This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/vLT1U1k90JDYd1QSTpdp7-5jPm8.roa
File:                     vLT1U1k90JDYd1QSTpdp7-5jPm8.roa (raw, json)
Hash identifier:          tl575EH5XzvM2v0Ar/gj9D2hmKLvwaQZml6OLGCa5aE=
Subject key identifier:   BC:B4:F5:53:59:3D:D0:90:D8:77:54:12:4E:97:69:EF:EE:63:3E:6F
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       019B7F833FBFB5D91F065CAE59C782A5398C
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/vLT1U1k90JDYd1QSTpdp7-5jPm8.roa
Signing time:             Fri 02 Jan 2026 16:21:06 +0000
ROA not before:           Fri 02 Jan 2026 16:21:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20570
IP address blocks:        194.127.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:3f:bf:b5:d9:1f:06:5c:ae:59:c7:82:a5:39:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Jan  2 16:21:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bcb4f553593dd090d87754124e9769efee633e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:8a:26:6c:65:fa:8b:66:20:cc:af:8c:9e:
                    dd:bc:2a:bd:25:8c:90:35:02:ad:84:c3:47:e8:de:
                    17:e6:17:d9:6d:5a:4b:70:8b:d9:cb:9a:09:4a:e2:
                    f0:1d:74:44:05:f0:55:d6:30:89:fd:9d:ff:1c:56:
                    63:5e:6a:51:00:3b:38:e8:94:10:b3:48:9a:1a:db:
                    13:e5:f3:e8:20:98:d0:9d:fb:f8:9d:f3:95:4d:bb:
                    3e:f4:27:33:83:32:81:9f:4a:ec:9d:ad:4d:5c:ab:
                    63:5e:0a:4d:10:7f:c2:96:27:45:de:11:66:57:a9:
                    c0:20:ef:c5:3c:a8:49:73:86:68:3f:a2:51:a7:0a:
                    d0:48:0c:63:4a:15:3e:9d:ac:e7:9a:29:e8:34:a4:
                    9f:d4:f3:98:7c:08:6c:4a:5a:38:3d:b1:a7:fe:12:
                    26:cf:3d:44:ad:ab:a0:5b:a4:dd:d6:4b:1c:01:39:
                    ce:87:fa:82:6f:6e:44:79:db:12:db:e3:3b:54:14:
                    f1:d0:f0:9b:a9:20:7d:b3:7d:35:a5:f7:39:e5:2f:
                    af:56:24:b9:47:82:92:71:36:54:c4:7a:b2:0b:aa:
                    3e:91:42:1d:fd:f5:12:64:3b:89:0a:60:61:1e:38:
                    82:09:c2:62:06:13:d4:42:76:3a:01:b3:82:43:76:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B4:F5:53:59:3D:D0:90:D8:77:54:12:4E:97:69:EF:EE:63:3E:6F
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/vLT1U1k90JDYd1QSTpdp7-5jPm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:cd:9d:cf:50:e6:b3:99:87:f3:64:ca:80:03:7b:3b:ce:55:
         5f:29:b0:01:bc:5e:e3:6e:e6:ea:7f:d2:75:05:15:1d:4d:ae:
         6d:9d:14:e5:0d:c1:75:d2:cd:bf:3b:bf:30:fe:ad:e5:8e:4b:
         15:f9:b8:15:69:70:af:ad:a1:4a:5d:59:62:0e:5c:90:81:48:
         5c:92:69:43:7c:a3:f0:6e:8b:ff:5d:63:8f:96:f9:4c:b5:c0:
         8d:f6:89:86:c0:b5:f1:2d:d2:f9:df:d3:73:40:98:79:06:74:
         8c:6a:64:ac:df:13:ab:7a:49:ef:f3:50:05:46:f7:d4:02:37:
         7c:44:9d:ad:7a:e7:8b:6b:59:d8:94:bf:2e:cf:b4:f1:3b:42:
         89:f0:de:b9:ad:87:02:17:8a:1c:23:77:9c:f3:ba:7b:6c:1d:
         76:68:f8:5e:74:9c:a4:8e:9e:e4:d9:21:e4:6c:bd:15:6e:8e:
         0a:2e:8f:93:a9:ea:e1:1b:a7:f0:77:02:3c:f6:a9:13:52:79:
         3f:2b:78:b7:56:ec:ba:04:57:1f:52:11:86:63:85:3c:cd:7c:
         e4:6f:fc:28:8a:d0:88:9a:7f:c3:67:53:ce:3a:23:d8:07:f5:
         04:6e:ea:f5:e6:a6:12:b9:f8:cf:94:55:0d:1a:61:69:f1:6f:
         42:ae:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:19:20 2026 by rpki-client