This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/VfT1jovZQbB_GOxrewqAg31IJD4.roa
File:                     VfT1jovZQbB_GOxrewqAg31IJD4.roa (raw, json)
Hash identifier:          rEaYnnOYpTkHENGl1d6pSu6EPvs3HHaHkQH4luV+aMI=
Subject key identifier:   55:F4:F5:8E:8B:D9:41:B0:7F:18:EC:6B:7B:0A:80:83:7D:48:24:3E
Certificate issuer:       /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial:       019B76EB7FCB2D91A9251F98485379DF8666
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/VfT1jovZQbB_GOxrewqAg31IJD4.roa
Signing time:             Thu 01 Jan 2026 00:18:23 +0000
ROA not before:           Thu 01 Jan 2026 00:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209386
IP address blocks:        193.29.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:7f:cb:2d:91:a9:25:1f:98:48:53:79:df:86:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
        Validity
            Not Before: Jan  1 00:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55f4f58e8bd941b07f18ec6b7b0a80837d48243e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:0c:4a:8c:69:84:4e:d8:9c:81:69:a5:f8:
                    91:23:a1:2a:58:13:45:88:56:2e:17:33:12:a5:e3:
                    db:c0:07:19:21:3e:7e:71:01:e6:96:30:ef:48:bc:
                    3c:3a:b2:93:c0:9b:4b:df:fe:e3:70:bf:49:0a:1e:
                    ac:26:51:07:9c:dd:12:d7:c8:a7:50:76:26:9f:ea:
                    73:53:63:85:9d:43:4d:be:3f:e5:48:e6:ee:00:c2:
                    16:30:4a:51:a7:f1:9b:da:c6:eb:9a:21:45:49:11:
                    ec:b1:e7:c8:b4:de:31:d4:1f:fb:e1:78:ff:06:49:
                    2e:49:08:b8:e4:a5:a7:af:7f:4a:07:93:2b:f4:ac:
                    a2:fe:d1:c4:ff:67:15:8e:26:a1:9d:5b:f7:ae:6d:
                    10:95:ec:14:14:e4:3b:41:97:a5:6e:42:98:2e:97:
                    d8:9a:91:1a:af:b4:7e:ac:14:9f:02:de:e0:12:1d:
                    42:ec:3b:8c:ac:41:4c:e7:09:f1:64:2d:dd:a4:c3:
                    36:c3:58:d9:9c:f3:e2:f8:ec:e2:30:8a:cc:20:2a:
                    e2:87:41:a0:95:9d:0a:5a:2c:ab:6c:0f:37:ca:d1:
                    12:78:70:68:a8:51:a1:0b:56:7e:91:25:c3:42:ad:
                    30:9c:d3:2f:1f:0e:df:e0:83:68:97:2c:6f:88:92:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F4:F5:8E:8B:D9:41:B0:7F:18:EC:6B:7B:0A:80:83:7D:48:24:3E
            X509v3 Authority Key Identifier:
                keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/VfT1jovZQbB_GOxrewqAg31IJD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:77:45:93:ca:c1:8e:17:8f:41:55:59:05:fb:19:a1:b2:
         d8:9e:4f:5b:c0:54:2e:9a:85:fd:cd:33:ac:8b:cd:02:0e:0c:
         8b:59:6f:44:3e:49:7d:52:bd:22:71:da:3e:fb:be:d8:55:6f:
         e7:9e:64:d5:f2:92:06:4a:79:ed:6c:4f:9c:cc:4c:7f:fe:38:
         a4:8c:e0:f6:1c:41:8c:79:43:0c:77:8f:c6:77:17:a9:57:45:
         b1:9f:6e:3f:a2:eb:b2:fb:d0:3d:5d:0f:80:3c:e3:ae:b6:1f:
         bd:63:3b:d9:ea:2b:f8:5a:68:66:ca:cb:c2:0e:0c:e2:9a:cf:
         bb:4e:5b:3b:67:a5:51:75:1a:6e:4a:3c:70:99:e0:02:1e:81:
         85:46:57:f2:fd:bb:d3:0b:f0:f5:d5:0c:6a:9a:d9:4e:a3:44:
         80:03:78:c9:48:68:cf:6e:91:41:cc:a7:3a:b5:b2:c1:51:e9:
         07:67:d9:af:49:77:75:ab:95:e5:7d:10:dc:a1:b0:0f:32:74:
         24:e2:33:69:89:e5:38:fc:7f:e2:0c:cd:f9:c2:3f:9f:fe:22:
         12:d4:26:9e:11:4b:6f:a6:41:1b:04:d2:d9:49:da:17:26:4c:
         ef:04:14:c9:e4:f2:6c:73:de:8f:c0:56:0e:93:5f:87:59:7a:
         7b:3f:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:56 2026 by rpki-client