This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/vIAxQih4hCVKQcdsgF8pGRSQ9Ac.roa
File:                     vIAxQih4hCVKQcdsgF8pGRSQ9Ac.roa (raw, json)
Hash identifier:          KgFZjrNJ+4xk/AWdnTgN+umWyd65NfXlzGKus00+cNs=
Subject key identifier:   BC:80:31:42:28:78:84:25:4A:41:C7:6C:80:5F:29:19:14:90:F4:07
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       019B7C80787C6DBA687897B7D5B11E29F8B9
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/vIAxQih4hCVKQcdsgF8pGRSQ9Ac.roa
Signing time:             Fri 02 Jan 2026 02:19:12 +0000
ROA not before:           Fri 02 Jan 2026 02:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8903
IP address blocks:        77.72.104.0/21 maxlen: 24
                          84.18.0.0/19 maxlen: 24
                          92.60.160.0/20 maxlen: 24
                          92.60.173.0/24 maxlen: 24
                          176.98.220.0/22 maxlen: 24
                          185.66.60.0/22 maxlen: 24
                          185.145.224.0/22 maxlen: 24
                          185.155.64.0/22 maxlen: 24
                          185.173.44.0/22 maxlen: 24
                          185.187.180.0/22 maxlen: 24
                          185.224.76.0/22 maxlen: 24
                          193.34.240.0/22 maxlen: 24
                          195.5.64.0/19 maxlen: 24
                          212.49.128.0/18 maxlen: 24
                          212.49.189.0/24 maxlen: 24
                          212.66.161.0/24 maxlen: 24
                          212.66.162.0/23 maxlen: 23
                          212.66.163.0/24 maxlen: 24
                          212.66.164.0/22 maxlen: 22
                          212.66.168.0/21 maxlen: 21
                          212.66.176.0/20 maxlen: 24
                          212.163.0.0/16 maxlen: 24
                          213.9.128.0/17 maxlen: 24
                          213.9.142.0/23 maxlen: 23
                          213.192.192.0/18 maxlen: 24
                          213.192.193.0/24 maxlen: 24
                          213.192.195.0/24 maxlen: 24
                          213.192.200.0/22 maxlen: 22
                          213.192.203.0/24 maxlen: 24
                          213.192.206.0/23 maxlen: 23
                          213.192.212.0/22 maxlen: 22
                          213.192.213.0/24 maxlen: 24
                          213.192.216.0/21 maxlen: 21
                          213.192.224.0/22 maxlen: 22
                          213.192.228.0/23 maxlen: 23
                          213.192.232.0/22 maxlen: 22
                          213.192.238.0/24 maxlen: 24
                          213.192.239.0/24 maxlen: 24
                          213.192.240.0/24 maxlen: 24
                          213.192.241.0/24 maxlen: 24
                          213.192.242.0/23 maxlen: 23
                          213.192.244.0/23 maxlen: 23
                          213.192.246.0/24 maxlen: 24
                          213.192.247.0/24 maxlen: 24
                          213.192.248.0/21 maxlen: 21
                          213.192.249.0/24 maxlen: 24
                          213.192.251.0/24 maxlen: 24
                          213.192.252.0/23 maxlen: 23
                          213.192.253.0/24 maxlen: 24
                          213.192.254.0/24 maxlen: 24
                          213.192.255.0/24 maxlen: 24
                          2001:ac0::/29 maxlen: 29
                          2001:ac0::/32 maxlen: 48
                          2001:ac0:c0c0::/44 maxlen: 44
                          2001:ac0:c880::/44 maxlen: 44
                          2a0d:59c0::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:78:7c:6d:ba:68:78:97:b7:d5:b1:1e:29:f8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Jan  2 02:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc803142287884254a41c76c805f29191490f407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:71:20:a2:2f:0d:eb:80:f7:fc:b8:ae:5b:
                    a3:f9:a8:3f:29:26:76:fe:9f:42:fd:08:76:93:73:
                    dc:b3:5a:43:d4:e2:49:74:11:dd:2b:20:95:b1:4c:
                    8e:01:5e:fe:67:19:65:f7:de:d1:eb:09:a0:fd:a1:
                    86:20:3b:83:85:0e:62:bb:e5:26:1e:3f:6e:40:fc:
                    bc:61:24:7a:dd:85:48:6c:01:15:80:33:99:9f:91:
                    a8:d7:a3:ae:09:6d:7f:fb:09:09:48:67:b7:f2:1a:
                    0b:a2:87:15:cf:95:ed:b7:bf:d8:85:a5:3c:df:60:
                    7d:a4:b0:ae:84:8d:9a:1d:96:96:17:92:3c:b9:09:
                    79:67:7d:da:69:95:86:63:bf:67:3a:64:6c:b3:f0:
                    f3:33:0b:7b:cb:4b:e5:2e:2d:ce:0a:b4:f1:36:b1:
                    59:12:3f:4a:47:58:e1:9e:85:6b:c1:d0:8a:80:61:
                    3f:f2:88:76:c9:20:88:c0:e2:90:f7:2e:d1:04:b6:
                    df:c1:e0:d3:49:93:c0:a3:98:5b:98:0b:ee:32:eb:
                    34:0f:99:e4:15:29:7d:df:de:ff:0f:65:11:41:e7:
                    21:b4:13:f9:be:54:e5:5a:46:56:57:92:3c:bb:c2:
                    2b:bb:ff:13:e1:5d:e7:b2:21:3d:3d:78:76:d7:22:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:80:31:42:28:78:84:25:4A:41:C7:6C:80:5F:29:19:14:90:F4:07
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/vIAxQih4hCVKQcdsgF8pGRSQ9Ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.104.0/21
                  84.18.0.0/19
                  92.60.160.0/20
                  176.98.220.0/22
                  185.66.60.0/22
                  185.145.224.0/22
                  185.155.64.0/22
                  185.173.44.0/22
                  185.187.180.0/22
                  185.224.76.0/22
                  193.34.240.0/22
                  195.5.64.0/19
                  212.49.128.0/18
                  212.66.161.0-212.66.191.255
                  212.163.0.0/16
                  213.9.128.0/17
                  213.192.192.0/18
                IPv6:
                  2001:ac0::/29
                  2a0d:59c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         bd:90:e9:4d:b8:2d:94:86:8f:d9:ce:c7:6c:a6:ee:76:65:e4:
         df:ea:4b:33:af:a3:13:8f:9f:44:aa:b6:35:a7:20:92:af:b0:
         0f:df:96:32:b7:ac:ba:16:db:12:a7:03:9c:67:e1:54:fd:67:
         c8:59:03:77:82:5e:27:38:9c:cc:d6:fe:67:f3:48:13:0c:28:
         34:8f:66:ed:b5:0f:d3:dc:97:00:e0:4b:96:10:06:15:2f:4e:
         42:a3:3c:26:5e:03:2d:03:26:37:f8:20:57:5f:08:f4:dd:55:
         89:20:ee:82:f2:1f:0a:9c:1b:4f:5f:91:04:84:dd:16:04:77:
         79:d2:12:b1:10:77:4d:b8:c4:5d:53:be:be:83:c6:ce:5d:5e:
         aa:8e:38:af:47:eb:99:b2:20:fe:c0:79:7b:9e:3f:f9:94:6c:
         0b:84:cb:91:9c:88:63:72:52:fb:d3:4d:73:bd:25:87:cb:63:
         05:3d:b2:56:d1:62:48:e0:b1:94:10:b2:2e:50:3e:9a:9a:8c:
         ab:05:0c:03:3c:fd:fb:f9:44:44:58:80:61:cc:8c:c9:e4:f4:
         47:78:9f:09:e2:00:d9:45:52:3b:04:14:9b:45:5c:16:65:26:
         8d:8f:9b:e8:99:a3:3e:0b:ae:48:86:fd:ba:d5:e7:2d:03:68:
         86:63:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:35 2026 by rpki-client