This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/V6VlaWA1K-C9MyNU228wIIvdWko.roa
File:                     V6VlaWA1K-C9MyNU228wIIvdWko.roa (raw, json)
Hash identifier:          1CcDBQN60ZlZdF+oTvwDg2BxgmLENhu2Ibg8dddCRwg=
Subject key identifier:   57:A5:65:69:60:35:2B:E0:BD:33:23:54:DB:6F:30:20:8B:DD:5A:4A
Certificate issuer:       /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial:       019AC0057ADB60ADE9EDF025CDCFBAF2A5D7
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/V6VlaWA1K-C9MyNU228wIIvdWko.roa
Signing time:             Wed 26 Nov 2025 11:56:15 +0000
ROA not before:           Wed 26 Nov 2025 11:56:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209806
IP address blocks:        176.120.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c0:05:7a:db:60:ad:e9:ed:f0:25:cd:cf:ba:f2:a5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
        Validity
            Not Before: Nov 26 11:56:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57a5656960352be0bd332354db6f30208bdd5a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:e0:bd:d9:50:c7:70:13:1a:6f:83:07:fc:
                    41:e3:7d:46:1f:99:20:ca:3d:60:32:2a:f1:ea:75:
                    b6:ce:3e:48:3c:64:df:0c:d0:fb:c4:16:85:57:18:
                    ca:25:96:d3:e9:8f:4a:b5:71:3f:38:15:a5:8b:9c:
                    94:44:bd:15:60:2f:81:ae:4c:20:a8:a7:d7:9a:7a:
                    a5:7d:e6:b3:8f:c7:1e:ec:b5:a0:56:68:ae:00:fe:
                    a2:38:75:dd:86:68:2b:8e:c5:93:46:8d:f2:48:99:
                    20:50:d9:4b:38:a7:33:1a:bb:5d:7a:95:93:03:52:
                    9b:26:a3:db:9e:5e:ae:e3:c3:5d:23:e8:8a:3a:37:
                    29:56:4d:53:8f:04:c2:88:3e:ea:04:de:1b:66:f0:
                    29:04:5a:b2:45:2d:cd:1e:db:57:cc:c4:c9:61:e9:
                    80:e1:b6:4b:a6:55:5e:4c:30:02:56:16:ae:33:23:
                    8a:4d:44:74:0a:25:fd:2d:f8:8e:e0:ce:ed:1f:1d:
                    43:3d:62:04:a8:d8:bd:e4:44:ea:c5:49:c9:f1:f6:
                    7c:48:4d:92:c7:6c:c5:64:20:97:27:cb:ad:a0:83:
                    f5:51:32:63:5f:7d:8d:af:e4:df:12:13:3a:fd:05:
                    9e:be:42:d5:6e:ec:5a:51:74:6e:9e:0d:f9:51:05:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A5:65:69:60:35:2B:E0:BD:33:23:54:DB:6F:30:20:8B:DD:5A:4A
            X509v3 Authority Key Identifier:
                keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/V6VlaWA1K-C9MyNU228wIIvdWko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.120.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:01:d5:ae:ea:87:ce:6b:39:dd:68:ab:dc:db:b1:bb:62:b9:
         fa:77:f2:f0:77:64:e3:ee:83:b7:85:d4:84:5a:0d:66:1f:3a:
         4e:0d:39:b8:27:23:0c:b4:1c:d6:c6:ed:ca:b1:bd:36:f8:4e:
         3b:66:a3:c5:3f:1e:bf:7a:19:8f:ac:5e:17:ec:97:56:29:8d:
         a4:29:d5:90:40:ea:3d:93:d8:cb:fd:52:34:49:b5:d8:ff:f1:
         c7:1b:87:77:3a:21:b9:6e:78:a9:18:fe:97:86:c7:53:95:b2:
         be:c8:2a:a0:70:9e:ed:cc:35:f8:ed:15:ac:99:74:52:bc:1e:
         a9:b6:af:0e:bc:4c:02:41:07:b8:bb:56:be:eb:8d:79:b5:7b:
         05:59:20:1c:a7:81:45:d3:18:3b:cc:0a:89:ac:c9:8f:a1:0c:
         ed:69:31:b0:d6:77:ba:49:c2:f8:d1:1c:dc:58:34:cf:4c:00:
         a7:7c:a6:1a:b7:42:04:8f:de:57:2c:75:5b:11:13:af:bf:28:
         ba:ba:0e:e2:2d:6c:dc:06:a7:21:ab:6e:fc:53:90:c6:98:f0:
         26:23:14:60:c8:3b:e8:4d:df:7d:af:9c:bb:26:bd:00:7b:02:
         fb:3f:06:6d:b0:96:48:7a:09:39:c3:22:fc:d0:f6:67:74:c1:
         b0:8d:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:53:10 2025 by rpki-client