This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vyCxeaU7oQV4EBQAWACdinJapeU.roa
File:                     vyCxeaU7oQV4EBQAWACdinJapeU.roa (raw, json)
Hash identifier:          9FET2tQlkrdHWxiVy+9dPfAnFZugg//I7ysQ0Bh30nU=
Subject key identifier:   BF:20:B1:79:A5:3B:A1:05:78:10:14:00:58:00:9D:8A:72:5A:A5:E5
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B35762197DE06FED4B9E667200F4265
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vyCxeaU7oQV4EBQAWACdinJapeU.roa
Signing time:             Thu 01 Jan 2026 20:17:39 +0000
ROA not before:           Thu 01 Jan 2026 20:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47774
IP address blocks:        193.231.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:76:21:97:de:06:fe:d4:b9:e6:67:20:0f:42:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf20b179a53ba1057810140058009d8a725aa5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:85:d5:aa:c4:ab:7d:3d:da:a7:e4:ff:13:
                    8d:d2:da:5d:26:1e:de:ab:02:a1:40:97:20:b9:04:
                    76:ba:f8:d3:c0:08:b0:aa:c8:6f:d0:d8:bd:2b:12:
                    50:0e:2c:9f:55:47:37:9d:00:2c:94:b3:4b:90:ef:
                    ca:a8:7e:3c:8f:be:1a:63:2d:8a:63:90:d9:c1:5d:
                    f3:65:6e:ff:06:14:ef:9e:b0:3a:2f:b3:16:ae:da:
                    77:2c:05:63:b3:a8:77:47:84:43:ce:aa:0d:22:08:
                    a6:ae:c4:3d:6a:d0:74:85:06:4a:5c:56:9b:46:a0:
                    f5:a6:73:1e:4c:6c:c4:22:f5:c9:f6:f1:07:b6:a0:
                    e0:75:49:a4:d9:44:f5:ed:a1:f5:d9:4b:e6:a1:c4:
                    9c:79:c7:02:1e:28:10:f2:a6:6c:e9:3b:ed:1b:70:
                    39:1e:c5:12:84:78:bd:10:f1:fc:b8:6f:49:ae:a8:
                    24:77:f9:f2:eb:f2:8c:44:61:33:e2:79:92:22:73:
                    13:e3:55:46:0c:fd:e8:e2:6e:2e:24:85:69:07:5d:
                    52:64:8b:d5:46:d7:db:ea:06:f6:bb:75:1e:fc:0a:
                    ef:62:c2:05:b4:f7:be:84:e9:bb:83:b1:09:ee:d8:
                    ad:71:ed:99:4f:05:78:0d:b8:da:11:26:e3:8e:40:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:20:B1:79:A5:3B:A1:05:78:10:14:00:58:00:9D:8A:72:5A:A5:E5
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/vyCxeaU7oQV4EBQAWACdinJapeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.231.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:35:07:57:81:8a:8d:46:7a:94:a8:a1:91:e6:e0:9d:28:c9:
         4e:d9:03:07:49:26:dd:88:e2:2a:2e:29:f8:3b:bf:26:4f:53:
         05:09:3e:d1:53:fc:5c:84:aa:2a:bd:2a:44:39:9d:f0:57:64:
         6c:a5:8e:6d:52:b8:06:35:08:f7:c9:a2:b6:58:1b:01:ab:f5:
         c8:b5:94:4f:c5:34:62:93:63:64:2b:dc:f4:95:f8:16:c5:aa:
         d9:ab:b5:4a:c5:98:b8:09:49:c1:12:47:08:d8:1e:32:0c:05:
         e6:c7:51:15:e5:4d:45:4c:0b:5d:2e:1a:f4:84:99:dc:96:b2:
         a8:08:17:0b:8a:b9:ff:0c:c1:06:e9:08:4d:d9:47:be:f9:22:
         b4:88:4c:31:be:35:fd:b6:b2:23:39:89:69:e6:98:8a:31:13:
         42:aa:d5:93:7b:17:d3:8e:5b:79:6f:0f:49:05:36:be:64:af:
         69:c8:17:4f:aa:b6:a7:a7:dc:75:61:35:53:e3:dd:e5:77:23:
         d1:fd:66:30:bb:22:9c:85:9a:f1:6d:ea:33:67:a2:43:55:b4:
         02:a2:4c:fc:1f:67:45:e9:b9:33:d3:dd:d4:71:96:95:70:94:
         39:04:bc:db:45:de:00:0e:d8:ca:78:be:04:b7:81:d7:ab:af:
         01:4a:5d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:48 2026 by rpki-client