This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/VpbFmIH_t2IDnvNYTapdzjWFcyE.roa
File:                     VpbFmIH_t2IDnvNYTapdzjWFcyE.roa (raw, json)
Hash identifier:          9IQmiSUsGUEZsHUkFt7WwKB9UL9B6Sz69TEmpP9Pvqs=
Subject key identifier:   56:96:C5:98:81:FF:B7:62:03:9E:F3:58:4D:AA:5D:CE:35:85:73:21
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       019B78A2C630CEB559F8CD8B0689EB4C4FD2
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/VpbFmIH_t2IDnvNYTapdzjWFcyE.roa
Signing time:             Thu 01 Jan 2026 08:18:11 +0000
ROA not before:           Thu 01 Jan 2026 08:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209984
IP address blocks:        213.226.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:c6:30:ce:b5:59:f8:cd:8b:06:89:eb:4c:4f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Jan  1 08:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5696c59881ffb762039ef3584daa5dce35857321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:aa:75:ae:3e:31:9f:fb:45:f7:6a:50:20:
                    30:8d:e8:f3:bb:2b:7b:d3:f1:7c:67:5d:f3:a3:c7:
                    e7:ac:dc:9c:0d:2e:39:c6:5e:32:da:92:a9:a9:e0:
                    26:2a:a9:4d:fa:1a:0b:93:c7:b1:03:1e:a2:d6:cd:
                    62:47:a9:74:95:5c:96:aa:61:11:a7:62:e1:cf:c2:
                    35:c6:6a:59:04:99:09:ef:95:b9:f5:70:57:ec:04:
                    a8:fd:b9:c8:0d:3d:76:b8:e1:f5:88:93:b8:84:91:
                    bf:c2:a1:db:85:13:98:c7:e4:cc:6d:38:b1:c0:07:
                    7f:4c:df:55:7c:2a:2c:e3:6f:48:ba:d3:f5:d4:b1:
                    6e:02:70:87:cc:73:35:36:1c:cc:0a:4f:c1:d2:03:
                    58:05:50:ef:0e:07:e6:96:16:d9:93:06:96:c4:83:
                    b3:e3:51:a8:11:c7:d9:24:8d:f5:c9:80:d4:c1:40:
                    80:5a:0f:16:6f:04:ed:f0:8b:41:2d:65:c3:09:47:
                    df:38:d2:bb:d6:41:76:bc:74:e6:a7:05:31:39:a3:
                    1f:30:df:d0:91:c5:b2:d6:01:26:30:98:d5:de:ae:
                    ed:03:4a:c5:70:5f:9f:d9:00:55:9d:d9:d8:29:0e:
                    ee:ec:4a:f0:33:fc:a2:c2:8d:92:ef:6f:68:db:1c:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:C5:98:81:FF:B7:62:03:9E:F3:58:4D:AA:5D:CE:35:85:73:21
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/VpbFmIH_t2IDnvNYTapdzjWFcyE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.226.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:13:e2:17:87:5c:94:e2:0b:f3:af:80:c7:48:42:8a:45:82:
         4a:59:a0:e2:75:c2:0b:18:5d:9a:aa:ae:97:09:6d:ed:14:8d:
         4b:db:b0:ea:7c:84:ce:3c:36:13:c5:74:fd:04:e7:7f:b3:b0:
         62:1e:00:06:80:98:22:3e:78:ee:bb:01:fb:e0:61:d8:8a:9f:
         30:a6:a6:cd:81:d0:60:ed:b0:04:9d:6b:14:5b:e9:55:57:50:
         0d:ea:da:6d:f8:fd:7c:03:e3:49:ce:df:1c:3f:47:6b:56:e3:
         65:4b:96:f5:17:e6:0a:b5:be:a6:5d:45:a8:33:31:93:e8:ef:
         ba:19:8e:0f:20:c0:b7:26:fc:e0:81:15:71:f3:b3:7a:76:9e:
         03:e4:48:6a:07:cb:0d:0f:17:5e:5b:03:da:4f:ce:80:0c:f8:
         6f:48:02:14:36:a7:a9:83:04:fc:80:76:a3:d3:04:d8:82:6d:
         cd:31:32:14:a0:94:55:49:f1:f6:0c:2c:85:f2:bd:c9:2a:15:
         3c:41:76:6f:3f:7d:c1:ae:4f:92:e8:60:e3:df:40:ae:12:66:
         26:7f:46:b8:8e:01:05:25:23:8d:d1:9e:3b:23:b1:8d:54:58:
         f9:d1:37:61:6f:91:42:c6:8d:9a:80:f1:7d:c6:4d:14:c3:5b:
         51:9f:67:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4osYwzrVZ+M2LBonrTE/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMWM5NTFkNjFiODdkYTE5NDM5Nzg0ZDIzNjY3YTg5Y2Iz
MjkwYTQwHhcNMjYwMTAxMDgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njk2YzU5ODgxZmZiNzYyMDM5ZWYzNTg0ZGFhNWRjZTM1ODU3MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVKqda4+MZ/7RfdqUCAwjejzuyt7
0/F8Z13zo8fnrNycDS45xl4y2pKpqeAmKqlN+hoLk8exAx6i1s1iR6l0lVyWqmER
p2Lhz8I1xmpZBJkJ75W59XBX7ASo/bnIDT12uOH1iJO4hJG/wqHbhROYx+TMbTix
wAd/TN9VfCos429IutP11LFuAnCHzHM1NhzMCk/B0gNYBVDvDgfmlhbZkwaWxIOz
41GoEcfZJI31yYDUwUCAWg8WbwTt8ItBLWXDCUffONK71kF2vHTmpwUxOaMfMN/Q
kcWy1gEmMJjV3q7tA0rFcF+f2QBVndnYKQ7u7ErwM/yiwo2S729o2xxoLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFaWxZiB/7diA57zWE2qXc41hXMhMB8GA1UdIwQY
MBaAFOoclR1huH2hlDl4TSNmeonLMpCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMt
NzI0YjFhMDIxMmQ0LzEvVnBiRm1JSF90MklEbnZOWVRhcGR6aldGY3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMtNzI0YjFhMDIxMmQ0
LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1eJUMA0G
CSqGSIb3DQEBCwUAA4IBAQBoE+IXh1yU4gvzr4DHSEKKRYJKWaDidcILGF2aqq6X
CW3tFI1L27DqfITOPDYTxXT9BOd/s7BiHgAGgJgiPnjuuwH74GHYip8wpqbNgdBg
7bAEnWsUW+lVV1AN6tpt+P18A+NJzt8cP0drVuNlS5b1F+YKtb6mXUWoMzGT6O+6
GY4PIMC3JvzggRVx87N6dp4D5EhqB8sNDxdeWwPaT86ADPhvSAIUNqepgwT8gHaj
0wTYgm3NMTIUoJRVSfH2DCyF8r3JKhU8QXZvP33Brk+S6GDj30CuEmYmf0a4jgEF
JSON0Z47I7GNVFj50Tdhb5FCxo2agPF9xk0Uw1tRn2eo
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:17:01 2026 by rpki-client