This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/V9kZj-ccrUMnQWg5mxReVJXbH5k.roa
File:                     V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (raw, json)
Hash identifier:          oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=
Subject key identifier:   57:D9:19:8F:E7:1C:AD:43:27:41:68:39:9B:14:5E:54:95:DB:1F:99
Certificate issuer:       /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial:       019B7B3649C09A75D38D12BAA140A7A4A9D9
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/V9kZj-ccrUMnQWg5mxReVJXbH5k.roa
Signing time:             Thu 01 Jan 2026 20:18:33 +0000
ROA not before:           Thu 01 Jan 2026 20:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        84.239.60.0/24 maxlen: 24
                          84.239.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:49:c0:9a:75:d3:8d:12:ba:a1:40:a7:a4:a9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
        Validity
            Not Before: Jan  1 20:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57d9198fe71cad43274168399b145e5495db1f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:34:2b:bd:8a:66:6e:f2:9a:18:ec:a8:51:
                    62:2e:11:3e:4e:39:25:15:1f:88:a7:2d:42:1e:6b:
                    b5:a2:a8:1f:0b:53:43:a6:93:db:c6:30:ee:35:81:
                    e7:09:82:97:e2:45:a8:18:15:b8:3f:f1:63:e6:cb:
                    3e:ab:b1:7c:12:b6:de:92:1c:4b:41:ef:9c:06:08:
                    1b:3e:cb:26:b9:99:54:13:89:e5:0c:e5:f6:8b:5d:
                    15:86:dc:94:86:60:97:22:fa:d4:88:61:84:3d:25:
                    75:bd:4c:a3:ba:42:7c:ac:b7:35:89:13:b0:ba:7a:
                    52:3a:8f:4e:83:24:f7:ee:79:ff:a0:79:14:bf:92:
                    4d:31:91:50:bf:a4:b1:fb:02:9f:e9:65:e4:bb:5c:
                    21:24:83:02:6c:e2:53:2f:22:05:45:25:59:e1:40:
                    93:fd:0c:be:96:52:42:30:53:3c:72:c9:5a:30:5b:
                    ba:53:97:70:1f:b4:21:19:80:5b:81:ce:87:59:ba:
                    50:d5:f9:08:f4:90:b1:7d:48:f9:62:1e:be:25:d4:
                    3c:04:1d:8e:95:16:ba:fc:fa:7f:9e:52:81:f6:69:
                    24:f5:bf:9d:2a:29:bd:da:d9:52:0a:ff:29:52:04:
                    6d:d8:5c:e3:ff:54:88:53:e2:e2:94:99:f4:ff:c1:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D9:19:8F:E7:1C:AD:43:27:41:68:39:9B:14:5E:54:95:DB:1F:99
            X509v3 Authority Key Identifier:
                keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/V9kZj-ccrUMnQWg5mxReVJXbH5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.239.60.0/24
                  84.239.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:4f:14:75:28:2e:31:4b:bb:51:dc:7f:d1:f8:64:48:f1:
         8b:90:d5:c7:80:89:f2:1f:af:46:46:ce:31:6f:cf:04:70:6b:
         fe:3f:8c:a4:07:d7:60:4c:d1:25:93:9b:bf:2b:47:18:e4:2b:
         0d:b4:89:bf:77:40:30:0c:25:ed:6c:19:ad:d7:53:36:f5:4a:
         c4:a6:b1:d1:c2:c5:08:47:fe:90:1a:51:a7:35:07:86:b2:ca:
         d3:00:3e:36:99:8e:22:ae:2e:c7:37:b9:15:e6:38:ef:0c:d4:
         7f:3b:3b:00:95:d8:8a:d5:ac:61:05:c8:96:b9:f0:85:ed:6f:
         f0:48:b1:f6:b5:dd:78:63:d5:3a:0f:0f:38:fa:76:4b:04:ce:
         01:df:16:59:4c:27:1a:97:29:3f:93:14:01:a6:37:9a:ad:a3:
         ad:f9:11:55:73:ca:ef:8a:49:c5:cf:23:27:29:f3:c6:96:76:
         a1:3c:61:7b:dd:ea:71:e6:ee:da:3d:69:4b:3f:9a:bf:5d:2a:
         94:dd:7a:9b:11:b5:34:56:22:5b:23:60:29:dc:9e:30:e6:b5:
         33:d5:68:9e:1f:4f:30:92:3c:10:b7:64:2a:f1:60:51:24:eb:
         e2:ea:d0:18:05:00:64:4d:a1:ca:d5:73:5d:58:9e:56:09:77:
         d6:39:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:00:19 2026 by rpki-client