This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/vc3_2HwZU1b1IDix6yqY246HGsI.roa
File:                     vc3_2HwZU1b1IDix6yqY246HGsI.roa (raw, json)
Hash identifier:          C2RwLxlNEFwKzGr5sfPtGfDi2mMkvqCKZMvxOHJKA+M=
Subject key identifier:   BD:CD:FF:D8:7C:19:53:56:F5:20:38:B1:EB:2A:98:DB:8E:87:1A:C2
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       019B76EB67B1E0172393BAB429E9732E6214
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/vc3_2HwZU1b1IDix6yqY246HGsI.roa
Signing time:             Thu 01 Jan 2026 00:18:17 +0000
ROA not before:           Thu 01 Jan 2026 00:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211387
IP address blocks:        2a0b:6b86:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:67:b1:e0:17:23:93:ba:b4:29:e9:73:2e:62:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Jan  1 00:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bdcdffd87c195356f52038b1eb2a98db8e871ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c8:e1:c6:54:e4:e6:a5:9c:73:07:6d:fd:b7:
                    ff:49:f1:09:a7:a7:1a:2d:ce:a3:22:e3:5b:d3:75:
                    44:01:d8:52:4f:f3:42:15:5a:83:56:8f:e5:cf:e7:
                    0c:9f:04:99:54:cf:c7:7e:d1:fd:11:33:e3:cb:57:
                    5d:6a:20:b3:07:9d:91:f8:88:11:fb:c3:4e:8a:0d:
                    03:0c:be:e2:c5:a4:16:a6:6f:d6:cb:3a:88:ff:44:
                    f4:75:02:c5:fa:43:55:0a:5b:01:98:d8:6c:39:b5:
                    91:f4:13:a5:b0:39:3d:24:ff:cd:c5:7d:8d:ae:c4:
                    92:79:57:34:eb:dc:73:0a:ce:8a:51:c0:d7:21:35:
                    63:87:a0:09:d2:27:bf:36:c7:19:26:ba:a7:ae:d1:
                    c0:e6:40:bf:48:6b:d5:b3:ab:6b:0d:28:ca:ea:b1:
                    bc:fc:95:e3:90:a4:a7:d1:d7:b7:58:76:33:2e:27:
                    f1:1f:1c:4a:12:e0:ed:9c:25:cd:8b:8e:77:08:d3:
                    65:59:6c:26:f6:c3:5c:84:2c:15:ad:e4:a2:06:cf:
                    b6:1e:60:7e:29:f3:ce:4a:6a:cf:68:cd:ff:f3:b0:
                    26:31:f8:24:56:00:49:cf:4b:0b:2a:ed:19:7e:f7:
                    47:8e:53:db:40:1f:43:d2:f2:06:a1:9c:44:88:e8:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CD:FF:D8:7C:19:53:56:F5:20:38:B1:EB:2A:98:DB:8E:87:1A:C2
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/vc3_2HwZU1b1IDix6yqY246HGsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:6b86:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:19:4a:a5:4d:f3:70:f5:74:17:8d:6d:ee:d7:55:95:0a:1a:
         45:9f:b4:88:ab:50:3e:8d:4a:bf:52:bb:1e:f4:85:b2:ef:0a:
         4b:19:af:41:0b:4b:4e:f2:b0:48:eb:22:b4:1a:49:0c:c2:a8:
         ea:38:9c:70:7c:34:74:81:2f:e4:e4:55:0c:61:ca:e2:d9:2a:
         1f:16:1e:5d:6c:e0:f3:6d:9c:e3:c4:e4:bd:b3:cc:44:a6:3a:
         92:14:55:cb:50:14:f7:5f:33:53:9c:e4:c3:10:d8:69:3d:70:
         53:cc:30:5d:8e:10:84:56:36:59:34:f9:98:32:35:36:85:1f:
         1e:66:60:8d:17:79:a4:95:1a:23:81:ce:26:fa:d5:10:4c:ff:
         9b:6b:36:19:9b:af:ef:7e:48:23:56:d0:8f:8b:6d:3a:61:17:
         91:7f:17:56:03:03:be:94:82:18:1e:db:d4:fc:30:5c:22:c1:
         b7:55:00:bf:b7:7a:01:e9:07:60:07:36:46:3a:21:7c:99:a2:
         aa:25:69:58:c6:02:05:6a:45:77:e4:ef:ac:ce:4c:2f:99:6d:
         90:fa:9d:98:0f:f9:57:a1:4f:cc:11:bc:52:6d:c6:eb:54:8b:
         b1:66:f5:25:d7:d1:78:15:9e:73:32:7b:7a:b3:26:5c:a8:fc:
         91:39:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:23 2026 by rpki-client