This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-PRO_VUWLSypyE-bkSjG9e62_Zg.roa
File:                     1-PRO_VUWLSypyE-bkSjG9e62_Zg.roa (raw, json)
Hash identifier:          6qMN0rYA9MBMBIbH7wtJZof29RHKkOkMJoDw4bbidPY=
Subject key identifier:   F8:F4:4E:FD:55:16:2D:2C:A9:C8:4F:9B:91:28:C6:F5:EE:B6:FD:98
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       019B7834674F44FD22365D674A53958A7236
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-PRO_VUWLSypyE-bkSjG9e62_Zg.roa
Signing time:             Thu 01 Jan 2026 06:17:38 +0000
ROA not before:           Thu 01 Jan 2026 06:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49515
IP address blocks:        194.68.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:67:4f:44:fd:22:36:5d:67:4a:53:95:8a:72:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 06:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f8f44efd55162d2ca9c84f9b9128c6f5eeb6fd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:02:64:82:1c:e4:68:f5:25:78:76:8c:be:
                    8e:d4:83:38:bd:ec:5f:ec:33:aa:5d:90:05:ed:96:
                    e4:9e:5b:ce:a1:b0:11:a9:59:4f:86:c7:11:44:87:
                    61:d0:6f:94:bf:35:4c:af:47:84:da:4d:f9:92:4e:
                    af:28:1a:bf:01:31:1d:2d:72:bc:1d:26:0e:12:51:
                    79:f3:2c:ca:34:be:5a:f5:de:3d:fb:8b:ee:06:68:
                    95:fd:9c:d6:e0:4a:ba:f3:4c:55:57:c7:1c:2c:88:
                    bc:d5:99:77:e8:43:a8:3a:66:c6:50:9d:d5:69:8b:
                    a4:68:8e:63:ba:8d:a3:f5:7a:d0:4f:fa:0a:f6:ad:
                    b4:a6:b6:b6:86:78:49:bc:40:13:fd:4c:82:8b:93:
                    82:90:f6:ab:87:21:62:23:43:a9:ce:1c:b4:81:bd:
                    18:7b:f4:44:4d:ec:58:e3:1e:17:1a:a1:ad:b1:36:
                    22:b7:7a:fb:2b:a2:a8:c9:0a:b1:40:28:88:5e:d8:
                    f6:99:4b:c7:62:01:81:d3:8e:3d:5e:c1:bf:bb:42:
                    4f:39:2b:9c:db:6f:1c:85:2e:0d:6d:48:93:80:a0:
                    67:2b:8d:63:f0:0f:a9:cd:e4:2a:4e:b9:d8:c6:7f:
                    bb:fb:b3:90:37:43:37:33:96:ca:bc:dd:b4:d7:dd:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F4:4E:FD:55:16:2D:2C:A9:C8:4F:9B:91:28:C6:F5:EE:B6:FD:98
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-PRO_VUWLSypyE-bkSjG9e62_Zg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.68.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:80:7f:e3:43:0c:c0:84:46:9a:e6:7f:19:ad:27:2f:27:14:
         42:58:d8:3b:cc:ec:d1:bc:4b:3e:00:c5:eb:8c:b2:ae:2d:59:
         83:60:f9:d2:dc:9d:2c:ad:f0:92:6e:9b:bb:68:b2:a8:c3:3a:
         0e:4e:b2:f1:f8:c3:94:b2:f4:2a:a1:4d:1a:92:75:4c:97:dc:
         be:2e:0b:03:77:04:6f:bf:16:35:94:e5:3f:a7:68:ea:29:7f:
         8d:ef:50:c6:2a:38:8e:51:ab:5b:2b:d9:2c:e9:b9:92:14:be:
         f8:92:17:2b:84:06:41:76:01:d6:fa:2c:95:a5:84:20:dc:d6:
         01:2a:c8:b6:1f:ea:c1:e4:9d:75:6b:df:ff:45:aa:43:d1:13:
         ed:e9:6a:fd:da:eb:21:37:83:5b:e7:d2:62:c5:2c:4b:95:20:
         cd:54:48:c9:5c:f8:a4:04:88:d5:34:5a:fc:c3:36:fc:26:6f:
         d4:51:ce:64:f4:1b:82:6c:02:6f:7e:a0:40:e1:56:c6:af:c0:
         b7:7d:77:a1:12:db:2b:74:68:df:15:82:d6:34:b1:b4:9e:48:
         4b:4f:80:03:46:2f:30:8b:7a:3e:d9:2c:91:5c:4f:79:23:ea:
         b3:ba:2d:c1:62:cb:e1:86:e4:28:6a:2a:22:f7:bd:08:5a:94:
         99:d9:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:28 2026 by rpki-client