This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/VrIgLz2PFQgd63beVRzJrL2SQBc.roa
File:                     VrIgLz2PFQgd63beVRzJrL2SQBc.roa (raw, json)
Hash identifier:          sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=
Subject key identifier:   56:B2:20:2F:3D:8F:15:08:1D:EB:76:DE:55:1C:C9:AC:BD:92:40:17
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       019B7DCB2B39CF53C5FAB664F286B1452B35
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/VrIgLz2PFQgd63beVRzJrL2SQBc.roa
Signing time:             Fri 02 Jan 2026 08:20:25 +0000
ROA not before:           Fri 02 Jan 2026 08:20:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198692
IP address blocks:        82.150.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:2b:39:cf:53:c5:fa:b6:64:f2:86:b1:45:2b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Jan  2 08:20:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56b2202f3d8f15081deb76de551cc9acbd924017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:8f:40:04:93:13:3a:a7:0e:6b:19:8f:ae:
                    86:12:0d:17:5e:32:54:d2:a1:4d:0d:3b:f7:92:8e:
                    2f:92:48:e5:f5:84:00:75:52:35:ae:38:96:61:47:
                    44:ad:ef:a3:04:5c:ae:4d:85:cd:7f:ef:7f:6f:39:
                    b7:5d:0c:57:24:17:54:11:be:e8:35:61:61:22:91:
                    08:d5:96:57:86:c9:2b:34:be:bf:60:f4:dd:a9:1c:
                    4d:e6:7d:87:e9:80:66:69:4b:60:e1:41:da:75:c4:
                    8c:73:ef:e0:5e:e1:23:47:c1:51:82:94:46:42:43:
                    fc:bc:13:ed:93:13:8b:2d:84:04:d2:31:c3:d6:d5:
                    bc:f8:fc:a9:16:69:79:e0:03:6e:02:3c:71:f2:27:
                    79:b4:b5:62:ed:25:b8:7a:5e:a6:d5:bc:ca:26:ea:
                    6b:1c:1f:d6:32:44:6d:76:ea:07:4a:91:4b:1c:8f:
                    e4:df:04:f1:ee:f7:c2:04:3e:60:24:3e:65:db:e9:
                    83:8f:72:0f:3a:d0:41:07:f4:8c:44:8c:c8:74:3b:
                    24:dd:0b:b2:f3:cc:78:b7:b8:48:52:b9:b4:f1:67:
                    f6:2b:98:2e:62:94:c1:ef:be:7e:fa:79:6d:b5:0d:
                    b5:32:a2:d8:9c:bf:48:ce:e5:8f:cc:0b:38:25:01:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B2:20:2F:3D:8F:15:08:1D:EB:76:DE:55:1C:C9:AC:BD:92:40:17
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/VrIgLz2PFQgd63beVRzJrL2SQBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.150.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:20:38:f6:f6:a1:8b:c1:e5:a9:14:19:9f:55:62:53:73:13:
         7a:e5:73:82:70:59:c3:0f:39:6d:8f:61:23:2a:6b:57:82:9a:
         80:44:b8:5f:6e:a5:95:75:e6:ff:1f:a3:31:3f:73:9e:d9:62:
         e4:3e:3b:1c:81:00:11:e8:8b:11:f4:d5:3d:97:9c:6a:71:16:
         6f:25:44:37:b2:04:b6:4f:c5:7a:a1:29:c5:80:2d:5e:34:98:
         c2:b1:3a:83:0c:42:d8:5d:74:df:c3:84:bd:1d:be:62:52:45:
         7e:6b:c1:37:78:1a:5c:b2:f7:57:d1:49:b8:89:f8:d6:9e:6f:
         a7:8d:b1:4c:1c:e2:87:26:2f:4a:cb:2a:ea:ba:0e:f3:2f:ed:
         dc:dd:e9:49:49:c5:de:c3:b1:9c:21:e5:ab:d1:80:e2:ad:e2:
         39:e1:31:af:42:c2:d9:20:7e:b6:48:3e:b4:73:10:1b:70:af:
         c1:4c:ea:3f:49:10:ab:ad:57:ad:fd:de:c8:44:8f:2a:d8:70:
         4a:00:fa:ca:c0:97:30:c6:d8:cd:ac:29:1a:51:fc:64:ac:14:
         29:da:20:4b:6c:6c:d6:82:8c:e4:ec:89:aa:8a:4d:90:ae:dd:
         62:5c:64:19:e1:2e:81:1c:3f:53:2a:af:25:48:e7:08:a2:a4:
         e7:d1:62:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:19 2026 by rpki-client