5d:93:1b:
                    0a:4d:29:0c:51:41:b5:9a:e5:d4:5d:83:70:0c:6e:
                    8d:e1:29:71:dd:9d:3e:6a:0a:a4:0f:7f:d6:6f:1c:
                    16:bf:90:59:bf:61:df:34:b1:72:11:be:84:d0:85:
                    8a:90:4c:bd:ec:88:b1:67:3e:65:df:2d:d9:87:93:
                    6c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9B:7D:E1:62:8C:C9:70:94:60:14:16:57:10:5C:07:6E:3F:CC:7B
            X509v3 Authority Key Identifier:
                keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Vpt94WKMyXCUYBQWVxBcB24_zHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:4a:ea:4a:9f:96:69:fc:1a:6b:f0:0a:8d:69:53:f9:55:
         f1:25:1b:d4:be:8c:51:67:1d:49:3a:4d:89:d1:0f:4d:8b:ed:
         eb:d8:e1:16:c4:6d:a4:6d:31:07:a5:25:70:98:ae:e9:4d:57:
         cd:44:5d:2f:34:6e:27:00:80:ce:d7:5c:69:c6:35:8c:c4:66:
         60:06:75:ed:7f:8b:40:db:18:b5:8c:3a:d6:76:7a:cf:37:8e:
         39:2b:78:9e:1f:1c:4f:ae:99:8a:68:4f:66:1a:11:4b:6f:bf:
         19:68:7e:52:f6:28:e4:81:1b:3b:cb:ad:d9:a6:2a:46:c4:07:
         32:dc:66:f5:55:c0:23:4c:4c:6a:7b:b2:a6:d2:1b:fd:29:a7:
         ee:5d:bd:e4:96:47:1a:a3:00:91:f3:f4:63:44:91:fc:77:47:
         60:bc:97:af:3e:00:3c:10:4c:6f:01:2d:2b:48:07:63:c7:eb:
         74:fc:7d:1b:ec:23:b4:5b:3b:98:ac:a4:10:6b:d5:2a:11:b4:
         d0:da:ce:dd:a1:c1:fe:3e:f0:62:8e:23:5c:ce:f9:da:ba:0f:
         de:6e:3d:61:03:ed:25:f0:e1:49:b1:30:f7:ac:e4:47:41:6e:
         da:d0:a5:ca:7c:f3:3b:17:11:29:7f:9b:f2:61:0e:ce:3c:b9:
         f7:cd:fc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:55:09 2026 by rpki-client