This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa
File:                     Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (raw, json)
Hash identifier:          aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=
Subject key identifier:   57:1F:10:E2:74:D0:4D:9B:B4:1C:9A:91:A4:33:4D:16:FB:E6:1B:96
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       019B797F0D64C82A540CD8B2AAB2DF625719
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa
Signing time:             Thu 01 Jan 2026 12:18:48 +0000
ROA not before:           Thu 01 Jan 2026 12:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     268624
IP address blocks:        162.12.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:0d:64:c8:2a:54:0c:d8:b2:aa:b2:df:62:57:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Jan  1 12:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=571f10e274d04d9bb41c9a91a4334d16fbe61b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ca:27:ae:bd:3c:f9:bc:f5:d6:1c:00:09:7a:
                    ea:45:3d:5b:68:2c:88:63:b3:72:d9:1e:71:dd:19:
                    16:53:dd:24:76:d5:f5:a6:ff:f6:01:04:b2:ae:ee:
                    d8:31:2f:31:a4:83:ca:01:86:5c:bc:28:98:1a:6c:
                    97:d3:0d:33:3a:fa:ae:38:5e:97:da:90:cf:86:05:
                    6f:e9:fc:52:a9:5d:0d:14:15:b4:3c:49:9c:34:0f:
                    db:50:b3:29:9f:79:73:2b:c5:82:3b:9a:dc:da:e2:
                    b8:db:5d:39:fa:b1:70:44:40:80:7d:a0:2b:a9:31:
                    2f:27:ae:7c:f3:e3:74:0f:a1:72:ca:7f:9f:13:c9:
                    28:bf:15:cd:18:4d:2f:64:0b:11:01:51:09:b2:83:
                    75:16:2d:b2:e5:b1:10:81:fc:0a:f3:b4:1d:29:6e:
                    05:fd:1c:57:56:4b:f5:15:b3:99:a0:69:cf:80:be:
                    dd:d2:b5:de:5c:ca:72:78:3d:3f:ac:35:f9:be:0a:
                    d0:ed:e4:03:0c:41:32:ca:2b:d2:6d:a5:1d:74:7e:
                    3f:68:76:25:07:33:0c:d2:55:43:f1:0e:d6:c9:17:
                    5f:8a:ba:be:62:91:6b:ba:e2:17:8a:ee:ec:5a:10:
                    da:e1:07:90:ee:be:17:ed:71:58:7d:72:c2:7b:57:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1F:10:E2:74:D0:4D:9B:B4:1C:9A:91:A4:33:4D:16:FB:E6:1B:96
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.12.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:45:35:cc:d6:b6:86:da:30:31:d3:2e:7e:f0:83:f8:b1:f3:
         87:d2:74:00:29:69:e3:af:f1:ba:05:84:57:69:2d:80:7e:ca:
         78:18:d4:9f:04:19:eb:73:52:82:b8:c3:c2:11:05:e9:30:77:
         f4:02:da:14:23:97:ab:7b:d6:d3:c7:a2:5f:2f:af:03:b7:8d:
         32:61:6f:8b:ed:91:63:1e:8d:d3:7b:b2:c7:26:f0:3e:93:d7:
         36:f6:75:a6:08:7f:06:c1:d4:3a:43:92:5a:63:ff:02:fa:c8:
         f1:a3:c1:49:99:0c:46:b9:86:1b:6c:ac:96:58:90:58:62:4e:
         10:68:b9:8e:10:fd:ca:96:29:bb:4a:e3:db:54:50:57:55:32:
         6d:82:18:5f:fc:24:81:3a:c8:11:a3:91:de:4f:32:24:c2:9f:
         ff:92:f5:64:06:05:54:af:31:3f:63:89:33:ce:99:e6:f3:40:
         6d:f6:bd:1c:cb:fb:ea:6a:6d:00:c8:1b:dc:94:70:26:7f:36:
         3a:3e:ab:de:4c:f9:38:79:0d:4f:63:ec:d9:bc:8b:17:a7:43:
         c2:73:6c:07:d0:70:d0:33:04:30:7e:3d:2d:52:bc:a4:fa:e5:
         64:8f:c0:19:3a:d3:19:7b:ce:5b:dc:e9:7e:7b:c1:f4:03:04:
         68:b8:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:11 2026 by rpki-client