This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vFmuetBZqj5zpom7OIPEuRwpxlc.roa
File:                     vFmuetBZqj5zpom7OIPEuRwpxlc.roa (raw, json)
Hash identifier:          cP0QLGljZLCJzP6o76pszZkHn3foXTVJA0Uz8E3w60w=
Subject key identifier:   BC:59:AE:7A:D0:59:AA:3E:73:A6:89:BB:38:83:C4:B9:1C:29:C6:57
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       019B7A5B238C8567856BD7A451A598ABB136
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vFmuetBZqj5zpom7OIPEuRwpxlc.roa
Signing time:             Thu 01 Jan 2026 16:19:11 +0000
ROA not before:           Thu 01 Jan 2026 16:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209096
IP address blocks:        80.249.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:23:8c:85:67:85:6b:d7:a4:51:a5:98:ab:b1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  1 16:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc59ae7ad059aa3e73a689bb3883c4b91c29c657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:7c:9c:f9:84:f7:1f:3e:b2:a3:27:2a:60:
                    de:33:89:36:9b:77:ae:5f:26:6c:42:91:14:62:23:
                    1b:a6:0f:80:5c:13:20:da:7d:0d:58:a8:42:cf:1e:
                    7d:5f:ac:4d:4c:2c:b2:fb:1e:de:e5:3a:5f:2a:38:
                    dd:66:c1:42:8c:6b:ff:5c:b7:6e:09:1f:e7:b7:29:
                    6c:a5:52:34:7c:8d:02:ed:96:16:6f:7c:0f:69:d2:
                    fd:20:9e:f8:61:e6:a3:1f:8a:d1:3c:14:3d:a7:5f:
                    88:98:f9:1b:46:7b:d8:09:da:0d:cb:0a:be:14:3a:
                    8a:85:2b:00:08:31:6a:cb:27:5b:45:f9:44:29:a2:
                    82:26:ee:43:98:87:1a:19:c0:63:37:69:be:d1:3b:
                    f9:76:87:8d:11:86:1d:a0:d5:c4:6e:38:95:98:2c:
                    aa:67:e1:56:05:8d:03:a0:b0:d3:bf:b6:96:06:a0:
                    63:ee:fd:99:8e:33:ed:45:a7:de:b8:68:48:e8:55:
                    e3:21:47:a6:64:96:9e:c6:2a:5f:a6:1b:3c:70:6d:
                    8c:db:91:bc:10:46:e3:f6:45:58:5d:8d:83:eb:a8:
                    63:3c:9a:be:ae:e7:ae:35:c7:0d:07:70:a7:59:85:
                    01:b3:bf:e8:cd:b6:02:3c:90:c3:dd:9f:e5:f8:50:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:59:AE:7A:D0:59:AA:3E:73:A6:89:BB:38:83:C4:B9:1C:29:C6:57
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vFmuetBZqj5zpom7OIPEuRwpxlc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.249.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:4f:a5:88:ff:d0:74:e5:e9:64:8b:f3:7e:2e:66:13:54:
         bb:ef:32:90:61:02:b5:cc:d0:b2:4e:ab:19:12:d5:42:5a:53:
         6e:0a:f0:bd:26:ae:18:04:0c:ae:ff:3e:b2:e0:f5:bb:fd:8b:
         58:6a:2e:f8:01:0a:d3:53:e9:f2:60:28:98:af:d5:21:bd:a3:
         78:c0:23:f6:65:40:45:e4:01:e2:bf:58:42:8e:69:0a:2c:7d:
         d9:f8:d4:6a:6e:64:02:12:3b:a5:24:2d:97:e9:78:b1:fd:5a:
         4e:c7:9d:3b:fc:69:08:49:e0:e0:11:c2:a7:cc:b5:53:93:c2:
         f4:ef:ac:33:db:d0:14:bb:6b:56:99:53:2b:5c:f4:14:eb:c1:
         de:eb:ae:3e:f8:88:75:33:77:7a:31:3e:99:76:b6:19:95:9c:
         75:d2:83:1b:46:5d:58:15:13:03:d2:43:90:ba:d9:b6:a6:bb:
         4b:e2:4f:21:be:d4:82:35:43:1f:60:8a:18:64:af:4a:89:13:
         bd:22:17:bd:88:07:73:66:2c:8d:1b:1e:99:7e:1d:cd:f5:49:
         91:2f:59:0e:2d:15:e1:db:e3:ef:cd:90:f7:0a:e8:ff:78:0d:
         20:3c:c9:de:21:33:7e:50:63:a8:ec:b3:e7:c1:9a:ea:4d:c7:
         bd:f5:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:14:39 2026 by rpki-client