This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa
File:                     VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa (raw, json)
Hash identifier:          vfRsWV2tt63Zp2pKLXvqyz9hs71tP2T2P3y8dqOioMc=
Subject key identifier:   56:05:E6:8B:0D:C9:8E:B5:E8:05:22:33:95:8F:C3:69:66:96:C5:23
Certificate issuer:       /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial:       019B7834431B040B50909F27493358821C94
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa
Signing time:             Thu 01 Jan 2026 06:17:29 +0000
ROA not before:           Thu 01 Jan 2026 06:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43957
IP address blocks:        144.208.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:43:1b:04:0b:50:90:9f:27:49:33:58:82:1c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
        Validity
            Not Before: Jan  1 06:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5605e68b0dc98eb5e8052233958fc3696696c523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:51:6b:76:36:e8:00:e7:39:5d:95:39:8a:
                    48:68:95:59:b8:b6:39:34:31:9c:55:03:2e:5a:62:
                    f0:87:b6:a5:2f:54:2d:6c:45:1e:40:bb:c6:e1:97:
                    fa:67:71:71:da:9a:8b:d5:a6:46:ae:8c:f3:7d:67:
                    df:0f:6a:9d:71:60:9c:41:f4:79:cd:0e:c6:47:c2:
                    1c:05:4f:a4:fc:ad:3e:25:69:5b:d4:97:64:97:6f:
                    61:a2:0d:54:0b:1a:53:4f:36:a0:b0:66:de:0a:c1:
                    8c:83:e7:e3:77:e2:a6:24:9c:40:c7:13:1b:37:37:
                    d5:15:68:04:19:3c:19:64:67:89:cd:c2:b7:b8:c0:
                    f0:4b:bb:7b:c3:49:2b:11:e8:9f:5c:7c:92:03:87:
                    9e:ea:0f:5b:dd:1e:19:b1:90:e6:23:9a:ce:9f:18:
                    a1:83:d6:9d:2b:39:88:47:b6:16:52:89:80:b8:ba:
                    c9:6d:4e:bc:5b:b0:ae:96:98:3c:9a:ae:0f:9d:8d:
                    83:b4:5d:96:41:e4:22:70:af:d0:ff:54:10:92:a8:
                    f8:0d:d9:80:90:1c:a4:63:8a:57:9f:ef:4b:6f:a5:
                    9f:ef:e3:94:11:92:dc:7a:39:35:54:86:37:57:0e:
                    32:5e:ac:1b:c6:58:af:c4:b3:eb:23:cf:19:8c:28:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:05:E6:8B:0D:C9:8E:B5:E8:05:22:33:95:8F:C3:69:66:96:C5:23
            X509v3 Authority Key Identifier:
                keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:38:15:72:8b:7a:c7:a1:69:1a:db:b7:f5:fa:02:64:bb:63:
         81:3d:1e:69:a7:5d:3c:d0:1f:14:0f:ad:97:aa:20:6e:50:e2:
         b8:a3:3f:15:af:ce:5e:42:53:75:8b:d1:62:3a:30:17:b9:7c:
         bf:71:dc:12:60:c4:3c:d0:30:bd:6c:ff:ac:c8:1d:33:56:e5:
         14:4b:9e:4c:9f:21:6a:7f:66:db:6e:bf:32:0d:5c:7a:d1:96:
         75:c0:00:2f:e5:df:34:1f:bc:d8:4f:d8:47:b9:20:03:cd:82:
         d2:23:63:f1:5b:07:92:48:9e:bd:1d:35:e6:54:71:c7:52:4b:
         d6:12:02:52:62:26:74:07:84:93:c8:99:4b:78:b2:79:2d:ef:
         93:9e:96:06:81:5f:0e:6b:60:a7:f9:5c:eb:5b:fe:1b:57:bc:
         e4:e0:d6:b4:e7:4c:80:e4:73:8b:4f:d1:60:a9:ab:ef:87:b2:
         d3:51:27:5d:87:78:d1:03:07:87:c5:99:85:25:6e:27:79:4a:
         2c:a9:d3:1a:1a:08:b6:e0:15:c9:d0:41:ec:b3:f8:09:5c:96:
         db:7c:8e:af:eb:4d:46:1a:42:ae:26:55:d5:f0:dc:75:8a:87:
         c0:e3:1c:d5:39:1f:ff:b6:aa:9e:cf:9c:e0:e7:47:4f:89:fc:
         db:69:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:56 2026 by rpki-client