This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Vk17eDcU6Cifo3UR_siAJrrq5rE.roa
File:                     Vk17eDcU6Cifo3UR_siAJrrq5rE.roa (raw, json)
Hash identifier:          rzeJ1F/0H2w6pRFwyIO0PbBXvA4Af9hJ8LHRyiPx+nQ=
Subject key identifier:   56:4D:7B:78:37:14:E8:28:9F:A3:75:11:FE:C8:80:26:BA:EA:E6:B1
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       019B2074E21A9E09495D3CFFCBD8EFA6CBF8
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Vk17eDcU6Cifo3UR_siAJrrq5rE.roa
Signing time:             Mon 15 Dec 2025 05:21:29 +0000
ROA not before:           Mon 15 Dec 2025 05:21:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        88.80.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:74:e2:1a:9e:09:49:5d:3c:ff:cb:d8:ef:a6:cb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Dec 15 05:21:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=564d7b783714e8289fa37511fec88026baeae6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:7c:c4:bc:a7:4d:56:67:2c:e4:e2:68:47:
                    bd:90:02:e2:1d:56:89:e4:db:46:58:4c:4a:f9:1b:
                    77:5e:18:9f:ee:f2:55:d9:02:72:23:30:7c:26:57:
                    41:fa:93:c4:37:65:54:ec:67:2e:13:55:8f:04:64:
                    9e:a8:51:c2:e2:d8:e0:8b:9d:f0:cc:99:b2:c8:af:
                    ea:70:6b:92:b6:a2:31:a4:c2:ca:5a:18:f6:aa:35:
                    2b:bd:ef:91:46:d6:c4:c4:21:13:37:cf:23:b9:8e:
                    e9:5e:70:4a:8d:f4:66:93:ae:d2:a1:04:80:eb:d9:
                    14:f1:ae:11:c3:47:46:b8:3f:15:06:83:62:25:ce:
                    01:55:61:e9:96:37:c5:49:9c:5c:e6:84:b5:9c:03:
                    fd:54:af:6a:6a:8f:86:59:4c:84:aa:bf:4e:5d:26:
                    83:70:14:85:08:cb:a9:2d:d8:64:fd:87:8f:08:52:
                    49:4f:98:2e:3a:98:8c:96:44:49:4c:1c:90:19:4f:
                    57:e8:41:24:9f:13:24:e9:ef:3a:f4:c5:24:5c:17:
                    b7:11:5d:36:18:f8:72:3d:b0:0e:6c:3f:14:4c:96:
                    94:9b:2e:01:fc:85:0b:14:1f:ea:b9:75:77:5e:c6:
                    53:a9:70:f7:3c:03:ea:53:b4:4b:32:a3:0e:ad:49:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4D:7B:78:37:14:E8:28:9F:A3:75:11:FE:C8:80:26:BA:EA:E6:B1
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Vk17eDcU6Cifo3UR_siAJrrq5rE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.80.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:43:56:93:12:57:1e:64:67:40:df:5f:8f:b9:9b:a4:8e:
         de:96:47:57:5f:28:b4:73:67:73:43:2b:65:7a:72:b4:01:2d:
         6d:c8:c6:9c:1a:a9:34:f6:b2:d2:40:2e:24:22:be:05:94:fe:
         11:20:35:a0:f7:84:d0:c8:93:90:20:8c:f8:af:e8:20:94:eb:
         c3:d9:08:cb:fb:3b:56:7c:89:e1:74:30:51:ba:d2:df:f4:2c:
         c2:d4:59:94:cf:85:90:92:30:78:35:64:66:79:9a:20:62:eb:
         3e:74:09:52:02:5f:51:bf:0e:1c:9c:42:46:e6:9b:47:5d:fe:
         d6:bf:d5:54:d2:d8:4f:1e:6a:ee:42:b7:41:ac:89:0a:ce:27:
         d8:7f:30:2d:f8:c8:94:1f:48:72:8e:b7:37:aa:84:48:26:7d:
         7f:e8:a8:b6:d6:48:cc:35:60:46:53:df:0c:c4:e1:8a:50:52:
         0a:bd:a7:ac:64:72:ce:12:5d:15:bd:12:8d:0f:92:74:10:23:
         bf:90:19:8b:d3:07:9e:38:90:77:d3:dc:06:03:97:fd:1d:2e:
         ea:7d:ca:72:fe:3c:7b:df:a4:15:da:b3:bd:af:99:59:a1:d9:
         8c:32:ca:34:bc:fe:db:c4:a4:44:8e:c7:4e:0d:a3:c6:3e:61:
         bf:c0:f4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:27:23 2025 by rpki-client