This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/vMZUucYgT5z0znQZnRF-dVJeRiE.roa
File:                     vMZUucYgT5z0znQZnRF-dVJeRiE.roa (raw, json)
Hash identifier:          W7+gTHKhQj/8XXemyZ/NzWsuUf16BLgdFCj756C84Vo=
Subject key identifier:   BC:C6:54:B9:C6:20:4F:9C:F4:CE:74:19:9D:11:7E:75:52:5E:46:21
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED1F8D2E181D711100431E5B7D8FD3
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/vMZUucYgT5z0znQZnRF-dVJeRiE.roa
Signing time:             Thu 01 Jan 2026 14:19:01 +0000
ROA not before:           Thu 01 Jan 2026 14:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200633
IP address blocks:        194.181.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:1f:8d:2e:18:1d:71:11:00:43:1e:5b:7d:8f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bcc654b9c6204f9cf4ce74199d117e75525e4621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:21:d2:6d:70:fd:d9:ef:86:2d:03:c5:8c:f9:
                    fb:17:85:15:68:0e:dd:47:13:1c:81:b9:90:13:1b:
                    1c:6e:1c:6d:8e:59:d3:7b:bb:f6:78:72:39:78:95:
                    94:16:9c:14:d0:6e:81:e2:c5:29:ff:f6:8f:5e:e0:
                    27:4c:76:35:14:26:f7:ef:f0:00:9b:04:6b:5c:95:
                    e2:43:c8:4c:fc:d9:57:eb:3d:39:71:c8:92:2a:b9:
                    fd:d8:24:3f:fa:56:19:bf:c6:a6:5f:c2:a5:a0:4a:
                    d5:72:ab:49:bd:cf:a4:2b:c8:7e:aa:d8:1e:7b:8a:
                    69:20:97:e4:24:d9:17:d2:4d:9c:e2:ea:e4:88:86:
                    50:3d:2c:ef:9b:f7:3d:09:27:51:bf:cf:f0:88:5e:
                    77:d3:78:ee:f0:eb:bc:6c:17:3f:7d:a1:fa:d9:de:
                    06:8d:4e:1f:7b:7a:af:64:85:d2:46:81:9a:b3:c7:
                    51:16:28:40:19:3a:b6:c3:ad:47:d4:7d:e8:97:5d:
                    a7:17:6a:ab:11:fe:ba:f1:d7:73:a0:8e:9d:8b:8f:
                    68:7e:ea:f2:3c:7e:b5:5f:40:7c:20:38:6e:0e:23:
                    35:39:bb:ee:ca:31:12:35:e2:50:b5:eb:9c:06:fa:
                    d9:12:be:41:87:fc:fd:f5:0e:b5:1a:ca:d9:61:c3:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C6:54:B9:C6:20:4F:9C:F4:CE:74:19:9D:11:7E:75:52:5E:46:21
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/vMZUucYgT5z0znQZnRF-dVJeRiE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.181.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:7f:04:51:29:0a:11:05:97:83:d7:ce:85:7d:f3:7f:cb:16:
         5a:8b:0d:12:3a:e2:e9:8f:5a:16:bc:68:ac:fe:de:bb:9d:0c:
         a3:65:af:e8:6c:98:6b:bd:0b:74:99:af:e5:72:4c:70:85:d9:
         be:13:af:32:a3:1d:8c:43:04:d2:10:1b:14:87:d1:c8:f3:69:
         63:b5:6f:2c:6d:1f:44:20:14:9b:b4:95:57:01:b3:f1:e6:ba:
         47:53:0d:20:d5:3e:53:48:22:ae:a3:18:ae:db:2d:fd:87:30:
         92:f5:fb:ff:4e:18:13:88:cc:2e:9c:48:57:6b:32:19:a8:88:
         57:c7:1f:61:6a:14:34:04:65:c0:72:d4:61:e1:c8:22:05:1a:
         46:77:45:b9:1f:58:32:ed:4f:17:1e:b6:3a:67:d9:1d:b4:cc:
         e3:57:1f:2d:e5:69:59:b0:1a:ce:e6:7b:cc:20:66:15:d1:9f:
         a7:9b:89:d6:e9:93:42:9c:15:bc:a0:9d:df:6b:4b:4c:bb:d5:
         5b:f9:ab:01:c9:a4:be:e1:20:cb:47:28:f5:e2:bc:a4:ab:4d:
         de:63:e9:ea:7c:f1:6e:07:09:80:33:75:ea:e7:65:c4:bd:81:
         df:96:f5:7e:4b:5c:64:aa:43:f1:b2:73:c0:25:77:c1:87:f2:
         86:57:6e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:12 2026 by rpki-client