This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Vos0YXlrvSISzNrKBPqS7zLPjkY.roa
File:                     Vos0YXlrvSISzNrKBPqS7zLPjkY.roa (raw, json)
Hash identifier:          B60nLXQoRs5gI3OiafhBiz9AYmOTRBwAZAW2+lTtGio=
Subject key identifier:   56:8B:34:61:79:6B:BD:22:12:CC:DA:CA:04:FA:92:EF:32:CF:8E:46
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED25425FFF407413D76A3F36BE1728
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Vos0YXlrvSISzNrKBPqS7zLPjkY.roa
Signing time:             Thu 01 Jan 2026 14:19:03 +0000
ROA not before:           Thu 01 Jan 2026 14:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204569
IP address blocks:        193.59.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:25:42:5f:ff:40:74:13:d7:6a:3f:36:be:17:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=568b3461796bbd2212ccdaca04fa92ef32cf8e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a3:d3:91:83:26:7f:34:cf:7b:f8:de:77:85:
                    4a:9c:e5:cd:8f:08:1e:dc:4e:37:5f:ab:b5:e8:42:
                    f2:7a:17:d6:fb:12:8f:bf:86:b6:c4:e8:d0:02:11:
                    b1:9d:f3:07:5d:29:20:ae:42:c4:60:a4:ac:43:dc:
                    24:e9:ae:de:5d:53:4b:d0:51:2b:d6:22:f1:2e:96:
                    6b:c2:c4:25:b7:05:98:07:6d:c1:3f:db:f1:77:2f:
                    c7:92:b1:aa:0c:e9:a6:fb:e3:be:23:d2:11:d5:4e:
                    cf:4a:6f:23:d4:ab:58:ee:ed:7c:41:04:35:cd:8d:
                    5d:c2:1a:88:17:40:ba:67:33:03:9d:af:42:16:78:
                    22:7a:fb:c1:f4:3d:fb:0d:f9:5c:25:c0:74:c0:83:
                    25:ec:21:9b:33:f0:32:74:52:27:18:2f:a2:ca:6a:
                    a3:cf:dc:24:d3:01:d8:dd:23:59:f9:cc:05:4d:c0:
                    f0:ba:9b:da:7a:eb:4a:84:2e:f8:dc:f3:2a:0b:09:
                    7c:f1:13:42:b6:f1:02:82:5d:c1:95:44:44:b5:74:
                    63:12:7b:98:6e:91:8f:89:fc:3c:53:c8:7e:e5:e1:
                    2a:0a:52:e3:10:d0:1b:ef:4d:bb:1e:6d:c0:d3:a8:
                    de:4a:35:6c:d1:0b:36:83:11:30:84:52:f8:4f:3d:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8B:34:61:79:6B:BD:22:12:CC:DA:CA:04:FA:92:EF:32:CF:8E:46
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Vos0YXlrvSISzNrKBPqS7zLPjkY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ef:7f:de:f8:53:b5:4d:c7:ec:00:37:3f:10:c0:cd:3d:bf:
         a6:22:93:19:7e:22:07:34:df:90:c4:8b:3c:ca:35:69:40:02:
         04:18:18:9c:ff:27:54:62:cd:39:26:76:6a:76:a1:0a:b3:0b:
         87:73:bf:03:4a:77:aa:c5:2a:18:8b:f5:a0:54:d0:95:57:a9:
         9d:52:c0:21:d7:d9:98:2d:2b:a2:01:2a:ec:75:51:cd:bb:b7:
         fd:0c:14:a3:d0:2e:74:43:32:91:91:93:4c:af:2d:04:6c:37:
         94:22:93:59:12:2c:c1:a7:6d:02:71:4d:be:3d:25:5a:e2:ee:
         1f:23:c4:ea:95:cd:40:5c:d1:b2:2a:f3:01:d2:7b:fd:f5:74:
         34:ab:bf:a3:7b:8e:0c:41:8a:58:77:c5:70:fb:fd:85:25:d9:
         ec:16:1b:da:bb:c7:c5:a3:3e:45:e3:31:28:e7:b1:7c:d6:3c:
         6d:5a:a0:5a:97:4b:87:72:7c:6e:c0:49:83:53:9c:54:2d:b2:
         e1:f9:45:cd:57:32:f0:fe:ef:45:4b:63:66:5a:b7:44:1b:ac:
         05:84:1b:3e:09:5b:0c:f0:25:80:93:f1:74:49:61:fe:36:88:
         a4:60:3d:df:12:42:4b:aa:b8:9a:53:ef:7e:be:89:40:d2:cb:
         cf:b7:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:21:13 2026 by rpki-client