This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/VsVyNiSsXQIos_8DFMvFrVCvPpA.roa
File:                     VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (raw, json)
Hash identifier:          R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=
Subject key identifier:   56:C5:72:36:24:AC:5D:02:28:B3:FF:03:14:CB:C5:AD:50:AF:3E:90
Certificate issuer:       /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial:       019B76EAFA4B64D715AE4444F3A600345C2F
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/VsVyNiSsXQIos_8DFMvFrVCvPpA.roa
Signing time:             Thu 01 Jan 2026 00:17:49 +0000
ROA not before:           Thu 01 Jan 2026 00:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47129
IP address blocks:        193.34.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:fa:4b:64:d7:15:ae:44:44:f3:a6:00:34:5c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
        Validity
            Not Before: Jan  1 00:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56c5723624ac5d0228b3ff0314cbc5ad50af3e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:b4:62:69:37:e7:5a:ca:06:48:c0:ee:a5:
                    b4:d5:2e:88:f7:de:5f:60:53:46:a9:f4:d1:ac:79:
                    44:52:63:37:b3:55:89:61:56:39:68:f7:eb:6f:8c:
                    ea:4f:3b:6f:04:9f:35:b8:43:d9:70:02:0d:b7:23:
                    56:16:df:0a:76:c3:4c:8a:17:4f:8f:8c:bf:17:94:
                    17:e7:12:94:16:5d:29:95:f1:82:0c:04:ae:db:e7:
                    67:da:5e:19:b4:59:06:bf:9b:a2:07:68:17:63:77:
                    21:5a:f5:ff:ed:6d:d8:b8:4f:d6:48:a0:0e:91:9a:
                    dc:8c:ce:71:39:dc:d8:23:b3:8b:37:9d:8a:fb:11:
                    ec:c1:cd:bc:24:ac:14:d6:78:89:0d:2b:09:94:69:
                    8b:b8:36:6e:28:9c:a5:af:6b:f9:e6:5f:79:c0:3d:
                    53:84:ce:8b:0f:b6:66:ce:f3:15:f3:34:be:a0:7a:
                    54:07:7c:b1:ab:e4:7c:be:49:6c:bd:e1:ca:19:14:
                    b9:e9:ce:cb:5e:e1:7a:24:2a:08:22:2e:4b:4a:ff:
                    92:47:82:52:79:9e:2e:7b:c1:80:61:6c:17:2b:b6:
                    4e:3a:53:d1:c9:9e:c0:ba:45:b4:5f:15:bf:b9:7a:
                    5e:89:db:96:30:2a:50:47:96:dd:69:0c:1e:b9:29:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:72:36:24:AC:5D:02:28:B3:FF:03:14:CB:C5:AD:50:AF:3E:90
            X509v3 Authority Key Identifier:
                keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/VsVyNiSsXQIos_8DFMvFrVCvPpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:ee:73:ba:7a:27:9b:0b:f3:77:f7:82:83:06:58:32:c3:
         82:0f:3d:35:9c:e8:52:85:b3:6d:22:e0:0b:95:ff:42:50:41:
         2f:08:77:a2:56:3f:e0:75:ae:e0:47:73:99:5f:6f:38:ad:1f:
         cd:f2:78:78:e8:1b:b2:d0:23:47:22:12:c4:7c:e0:0a:92:12:
         8f:af:7e:8f:5d:d9:14:04:82:d7:35:65:e6:bc:ea:f4:10:c8:
         3b:83:5a:9c:71:06:31:31:b5:b2:a5:cf:55:07:45:aa:81:59:
         c0:f9:6a:d5:81:4b:a8:64:29:27:b5:ad:ce:f0:a9:10:0f:1a:
         97:c7:0d:39:dd:40:43:db:a6:4f:db:90:bf:7a:d2:82:ab:76:
         c1:1f:73:fe:91:50:4f:da:41:9b:2e:5d:da:b8:57:50:1b:ed:
         0b:55:13:8f:fb:fc:40:8b:4d:ea:05:8d:64:1a:48:63:87:02:
         16:6d:f4:05:1d:3f:43:e1:a7:ff:c9:0c:11:2b:03:c2:e7:44:
         9a:ca:bf:34:fc:0f:eb:96:ee:c9:d0:0d:8e:f3:e9:86:59:9e:
         89:f2:84:df:69:e3:33:cb:87:2d:56:a2:06:36:8d:f9:ca:fd:
         ba:b7:b7:ff:3b:28:1d:d3:b0:8e:07:f5:31:e1:c2:fc:91:9a:
         2f:43:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:38 2026 by rpki-client