This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/VbaVwUx5UkS98nrnSuuDmBKJivo.roa
File:                     VbaVwUx5UkS98nrnSuuDmBKJivo.roa (raw, json)
Hash identifier:          mkybNkPlRDN/fpGYHShh0wD820aIZj30hwJRzjMpZ0g=
Subject key identifier:   55:B6:95:C1:4C:79:52:44:BD:F2:7A:E7:4A:EB:83:98:12:89:8A:FA
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       019AD06C94E99E9C7F948B65C0B137B3ADD4
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/VbaVwUx5UkS98nrnSuuDmBKJivo.roa
Signing time:             Sat 29 Nov 2025 16:22:48 +0000
ROA not before:           Sat 29 Nov 2025 16:22:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214159
IP address blocks:        178.254.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d0:6c:94:e9:9e:9c:7f:94:8b:65:c0:b1:37:b3:ad:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Nov 29 16:22:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=55b695c14c795244bdf27ae74aeb839812898afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a7:08:f5:67:77:28:78:db:63:a1:24:3c:f2:
                    a6:0f:3b:48:01:85:44:26:d2:d2:3a:16:13:d9:bb:
                    0d:b6:cc:7e:04:9b:03:3a:15:1e:41:9e:ca:e6:21:
                    72:c2:22:29:c7:24:c6:5a:b1:5e:0e:eb:1c:39:e7:
                    04:4d:b2:84:45:a4:32:d9:2f:fe:85:7a:b8:41:c4:
                    24:fd:bd:28:2c:1c:72:38:27:5d:8d:22:25:b9:cd:
                    af:4e:4e:c8:8b:66:31:95:81:4f:3e:ea:c6:98:1d:
                    ea:f2:cd:f5:7e:fa:9b:bc:1d:8c:36:6d:ff:76:aa:
                    81:17:8c:af:72:2c:1d:10:ed:c3:b3:5b:95:27:6e:
                    4e:a1:fe:25:62:35:ca:18:6f:83:ae:2a:78:a8:88:
                    a5:96:c4:d0:1a:5e:7d:46:fd:45:f1:76:3b:b4:31:
                    a8:75:ed:15:dc:c5:8b:50:63:f9:cc:7e:b1:c5:d7:
                    83:30:66:48:22:c2:1a:55:26:17:fc:89:c8:45:55:
                    90:11:38:fd:49:9d:60:8f:82:90:7c:e8:4c:aa:e4:
                    a9:2f:09:a1:15:d7:05:e8:12:6f:6d:23:81:70:63:
                    16:c2:9a:0c:f3:8b:79:ad:6b:a8:4b:43:5a:74:57:
                    9b:46:3a:67:be:20:a6:d4:fd:81:67:d1:10:d5:dc:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B6:95:C1:4C:79:52:44:BD:F2:7A:E7:4A:EB:83:98:12:89:8A:FA
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/VbaVwUx5UkS98nrnSuuDmBKJivo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ba:9f:af:7b:80:ab:99:b9:dc:1b:40:20:68:5c:0f:cf:3b:
         87:3d:dc:95:cc:a1:36:a9:1d:9b:d6:fa:85:5c:f0:69:fd:ef:
         ab:1d:be:df:eb:05:82:92:a0:8d:b2:45:75:71:31:f5:d3:fe:
         60:56:99:4c:d1:96:74:88:65:eb:f8:dd:48:4f:4b:99:1e:21:
         25:78:de:c0:12:8d:38:84:47:b3:8e:aa:8c:76:fb:dc:25:62:
         1b:f6:01:c3:db:5e:7e:43:21:40:5a:ec:df:92:e6:70:3f:e8:
         69:c9:99:5d:80:4a:99:0a:e6:25:cf:15:48:ce:5b:20:d3:8f:
         02:5c:d2:93:77:2d:a0:54:10:9a:8b:3d:18:8d:fd:33:12:11:
         1c:7a:a8:31:e4:53:4f:dd:33:fa:2a:90:20:76:f3:00:18:88:
         58:db:a4:9f:ec:ea:2f:b6:0c:fa:d1:de:d4:1c:58:c3:ee:32:
         5e:6d:c8:4e:32:21:1f:15:3f:0c:dc:9e:67:9b:dd:0b:9b:c6:
         08:a0:f1:a0:cd:5a:cf:22:cf:c5:bb:2b:1c:d6:db:bc:6b:8d:
         a9:4e:ec:7f:fd:a8:55:97:92:d9:44:37:93:3d:00:95:3f:75:
         ec:11:c1:b5:58:2d:82:de:a8:94:af:c7:f2:e6:96:af:7b:f5:
         53:ab:18:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZrQbJTpnpx/lItlwLE3s63UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjUxMTI5MTYyMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWI2OTVjMTRjNzk1MjQ0YmRmMjdhZTc0YWViODM5ODEyODk4YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6cI9Wd3KHjbY6EkPPKmDztIAYVE
JtLSOhYT2bsNtsx+BJsDOhUeQZ7K5iFywiIpxyTGWrFeDuscOecETbKERaQy2S/+
hXq4QcQk/b0oLBxyOCddjSIluc2vTk7Ii2YxlYFPPurGmB3q8s31fvqbvB2MNm3/
dqqBF4yvciwdEO3Ds1uVJ25Oof4lYjXKGG+Drip4qIillsTQGl59Rv1F8XY7tDGo
de0V3MWLUGP5zH6xxdeDMGZIIsIaVSYX/InIRVWQETj9SZ1gj4KQfOhMquSpLwmh
FdcF6BJvbSOBcGMWwpoM84t5rWuoS0NadFebRjpnviCm1P2BZ9EQ1dz31QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFW2lcFMeVJEvfJ650rrg5gSiYr6MB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvVmJhVndVeDVVa1M5OG5yblN1dURtQktKaXZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv62MA0G
CSqGSIb3DQEBCwUAA4IBAQBUup+ve4CrmbncG0AgaFwPzzuHPdyVzKE2qR2b1vqF
XPBp/e+rHb7f6wWCkqCNskV1cTH10/5gVplM0ZZ0iGXr+N1IT0uZHiEleN7AEo04
hEezjqqMdvvcJWIb9gHD215+QyFAWuzfkuZwP+hpyZldgEqZCuYlzxVIzlsg048C
XNKTdy2gVBCaiz0Yjf0zEhEceqgx5FNP3TP6KpAgdvMAGIhY26Sf7Oovtgz60d7U
HFjD7jJebchOMiEfFT8M3J5nm90Lm8YIoPGgzVrPIs/Fuysc1tu8a42pTux//ahV
l5LZRDeTPQCVP3XsEcG1WC2C3qiUr8fy5pave/VTqxjM
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:00:33 2025 by rpki-client