This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/VwfnUo7iWGrwpmjYLkStkdsJWgc.roa
File:                     VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (raw, json)
Hash identifier:          0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=
Subject key identifier:   57:07:E7:52:8E:E2:58:6A:F0:A6:68:D8:2E:44:AD:91:DB:09:5A:07
Certificate issuer:       /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial:       019B7C7FB25A0B35DF8F5C56279003ADCF37
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/VwfnUo7iWGrwpmjYLkStkdsJWgc.roa
Signing time:             Fri 02 Jan 2026 02:18:21 +0000
ROA not before:           Fri 02 Jan 2026 02:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39230
IP address blocks:        185.212.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:b2:5a:0b:35:df:8f:5c:56:27:90:03:ad:cf:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
        Validity
            Not Before: Jan  2 02:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5707e7528ee2586af0a668d82e44ad91db095a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:f8:71:c8:98:9b:92:81:b1:8c:a8:a5:dd:
                    d4:68:cc:35:ec:fe:c5:6a:52:fe:e9:ed:d8:bf:cc:
                    c2:a0:60:39:9b:62:ea:dc:66:c9:d4:7c:28:a7:12:
                    cd:04:11:c7:df:0b:eb:da:75:53:92:66:c1:45:6f:
                    5c:e5:8a:ef:43:7a:8b:aa:e4:a9:e2:68:00:49:fc:
                    4b:b9:e2:45:ae:6c:39:1f:d7:dd:dd:2f:c5:58:bd:
                    8d:9b:70:49:b8:78:8f:d3:ff:13:d3:6b:4d:6d:eb:
                    1e:90:cd:4a:bd:9b:af:e2:44:57:e4:e6:81:4a:0c:
                    3d:cc:e2:54:2f:e4:6c:46:c1:e0:fb:d1:5f:a7:5d:
                    a0:a1:d2:84:b1:95:c5:4e:c7:18:a1:b8:d3:a8:54:
                    f3:f5:3e:49:ab:bb:8b:c2:6b:45:a1:8f:80:8d:90:
                    f1:9b:42:aa:7b:36:2e:8b:5f:8f:1b:89:fe:88:17:
                    d1:c8:ec:bb:90:74:fb:f9:7c:eb:02:2e:18:d2:02:
                    67:24:dc:4e:4a:3a:ca:b4:b1:fb:a0:99:28:36:d2:
                    18:20:fa:02:43:f2:f0:ef:14:de:df:7b:35:df:73:
                    70:3e:d4:17:f5:0d:9f:ea:e0:4c:c9:02:f9:3f:46:
                    bf:cf:12:bd:e5:06:b2:10:8e:0a:ee:7c:d2:3b:4c:
                    30:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:07:E7:52:8E:E2:58:6A:F0:A6:68:D8:2E:44:AD:91:DB:09:5A:07
            X509v3 Authority Key Identifier:
                keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/VwfnUo7iWGrwpmjYLkStkdsJWgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:cd:3b:4f:18:06:59:e7:01:f1:a9:8d:b0:fc:ab:4d:c7:7c:
         fc:d0:89:23:a9:64:cc:70:29:c3:91:5f:64:84:da:94:a5:e0:
         03:60:59:68:5d:45:dc:5f:e3:d8:a4:77:15:9e:2c:11:22:69:
         0c:c9:c4:6f:4d:d2:2d:56:cb:60:bc:0b:d2:fd:2c:0e:dc:3d:
         13:55:f7:fa:f0:e6:97:1e:77:69:99:18:ce:d3:3e:10:65:ba:
         fc:bc:6a:3b:b4:60:d6:24:3a:57:64:37:c1:8b:d9:70:4d:fc:
         30:a6:3a:a9:fd:fa:e6:a6:1e:70:4a:1a:59:53:b5:0a:8b:df:
         73:dd:47:f0:4e:53:12:32:cd:df:f8:7a:12:61:a9:2b:68:12:
         8d:32:43:3a:2e:26:e2:99:d9:f2:78:b0:7b:fb:dd:c9:81:a7:
         5f:db:f9:44:1b:54:07:bc:e7:c8:e3:bb:23:29:1f:9a:d5:b8:
         cc:2b:1b:60:b6:6c:bb:e2:3d:02:7a:d9:2b:ff:91:9c:7f:82:
         70:fc:74:a5:ee:37:8e:cf:91:f6:b7:b2:95:b6:6c:40:a1:8d:
         6a:61:b2:df:96:0c:90:b1:ab:5a:ee:01:bd:06:d2:72:f2:d0:
         85:55:74:dc:a5:56:6c:74:0d:c2:af:cb:e7:5f:8e:98:50:8f:
         04:bd:61:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8f7JaCzXfj1xWJ5ADrc83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz
NGRiYWQwHhcNMjYwMTAyMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzA3ZTc1MjhlZTI1ODZhZjBhNjY4ZDgyZTQ0YWQ5MWRiMDk1YTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyL4cciYm5KBsYyopd3UaMw17P7F
alL+6e3Yv8zCoGA5m2Lq3GbJ1HwopxLNBBHH3wvr2nVTkmbBRW9c5YrvQ3qLquSp
4mgASfxLueJFrmw5H9fd3S/FWL2Nm3BJuHiP0/8T02tNbesekM1KvZuv4kRX5OaB
Sgw9zOJUL+RsRsHg+9Ffp12godKEsZXFTscYobjTqFTz9T5Jq7uLwmtFoY+AjZDx
m0KqezYui1+PG4n+iBfRyOy7kHT7+XzrAi4Y0gJnJNxOSjrKtLH7oJkoNtIYIPoC
Q/Lw7xTe33s133NwPtQX9Q2f6uBMyQL5P0a/zxK95QayEI4K7nzSO0ww0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFcH51KO4lhq8KZo2C5ErZHbCVoHMB8GA1UdIwQY
MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt
NTYxMjliN2RjMDE4LzEvVndmblVvN2lXR3J3cG1qWUxrU3RrZHNKV2djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4
LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudT4MA0G
CSqGSIb3DQEBCwUAA4IBAQBlzTtPGAZZ5wHxqY2w/KtNx3z80IkjqWTMcCnDkV9k
hNqUpeADYFloXUXcX+PYpHcVniwRImkMycRvTdItVstgvAvS/SwO3D0TVff68OaX
HndpmRjO0z4QZbr8vGo7tGDWJDpXZDfBi9lwTfwwpjqp/frmph5wShpZU7UKi99z
3UfwTlMSMs3f+HoSYakraBKNMkM6LibimdnyeLB7+93Jgadf2/lEG1QHvOfI47sj
KR+a1bjMKxtgtmy74j0Cetkr/5Gcf4Jw/HSl7jeOz5H2t7KVtmxAoY1qYbLflgyQ
sata7gG9BtJy8tCFVXTcpVZsdA3Cr8vnX46YUI8EvWEw
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:31:58 2026 by rpki-client