This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/pVWucn62UZlUYEkLwtnRBuH29Ec.roa
File:                     pVWucn62UZlUYEkLwtnRBuH29Ec.roa (raw, json)
Hash identifier:          fEeXmrTbxDWYxdEIPNB+dmTYd1gfRV01N5PsV9sWN7U=
Subject key identifier:   A5:55:AE:72:7E:B6:51:99:54:60:49:0B:C2:D9:D1:06:E1:F6:F4:47
Certificate issuer:       /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial:       019B7C133601FB0AA92CB5077F8E98FF2757
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/pVWucn62UZlUYEkLwtnRBuH29Ec.roa
Signing time:             Fri 02 Jan 2026 00:19:52 +0000
ROA not before:           Fri 02 Jan 2026 00:19:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13213
IP address blocks:        194.62.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:36:01:fb:0a:a9:2c:b5:07:7f:8e:98:ff:27:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
        Validity
            Not Before: Jan  2 00:19:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a555ae727eb651995460490bc2d9d106e1f6f447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:21:d7:ae:e9:7a:0a:3e:a3:38:c8:a8:37:
                    bc:f1:ec:72:31:62:85:1e:b9:33:45:84:ab:d6:7a:
                    cc:9f:17:91:32:e1:40:d4:4e:c5:cf:13:dc:c3:05:
                    e1:eb:91:77:96:48:03:15:3a:8d:d8:b4:ac:9e:67:
                    9a:3a:bf:05:e7:dd:5a:91:38:eb:13:55:09:27:a0:
                    ac:12:19:68:fc:42:af:02:2c:c3:10:fd:43:10:ab:
                    36:4b:a6:9e:67:3d:55:fa:a8:8b:4d:6c:4a:23:94:
                    be:20:eb:0d:4c:04:78:c8:89:e9:e3:85:7e:9c:e0:
                    61:5a:25:d9:3f:52:8e:07:19:db:d0:a1:51:a8:19:
                    b7:f7:c0:82:ec:68:f6:22:93:68:49:23:83:38:8f:
                    aa:6c:c0:57:ee:1b:9b:93:ec:bc:9f:7e:31:b5:64:
                    8d:71:8d:a5:5c:1d:bc:e9:ce:64:85:5d:8a:4a:93:
                    e8:d9:44:91:35:57:88:0f:2e:15:5c:4d:b6:e2:5f:
                    e5:31:1b:b9:7b:d1:87:89:67:0e:41:e9:3b:91:9a:
                    30:32:f2:61:f7:c9:ff:dd:6a:57:a0:2a:6d:57:ee:
                    29:8b:6b:87:fe:9b:be:d7:19:09:f3:96:2c:03:af:
                    e0:8e:89:0b:94:13:7d:92:09:3a:57:53:71:05:a7:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:55:AE:72:7E:B6:51:99:54:60:49:0B:C2:D9:D1:06:E1:F6:F4:47
            X509v3 Authority Key Identifier:
                keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/pVWucn62UZlUYEkLwtnRBuH29Ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:16:74:ff:69:88:e2:ea:ed:b7:8b:d2:ef:85:fd:48:d6:df:
         fa:c2:bf:ca:8d:72:3b:91:5b:40:fa:64:dc:1e:89:fc:ac:c9:
         55:4a:6b:c0:63:1b:f7:36:32:23:23:80:e9:2a:5e:ee:41:64:
         20:93:da:24:9c:03:ba:45:6f:cf:5a:18:a3:6f:a0:54:66:79:
         d8:ef:5a:b5:bf:4c:0a:66:3f:3a:92:d2:8c:22:8d:fb:38:39:
         ac:0b:76:4b:37:74:9c:44:01:40:5f:5f:3b:3f:e1:d6:00:0e:
         8b:e7:c4:9b:72:7c:36:6c:42:99:db:6c:94:1c:f4:a9:a6:c9:
         fb:18:85:36:d3:98:5a:69:2a:fb:27:17:74:31:55:a3:8c:1c:
         fc:64:43:59:bc:0c:9a:5c:72:9f:61:51:d4:82:18:f3:a2:42:
         2d:06:28:ab:5e:49:6c:96:1b:cb:b2:c3:d4:c1:8b:6d:dd:a9:
         94:14:0c:72:b7:9d:b8:46:e6:83:c6:5e:4f:a8:e0:dd:df:0e:
         36:74:60:e7:4d:87:69:5b:ec:2c:64:b1:bf:a5:87:11:76:2a:
         53:e7:61:88:6c:d9:5d:06:23:c8:04:0a:74:a4:8e:41:ba:5e:
         e8:5e:18:e4:c1:17:39:97:f4:f3:da:0b:ec:98:4a:8a:71:aa:
         fe:43:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:21:56 2026 by rpki-client