This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/VOc75q9rZMJA4FXqQscyX1ERS_8.roa
File:                     VOc75q9rZMJA4FXqQscyX1ERS_8.roa (raw, json)
Hash identifier:          Ry99I0BJCRJbt6jtJzL48yrr1YlnIVfVbDfo1hLRwXY=
Subject key identifier:   54:E7:3B:E6:AF:6B:64:C2:40:E0:55:EA:42:C7:32:5F:51:11:4B:FF
Certificate issuer:       /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial:       019B7BA528A67F430328DCA7CBACF863A924
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/VOc75q9rZMJA4FXqQscyX1ERS_8.roa
Signing time:             Thu 01 Jan 2026 22:19:39 +0000
ROA not before:           Thu 01 Jan 2026 22:19:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200088
IP address blocks:        83.168.112.0/24 maxlen: 24
                          83.168.113.0/24 maxlen: 24
                          83.168.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:28:a6:7f:43:03:28:dc:a7:cb:ac:f8:63:a9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
        Validity
            Not Before: Jan  1 22:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54e73be6af6b64c240e055ea42c7325f51114bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:4c:36:9f:7e:ea:e8:99:f9:08:52:b2:7d:
                    40:32:f5:15:8c:e8:f2:c5:97:ce:06:fd:44:ba:8b:
                    0f:2b:22:e0:db:4a:7c:6c:ab:0a:72:25:2a:03:ec:
                    38:90:1c:b3:3b:64:79:9a:cb:65:16:62:f8:34:05:
                    12:95:2f:37:a9:0b:ec:4d:11:42:81:89:c1:2a:9a:
                    99:1a:4b:81:38:b2:94:2f:55:33:1c:ce:1f:a5:52:
                    e3:3d:0f:f4:54:89:b9:1d:43:4e:aa:5d:7f:87:07:
                    bc:16:01:04:f3:de:90:96:ee:04:1a:fe:c4:fa:f9:
                    dc:63:af:40:9a:72:80:e7:d0:33:e5:be:23:84:a8:
                    33:ff:81:07:bd:a6:21:69:58:b2:61:2c:dd:81:c1:
                    72:ad:bc:b7:c9:02:d0:0d:5d:07:5f:d4:0f:e9:a3:
                    23:35:ae:1f:1d:4f:8d:0e:52:16:7d:00:23:8a:9e:
                    d2:af:81:57:75:6e:20:8f:ad:36:97:bb:88:b4:60:
                    67:ef:48:8a:f3:e7:1b:6a:0f:e3:97:11:18:39:ac:
                    f5:dc:24:b3:55:c4:d4:08:fa:46:e5:5b:f8:5d:fd:
                    3e:3e:73:13:b7:cc:2b:06:74:54:7f:56:e4:ce:31:
                    87:0c:70:bd:92:ee:9c:9a:4d:a4:39:a2:e7:c0:16:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E7:3B:E6:AF:6B:64:C2:40:E0:55:EA:42:C7:32:5F:51:11:4B:FF
            X509v3 Authority Key Identifier:
                keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/VOc75q9rZMJA4FXqQscyX1ERS_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.168.112.0/23
                  83.168.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ee:d2:60:3b:94:7d:c0:49:f0:0b:61:ec:46:d9:c8:28:69:
         fc:d6:09:ae:0a:9d:01:3f:68:22:74:5f:c4:02:2b:94:ea:b2:
         3e:20:e1:c2:00:3d:d6:6a:fb:40:2c:f4:18:85:5d:8a:69:51:
         db:26:c4:1e:9f:a2:70:62:e9:1b:b8:a4:0f:82:13:37:5b:0d:
         83:b3:e8:ff:bd:48:d3:8a:3b:78:fb:67:48:db:4a:f0:6c:f5:
         ec:67:29:27:b5:70:35:db:bb:2b:30:4b:2f:d8:03:5b:6e:b5:
         8d:6f:ab:1b:a3:f2:22:48:17:be:6f:f1:e2:df:cf:2f:7d:a7:
         ce:e2:3c:c7:0e:a8:82:f8:3d:c0:30:aa:31:7c:d9:15:28:12:
         ea:be:f2:1d:20:36:0e:71:fe:65:71:33:44:2e:07:85:0b:63:
         ab:aa:85:0e:4a:6b:3b:22:af:4c:7e:7a:62:55:66:23:3c:79:
         90:39:f7:c1:54:24:45:b0:81:78:36:6e:f8:af:5d:b4:dc:ee:
         b0:de:ed:8a:88:c5:dc:ea:2c:11:f2:c3:d4:b0:a2:5b:a4:7f:
         47:78:14:6e:30:19:bd:2b:d3:65:f3:ed:0f:6e:79:61:16:31:
         22:f7:63:b9:26:d4:e0:72:c0:44:bf:66:56:ea:8b:8a:28:95:
         15:2c:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:42 2026 by rpki-client