This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vEr0WmjCQO9XLJ8vDxqSevuKzUw.roa
File:                     vEr0WmjCQO9XLJ8vDxqSevuKzUw.roa (raw, json)
Hash identifier:          I7Lc2kIYUnx+kkg2FUe2IW0JdVsQsNpYg9hzZRkWPfA=
Subject key identifier:   BC:4A:F4:5A:68:C2:40:EF:57:2C:9F:2F:0F:1A:92:7A:FB:8A:CD:4C
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       019A78B0B3F0C304D1F2AD10B4DE5020EDA5
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vEr0WmjCQO9XLJ8vDxqSevuKzUw.roa
Signing time:             Wed 12 Nov 2025 15:30:37 +0000
ROA not before:           Wed 12 Nov 2025 15:30:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207019
IP address blocks:        193.93.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:78:b0:b3:f0:c3:04:d1:f2:ad:10:b4:de:50:20:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Nov 12 15:30:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bc4af45a68c240ef572c9f2f0f1a927afb8acd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:51:8a:50:4a:ff:e6:82:12:6d:5b:3f:5f:
                    78:41:c4:9c:45:05:2b:0a:2d:44:09:c2:cf:50:21:
                    93:23:d2:f1:8f:eb:74:f2:2b:be:fa:94:d4:64:c9:
                    da:6f:18:27:de:7f:bc:90:f4:bd:e2:47:4b:71:f5:
                    13:c6:43:40:a9:c6:22:1b:30:7d:c4:59:64:78:95:
                    52:35:2b:74:0c:f4:50:43:ac:05:75:e4:7c:f0:8d:
                    81:72:f1:16:7d:e3:fd:d5:f3:ec:c2:af:10:63:19:
                    43:02:f1:73:37:f0:ef:35:ce:06:f7:e4:24:5c:02:
                    59:8f:4d:a6:0a:06:40:d0:c8:98:5d:44:be:a5:09:
                    b2:8c:db:cd:37:c5:1c:71:98:f0:86:d7:7c:7b:6b:
                    e5:07:e8:96:4d:91:39:79:d4:08:f2:5b:a0:2c:5f:
                    53:dc:2d:38:46:81:62:38:96:31:72:da:ec:6a:54:
                    ad:08:28:92:2f:89:81:ab:f9:15:60:c4:76:64:ac:
                    a6:73:86:de:44:d8:73:de:63:97:46:fb:5e:a9:f6:
                    58:20:f3:9c:85:92:6b:f8:d7:96:ab:5e:a6:9f:20:
                    d6:ec:33:cd:88:f1:3b:14:b1:a6:9f:19:0f:f5:81:
                    86:31:af:54:39:31:70:a6:00:0c:8d:ef:62:5a:c3:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4A:F4:5A:68:C2:40:EF:57:2C:9F:2F:0F:1A:92:7A:FB:8A:CD:4C
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vEr0WmjCQO9XLJ8vDxqSevuKzUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:2b:66:a8:cf:f9:43:9f:45:1c:c9:ab:54:31:cf:21:be:
         19:bc:fa:aa:4a:94:c9:7d:3a:7f:59:1a:6f:6a:55:8b:65:37:
         d7:69:b2:30:5d:fe:43:5b:e5:54:7f:2c:e6:63:76:30:a0:b8:
         60:7f:42:63:4c:aa:c6:50:62:78:f3:6b:2c:33:e8:3b:ef:ae:
         91:2e:81:58:dd:5b:59:23:a2:f5:0e:ab:5b:25:46:8a:3d:09:
         31:00:17:5a:2a:2c:bb:4c:3c:fb:40:69:3b:06:f7:12:d9:b9:
         d4:61:02:96:23:38:b9:99:0f:c6:86:d8:15:33:07:8a:36:4a:
         1b:f5:16:8f:3e:7f:5a:0f:a8:18:5c:8e:8e:36:f3:21:9f:d6:
         80:d4:d6:b7:e4:87:4a:51:af:db:d5:a5:69:14:92:df:fe:55:
         29:b3:55:a1:fc:ff:9a:f2:7b:79:b0:cf:cd:46:62:ec:5e:70:
         ff:08:c8:e5:44:9f:d7:25:d2:ab:bd:e4:a1:bd:d5:72:43:44:
         4a:02:1b:4d:cd:ed:e6:28:b4:a8:60:ee:54:e1:e8:95:39:90:
         12:46:7c:e1:9a:57:bc:8c:79:5d:80:63:d6:e0:50:dc:4b:11:
         ad:62:31:59:23:77:6d:e0:f0:01:25:d0:3e:3c:72:a0:ae:47:
         0d:61:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 10:49:58 2025 by rpki-client