This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/vnUbkq6bdOtokGGa949yxYTNWcY.roa
File:                     vnUbkq6bdOtokGGa949yxYTNWcY.roa (raw, json)
Hash identifier:          2ikmtms5uup4On475kEH1Q4kXh5i0qOSIcl3pBoLYjg=
Subject key identifier:   BE:75:1B:92:AE:9B:74:EB:68:90:61:9A:F7:8F:72:C5:84:CD:59:C6
Certificate issuer:       /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial:       019B791028078C2A9FF6565CE7DC1930AD1A
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/vnUbkq6bdOtokGGa949yxYTNWcY.roa
Signing time:             Thu 01 Jan 2026 10:17:40 +0000
ROA not before:           Thu 01 Jan 2026 10:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50438
IP address blocks:        193.58.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:28:07:8c:2a:9f:f6:56:5c:e7:dc:19:30:ad:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
        Validity
            Not Before: Jan  1 10:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=be751b92ae9b74eb6890619af78f72c584cd59c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:82:08:80:9a:b2:4f:2e:58:5f:59:42:ae:c8:
                    3d:7b:c2:43:78:1e:36:b5:20:eb:0f:90:f5:95:93:
                    65:61:e6:e8:fa:3b:ef:dd:eb:0e:38:d3:ed:0c:1f:
                    b3:d8:dd:45:82:4c:39:00:be:0b:3d:6e:d8:78:e2:
                    67:15:90:b2:9a:a5:91:3d:69:21:6d:5f:14:9f:9f:
                    49:51:ff:62:28:b3:8b:37:63:d0:f7:a1:a7:48:ca:
                    ed:49:9d:8f:50:05:1a:14:09:81:31:17:d2:68:90:
                    63:04:ec:78:14:bd:09:04:a2:29:a8:6f:ab:58:a9:
                    98:60:08:b3:dd:f8:f0:82:ce:a9:d5:83:e3:16:65:
                    21:04:79:cd:8d:96:e4:b8:90:26:67:d8:e4:75:6a:
                    74:f0:f6:86:be:c5:3b:1c:bf:d4:f1:03:99:47:a4:
                    a0:58:ad:ec:7a:6d:c8:6c:af:41:db:1c:17:a2:23:
                    77:97:a8:0f:2f:6a:86:59:bd:96:95:20:12:98:23:
                    30:2e:39:bf:72:84:49:76:ca:2a:59:da:b8:05:30:
                    ec:94:61:a7:26:5f:5d:0f:2a:8d:7f:87:6c:1c:bc:
                    0b:c7:85:86:a7:2f:92:d5:7d:01:b1:26:9e:60:6e:
                    a8:10:25:66:92:87:78:ad:ca:e8:85:4f:08:7e:f7:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:75:1B:92:AE:9B:74:EB:68:90:61:9A:F7:8F:72:C5:84:CD:59:C6
            X509v3 Authority Key Identifier:
                keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/vnUbkq6bdOtokGGa949yxYTNWcY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:30:9d:e8:41:2f:2f:13:5c:a3:27:e7:3d:e2:e8:f0:5f:8c:
         b7:e0:9c:9c:21:10:98:02:eb:e9:5b:e4:7d:87:1b:e5:3d:a7:
         e8:69:3c:9f:80:27:ac:e9:9d:24:b3:4e:98:96:42:6f:4d:2c:
         59:e8:02:70:ef:91:e4:d6:34:5a:bf:ec:10:bd:d6:a7:b6:86:
         3c:41:49:e5:bd:20:b9:e8:0d:28:84:73:15:5d:53:16:7e:46:
         ec:5e:c6:4f:aa:ee:67:fc:d6:2f:c2:87:40:09:5a:5f:bd:6f:
         ac:23:9c:e1:4d:28:d2:20:f6:ae:22:94:fe:82:47:c0:b0:26:
         b5:66:d2:de:db:85:14:7f:52:bc:f0:dd:59:16:39:0c:07:0d:
         fd:4a:6b:8d:bc:5b:cf:30:46:0a:f7:09:55:e5:93:8e:6b:80:
         8c:48:82:a1:4d:6b:21:85:48:83:52:9a:8f:e9:8c:0c:64:0b:
         e7:57:9b:51:6b:e1:c4:92:d0:7f:31:e2:5a:9e:ec:8b:18:5b:
         46:b9:7a:06:e5:a5:ef:61:e7:0b:3e:d0:7b:88:13:34:4b:66:
         78:ae:55:88:25:b2:cf:28:67:5a:f2:9d:d1:4d:9e:99:a5:69:
         25:2e:1b:6d:f6:bb:63:0b:d7:46:22:b9:d4:cc:06:b8:03:27:
         5a:b6:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:17:10 2026 by rpki-client