This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa
File:                     vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa (raw, json)
Hash identifier:          i9XFeCZuakWWqMNbjgXUo7/eL4g2IBgqmIa52Z/2v4w=
Subject key identifier:   BC:A9:ED:B9:3D:F1:57:07:60:5A:66:77:F8:D3:CD:6E:6C:18:22:EA
Certificate issuer:       /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial:       019B797ED7E08BCFBD694D8F1AF69CA73344
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa
Signing time:             Thu 01 Jan 2026 12:18:34 +0000
ROA not before:           Thu 01 Jan 2026 12:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51242
IP address blocks:        193.239.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:d7:e0:8b:cf:bd:69:4d:8f:1a:f6:9c:a7:33:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
        Validity
            Not Before: Jan  1 12:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bca9edb93df15707605a6677f8d3cd6e6c1822ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:14:00:4e:52:2e:d3:23:a4:02:62:2c:cb:88:
                    c0:8f:66:b5:4b:75:e8:86:1c:48:e4:49:81:f1:0c:
                    d7:cc:58:61:f5:8c:5f:50:01:b2:05:a0:02:fa:1b:
                    fa:32:40:68:28:b2:41:25:45:45:f2:88:80:ac:80:
                    48:f0:62:6d:50:8a:fe:ae:02:99:be:49:b4:68:10:
                    af:30:da:ac:20:3d:9e:e2:b9:2b:4f:cd:2e:21:05:
                    1a:f0:f6:07:91:f5:ad:22:4d:6b:a2:b3:c8:4e:05:
                    30:6e:a0:ac:88:f9:8a:48:2e:cf:ca:3c:c5:c1:0f:
                    60:67:c2:66:db:ee:c9:b2:4b:b9:aa:96:44:1c:a4:
                    88:12:38:36:0d:46:4d:c3:61:f0:e6:83:b9:d6:0a:
                    53:8f:c3:8e:1e:a5:ba:23:5d:c4:7e:76:5b:a6:78:
                    be:69:b9:b8:e9:c5:44:98:61:88:d5:a5:e0:81:a0:
                    2d:75:9f:64:ad:f6:42:d7:23:d6:6b:e3:97:7d:9e:
                    ea:32:a8:3a:f2:b5:db:9b:7b:02:d1:ce:fd:3b:06:
                    5d:90:d3:b1:a4:88:40:b2:a4:26:ed:69:30:33:bb:
                    7a:e9:8e:be:d7:b9:69:1c:0f:9a:27:3d:80:b9:be:
                    09:d2:ca:97:91:56:8f:5d:51:e2:e9:bb:d0:b4:d5:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A9:ED:B9:3D:F1:57:07:60:5A:66:77:F8:D3:CD:6E:6C:18:22:EA
            X509v3 Authority Key Identifier:
                keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:b0:db:15:2b:45:2e:a3:f9:f1:0c:47:db:a3:84:f6:9b:81:
         ba:b2:6d:8a:57:cf:61:58:2a:f2:01:55:71:b2:db:a7:ba:31:
         df:7b:6c:29:75:38:af:27:40:4a:53:b9:f2:58:27:be:b3:e8:
         f5:d2:07:21:37:29:a4:ca:12:d2:af:04:61:6e:d5:e3:b7:55:
         50:70:73:a4:83:bf:20:40:27:e7:e9:a3:45:cd:05:a9:df:25:
         42:9e:c9:1e:c9:a0:37:c8:7d:57:51:d9:29:f7:e0:b8:fb:3b:
         15:6f:66:e4:6e:e3:73:c3:5d:e1:a0:07:e1:34:8c:6f:cd:1c:
         37:21:31:80:35:34:ba:0d:32:f1:97:88:b0:29:15:a8:1e:7e:
         87:6d:8f:c5:4b:ed:98:6e:2e:7b:d2:8d:e7:78:dd:c0:fb:6e:
         0d:d4:cd:aa:e5:41:34:6f:a7:85:48:75:b8:ef:14:e2:d0:87:
         16:cc:e2:a5:ab:80:9f:53:8b:b4:a2:3b:66:67:5f:27:32:bc:
         3e:a2:27:36:06:a7:6e:74:9e:1d:48:00:3f:55:b7:14:ac:33:
         b3:14:86:da:8b:65:54:3c:c6:c7:a8:e7:41:d3:69:1b:53:13:
         e9:d0:9e:7e:9b:56:d0:5e:36:e2:23:89:42:98:a9:57:d4:f1:
         04:5c:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 14:45:39 2026 by rpki-client