This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa
File:                     Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (raw, json)
Hash identifier:          2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=
Subject key identifier:   55:AB:F5:55:ED:15:FF:06:0B:5E:8A:7F:17:EB:60:D7:9F:AC:F4:29
Certificate issuer:       /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial:       019B7F84B61B5B768BB816D546DFCA7F08F0
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa
Signing time:             Fri 02 Jan 2026 16:22:42 +0000
ROA not before:           Fri 02 Jan 2026 16:22:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213577
IP address blocks:        193.53.249.0/24 maxlen: 24
                          193.53.254.0/24 maxlen: 24
                          193.56.14.0/24 maxlen: 24
                          193.56.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:b6:1b:5b:76:8b:b8:16:d5:46:df:ca:7f:08:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
        Validity
            Not Before: Jan  2 16:22:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55abf555ed15ff060b5e8a7f17eb60d79facf429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:15:08:1c:20:65:1e:7c:c3:32:37:64:be:8c:
                    8e:ff:d4:e9:a4:52:cc:ba:92:66:7a:44:d4:f3:91:
                    30:66:f0:f9:90:ba:b0:1e:09:4e:b5:8a:0c:94:0c:
                    23:b0:5f:e6:56:54:8a:11:7b:fc:6c:06:4a:bb:51:
                    c1:b6:8d:6b:60:ff:3c:c0:b3:65:39:30:dd:3b:8b:
                    75:ee:30:28:d5:69:85:5b:73:42:83:08:83:dc:27:
                    b2:0b:94:c9:f4:19:4a:c4:24:4d:3e:46:cd:24:9b:
                    c0:a8:b4:c1:72:cd:93:ae:1a:22:90:86:85:c5:f5:
                    35:72:8c:6c:14:6e:a2:af:8b:d3:0c:89:80:c9:6b:
                    1e:f6:98:e9:47:e4:33:18:d3:1a:99:55:7e:c8:9a:
                    36:88:71:58:c3:67:2a:00:1c:03:6a:c5:50:d0:8f:
                    49:19:eb:5b:fe:cf:60:f0:e2:eb:42:34:44:9a:61:
                    a5:72:6a:be:1b:17:5b:d8:f6:e7:e6:78:49:01:7e:
                    72:dc:fa:af:4e:2b:4f:28:b3:41:61:b7:b7:10:13:
                    d0:1b:44:5a:c5:8f:c7:30:a7:be:8a:a8:00:71:0f:
                    fa:4b:06:08:1e:37:51:9c:0d:46:57:06:62:43:0c:
                    8a:4c:cd:0b:e7:7a:df:65:33:4d:d8:95:29:bb:c4:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:F5:55:ED:15:FF:06:0B:5E:8A:7F:17:EB:60:D7:9F:AC:F4:29
            X509v3 Authority Key Identifier:
                keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.53.249.0/24
                  193.53.254.0/24
                  193.56.14.0/24
                  193.56.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:e3:cf:33:f4:ae:56:7a:75:fa:59:fc:80:97:9c:52:c0:d2:
         75:69:64:6a:5f:88:39:e3:5a:96:e7:b8:f5:81:0f:bc:f8:a3:
         37:ff:31:2b:42:53:38:a6:c1:4e:2e:7c:8b:75:c0:cb:b8:35:
         0a:1e:a3:5f:ef:c8:dd:ae:4c:53:49:ad:b3:fe:4b:f2:59:6e:
         f9:53:4f:cc:8f:1b:ed:66:54:91:c3:ae:7a:07:ea:d5:ea:17:
         d7:c5:f9:9e:53:85:5c:21:45:81:30:70:70:69:54:a2:cc:6e:
         46:fb:82:d8:e6:95:0b:8a:29:22:15:9d:9a:d0:aa:02:c0:96:
         d8:ce:79:e5:00:82:05:5a:fb:65:7b:23:70:91:e7:aa:60:df:
         5c:56:63:2e:ff:b4:ac:e0:91:48:4b:ab:be:15:37:d2:6c:6d:
         21:9f:51:e1:58:21:89:23:f4:9a:2c:ee:b0:f7:06:aa:ea:b2:
         31:b0:cc:0b:52:48:a9:f9:8e:70:40:6d:f6:64:a6:51:d1:c6:
         e5:1e:d6:a6:e7:0c:2b:75:ac:2a:fe:a2:0c:c9:de:7f:e2:36:
         92:89:a8:ff:43:30:85:bc:89:4f:38:27:a6:32:67:05:a0:9c:
         11:79:dc:d3:91:2f:52:6e:ba:d1:52:09:1d:de:75:3d:78:0b:
         41:56:ec:37
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZt/hLYbW3aLuBbVRt/KfwjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy
YjA3N2IwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWFiZjU1NWVkMTVmZjA2MGI1ZThhN2YxN2ViNjBkNzlmYWNmNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RUIHCBlHnzDMjdkvoyO/9TppFLM
upJmekTU85EwZvD5kLqwHglOtYoMlAwjsF/mVlSKEXv8bAZKu1HBto1rYP88wLNl
OTDdO4t17jAo1WmFW3NCgwiD3CeyC5TJ9BlKxCRNPkbNJJvAqLTBcs2TrhoikIaF
xfU1coxsFG6ir4vTDImAyWse9pjpR+QzGNMamVV+yJo2iHFYw2cqABwDasVQ0I9J
Getb/s9g8OLrQjREmmGlcmq+Gxdb2Pbn5nhJAX5y3PqvTitPKLNBYbe3EBPQG0Ra
xY/HMKe+iqgAcQ/6SwYIHjdRnA1GVwZiQwyKTM0L53rfZTNN2JUpu8QI8QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFWr9VXtFf8GC16KfxfrYNefrPQpMB8GA1UdIwQY
MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt
NWNlNGQ4ZGJkMTU5LzEvVmF2MVZlMFZfd1lMWG9wX0YtdGcxNS1zOUNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5
LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwTX5AwQA
wTX+AwQAwTgOAwQAwTgpMA0GCSqGSIb3DQEBCwUAA4IBAQCj488z9K5WenX6WfyA
l5xSwNJ1aWRqX4g541qW57j1gQ+8+KM3/zErQlM4psFOLnyLdcDLuDUKHqNf78jd
rkxTSa2z/kvyWW75U0/MjxvtZlSRw656B+rV6hfXxfmeU4VcIUWBMHBwaVSizG5G
+4LY5pULiikiFZ2a0KoCwJbYznnlAIIFWvtleyNwkeeqYN9cVmMu/7Ss4JFIS6u+
FTfSbG0hn1HhWCGJI/SaLO6w9waq6rIxsMwLUkip+Y5wQG32ZKZR0cblHtam5wwr
dawq/qIMyd5/4jaSiaj/QzCFvIlPOCemMmcFoJwRedzTkS9SbrrRUgkd3nU9eAtB
Vuw3
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:30 2026 by rpki-client