This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kVf1quHCMkX9N_sZIPdGTI_RBvU.roa
File:                     kVf1quHCMkX9N_sZIPdGTI_RBvU.roa (raw, json)
Hash identifier:          uGmfvbQbd13COedkkI0IK0btURU1rikfDxtd658zReU=
Subject key identifier:   91:57:F5:AA:E1:C2:32:45:FD:37:FB:19:20:F7:46:4C:8F:D1:06:F5
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019B7D5AA1196B6C7ACCD5358D9E5BB46535
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kVf1quHCMkX9N_sZIPdGTI_RBvU.roa
Signing time:             Fri 02 Jan 2026 06:17:29 +0000
ROA not before:           Fri 02 Jan 2026 06:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209186
IP address blocks:        62.60.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:a1:19:6b:6c:7a:cc:d5:35:8d:9e:5b:b4:65:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan  2 06:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9157f5aae1c23245fd37fb1920f7464c8fd106f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:10:21:71:97:f5:f3:ff:32:55:40:db:0f:
                    03:a6:f3:b6:1f:26:33:e0:08:73:33:0d:ab:7a:71:
                    46:81:cf:02:dc:2a:58:59:bd:39:e4:ab:73:c5:a6:
                    a5:c0:36:03:b8:be:06:c7:24:f7:52:32:a3:dd:28:
                    a9:11:ff:9e:a8:15:10:c6:ac:1d:c2:fa:51:ae:0a:
                    df:27:4c:e7:9e:fa:69:6f:d0:61:2e:c7:e8:e3:0a:
                    18:6f:b7:36:77:cd:7e:87:4e:96:cb:12:d5:00:93:
                    20:ca:aa:de:24:bf:66:78:19:10:85:66:dc:62:b4:
                    67:eb:c1:11:ab:07:99:65:a6:54:22:c0:3f:6f:c9:
                    d0:f9:df:31:cf:34:3f:e1:a2:1f:0f:2b:1e:ac:f8:
                    5a:10:ad:4c:d6:0c:b6:7f:17:c0:fb:3e:da:64:4f:
                    d2:ac:66:fd:a2:7e:f8:8c:8c:45:ed:d1:8e:a8:cb:
                    e4:e2:14:4b:b2:3e:d2:3e:25:75:88:a9:66:80:e9:
                    68:6b:76:a3:b7:ba:1c:6e:96:09:63:21:9c:cc:61:
                    e4:32:b5:a8:85:e2:35:11:56:51:71:20:ed:0e:4e:
                    0f:f0:d6:ed:bb:26:51:22:83:17:ad:62:65:d7:0a:
                    22:ac:9f:c4:58:3b:e9:0a:db:1f:8b:a3:10:15:24:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:57:F5:AA:E1:C2:32:45:FD:37:FB:19:20:F7:46:4C:8F:D1:06:F5
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kVf1quHCMkX9N_sZIPdGTI_RBvU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:fa:7a:52:07:f3:91:82:5e:7c:d3:0f:41:e0:2a:ec:b3:
         79:8f:a5:6e:37:7e:2e:22:67:fa:b8:1d:75:81:5d:59:68:ad:
         79:ea:6f:fe:29:f5:3f:56:ea:c6:9b:d2:0c:a8:fb:86:7b:9a:
         d3:e5:d1:57:52:f2:ec:00:c4:cd:e0:cf:bb:e9:58:b3:a1:ec:
         7d:8d:c1:41:06:72:93:b1:47:09:47:48:bc:4b:fe:07:d3:e5:
         e9:65:b7:54:66:c9:cb:a4:d0:bd:c6:08:25:2f:e2:3d:13:d0:
         75:33:c3:e5:3d:57:05:a8:6d:99:84:99:10:81:f3:64:5b:c8:
         c7:d7:ce:a5:4b:91:ef:fb:06:62:84:ec:bc:f9:47:f3:a9:11:
         28:a2:2f:78:b5:40:11:70:6f:59:53:59:23:6a:4c:a1:2b:ba:
         d6:33:89:47:80:03:ce:b3:3c:04:76:77:6d:a0:31:83:90:e9:
         9b:28:19:f5:cd:86:12:4e:0d:15:4e:38:06:5e:8c:f7:d0:9e:
         e3:52:c7:dd:04:bf:74:a1:80:80:cb:e4:9b:fd:e6:91:75:49:
         20:ea:33:70:58:5e:b4:ff:5e:e1:f3:12:ba:b1:f0:55:c7:63:
         23:77:f0:c4:c4:fc:05:ea:2e:cf:e0:ad:60:1c:a4:fd:61:1f:
         79:98:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:47:23 2026 by rpki-client