This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vTt98DamUvECWEMoSR5lw_z_oe4.roa
File:                     vTt98DamUvECWEMoSR5lw_z_oe4.roa (raw, json)
Hash identifier:          xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=
Subject key identifier:   BD:3B:7D:F0:36:A6:52:F1:02:58:43:28:49:1E:65:C3:FC:FF:A1:EE
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       019B78A2E4C7DAFBCA5347FA833CB54F7D04
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vTt98DamUvECWEMoSR5lw_z_oe4.roa
Signing time:             Thu 01 Jan 2026 08:18:19 +0000
ROA not before:           Thu 01 Jan 2026 08:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     268624
IP address blocks:        80.94.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:e4:c7:da:fb:ca:53:47:fa:83:3c:b5:4f:7d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Jan  1 08:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd3b7df036a652f102584328491e65c3fcffa1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:00:1c:c7:a1:66:e8:98:e2:b3:86:53:42:
                    09:c1:0d:09:f5:ef:b1:4c:7a:d9:a6:ff:7d:38:04:
                    9e:85:0f:ec:32:8f:1a:66:75:75:fe:da:8b:79:c0:
                    9a:d7:21:c5:67:d6:20:1b:a7:2f:55:35:22:21:05:
                    f1:63:20:74:3a:e5:23:ce:d8:1a:c8:1a:59:5b:42:
                    96:d6:26:0d:75:79:6f:17:86:10:25:ba:4a:31:81:
                    17:fc:b9:6e:95:82:0f:8c:8f:46:ca:08:dd:35:fc:
                    fa:4d:81:3d:74:a2:0d:40:c1:fc:81:7b:a8:be:25:
                    e0:10:2e:f1:63:0b:bb:f0:b6:a4:85:d0:7a:bd:08:
                    ab:b5:b9:b4:97:11:7d:ab:89:b4:6d:e1:c8:50:02:
                    87:21:65:04:af:18:7f:40:5f:66:07:ac:f8:e2:95:
                    17:bd:b7:98:94:d8:97:4e:dd:bb:93:a3:c7:74:3a:
                    63:20:80:10:47:ac:c1:ae:c2:9a:49:d3:2c:76:e4:
                    1e:ea:86:30:00:d6:a2:15:f8:fd:38:05:a2:c8:0d:
                    66:2c:ac:a3:4f:9d:a3:b1:59:2f:cf:f7:8f:09:45:
                    04:50:9b:a3:b7:09:2d:65:43:4b:5f:a3:0f:53:50:
                    15:fb:26:f9:d9:19:a3:26:3f:cf:7d:88:4d:cf:d8:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:7D:F0:36:A6:52:F1:02:58:43:28:49:1E:65:C3:FC:FF:A1:EE
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vTt98DamUvECWEMoSR5lw_z_oe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.94.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:c8:4e:d1:ea:0e:81:ed:ef:c0:c4:fa:09:6c:a0:d1:01:a3:
         6d:b0:fe:83:02:c3:8f:8d:fc:48:9c:0b:79:59:ee:f3:80:e2:
         3d:a7:74:b2:26:2d:be:90:49:6b:67:e4:06:71:3a:52:02:35:
         b7:d0:1e:d1:3f:33:61:70:24:16:69:f5:be:b0:dc:e0:e2:00:
         00:d7:0e:90:e1:ab:1b:4c:30:09:84:bf:e7:b1:f6:e4:44:f6:
         ab:b2:87:79:7f:2a:c7:ca:0e:fc:ce:3c:b4:2d:02:00:f6:75:
         a6:6f:35:4a:65:00:02:78:fa:db:5b:29:d9:58:01:9b:76:22:
         c8:de:f5:e2:34:66:3a:51:83:56:eb:2c:5d:82:b7:ec:97:4f:
         fc:77:5a:91:f0:1d:1b:86:ac:b6:9c:d9:aa:9d:b0:1e:27:1d:
         ee:f4:0d:b0:b2:15:e7:f3:f4:94:f9:23:b0:6b:65:c2:d9:60:
         b5:a3:29:b5:f1:4a:c2:14:2a:fd:d0:dc:e2:ec:ef:2e:2e:72:
         84:6c:97:d2:67:da:d0:94:5b:2c:c3:c6:dc:9c:a1:dc:24:5c:
         a7:55:31:e3:95:5d:10:ff:9f:66:bd:9b:8b:28:1d:8f:af:a1:
         d4:f0:c1:21:62:46:1e:14:09:8c:15:d7:06:27:f4:ce:85:9d:
         e0:13:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:31 2026 by rpki-client