This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vPIPys_ck72jylL-AUvqLHtAd44.roa
File:                     vPIPys_ck72jylL-AUvqLHtAd44.roa (raw, json)
Hash identifier:          EaJRNirRwPO81qiwnsAEnRZoQLT1oD2oeGnXmmJGVRQ=
Subject key identifier:   BC:F2:0F:CA:CF:DC:93:BD:A3:CA:52:FE:01:4B:EA:2C:7B:40:77:8E
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       019B7C128CE438FCFC7BBA1334925C984F6C
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vPIPys_ck72jylL-AUvqLHtAd44.roa
Signing time:             Fri 02 Jan 2026 00:19:09 +0000
ROA not before:           Fri 02 Jan 2026 00:19:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215540
IP address blocks:        80.66.72.0/24 maxlen: 24
                          87.251.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:8c:e4:38:fc:fc:7b:ba:13:34:92:5c:98:4f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jan  2 00:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bcf20fcacfdc93bda3ca52fe014bea2c7b40778e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:ad:0f:15:a5:ed:9e:e2:74:0f:06:1f:80:
                    6a:f9:ef:60:66:8b:35:ff:41:ca:5b:aa:a3:1d:09:
                    9f:4e:58:66:ad:65:02:a7:45:c1:4a:c4:4c:9f:eb:
                    4b:e3:95:7d:d2:39:05:a4:8f:57:ee:d0:88:ae:96:
                    90:c7:3f:5b:7a:82:c7:d3:86:5f:1d:16:dc:db:4e:
                    8e:a9:5e:75:e1:41:1c:7b:25:a2:85:62:0f:cc:94:
                    28:76:36:b0:e6:ab:3d:fc:dc:83:a3:d6:34:e9:4c:
                    48:27:3e:6e:58:f7:06:da:5f:58:da:ef:3a:8b:6e:
                    6a:77:d6:db:b5:4a:80:51:af:5a:78:bb:12:90:5a:
                    f3:3e:01:35:bb:7b:b4:76:80:ec:f1:eb:d1:d4:96:
                    f8:0b:70:88:98:d9:63:74:c6:61:ed:c4:55:87:ef:
                    b2:01:4c:c7:8d:44:47:b4:cb:17:86:f1:0c:f8:63:
                    64:2e:c9:37:41:51:fa:c6:a8:4d:bf:60:d4:f3:50:
                    01:19:a0:fd:27:0a:04:d0:ea:a6:b3:0e:71:9b:53:
                    02:95:e0:20:aa:e2:f5:4d:e5:c7:d1:a6:04:f8:f2:
                    46:c1:2e:44:97:a7:14:26:ef:79:8b:89:7e:0e:48:
                    9b:ee:bd:42:11:40:bb:f3:68:91:26:13:e9:ef:fe:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F2:0F:CA:CF:DC:93:BD:A3:CA:52:FE:01:4B:EA:2C:7B:40:77:8E
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vPIPys_ck72jylL-AUvqLHtAd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.72.0/24
                  87.251.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:03:b9:94:2b:a8:eb:ce:62:38:91:98:53:56:c7:a6:9f:
         93:5b:be:b7:2e:fc:fb:40:d5:38:93:25:be:ce:b1:92:a9:2b:
         c0:09:dc:b0:e5:e1:cf:93:a5:c6:9a:06:73:30:ee:a0:4e:e0:
         92:6f:50:2a:61:bc:68:4c:df:c3:ab:cf:b1:d9:8b:d2:56:f6:
         4c:f7:ae:98:9f:c6:5a:d0:d4:31:73:7f:0d:12:ed:f1:07:02:
         b8:8e:5a:6b:38:c4:19:34:93:ee:6c:63:a2:1e:56:f2:35:0f:
         b5:c3:26:6b:fb:79:00:f2:ed:31:b4:86:08:60:c2:c5:65:fb:
         6f:35:73:94:47:fd:af:e6:7a:25:4f:93:88:06:35:cd:05:cc:
         b4:ee:54:3d:f3:96:02:a2:1e:25:cd:16:1a:26:c0:34:05:dc:
         ea:21:d4:0d:97:b2:92:b1:1d:f1:8c:96:45:10:2f:d5:bd:cc:
         80:36:a3:50:93:1a:ad:bb:c5:03:e1:c9:66:ad:5b:1a:48:2c:
         c1:8e:4a:26:34:dd:42:54:bf:40:1e:42:45:b8:52:3f:b3:0d:
         6e:da:5e:78:88:5e:a4:3f:d2:ca:76:a9:2c:9b:a3:58:ad:71:
         2b:29:b1:75:30:93:30:07:05:58:a2:c9:b3:46:05:a9:8e:89:
         ee:2b:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:13:36 2026 by rpki-client