This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/VpcTd6xXlgFFUSrpk4clP1LplCk.roa
File:                     VpcTd6xXlgFFUSrpk4clP1LplCk.roa (raw, json)
Hash identifier:          z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=
Subject key identifier:   56:97:13:77:AC:57:96:01:45:51:2A:E9:93:87:25:3F:52:E9:94:29
Certificate issuer:       /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial:       019B7B36DB5FDA159F8E4F67375206ECC7FA
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/VpcTd6xXlgFFUSrpk4clP1LplCk.roa
Signing time:             Thu 01 Jan 2026 20:19:11 +0000
ROA not before:           Thu 01 Jan 2026 20:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        193.188.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:db:5f:da:15:9f:8e:4f:67:37:52:06:ec:c7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
        Validity
            Not Before: Jan  1 20:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56971377ac57960145512ae99387253f52e99429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:ed:5c:31:7e:de:32:e0:49:c9:e4:18:79:
                    ba:7a:6c:2f:46:a8:10:45:ec:67:57:74:9f:6b:f4:
                    58:c6:07:a0:7d:28:fc:66:db:2c:6a:67:b6:7e:12:
                    00:c8:8f:70:63:d7:ba:a3:5d:c7:87:d7:4f:b0:47:
                    fa:0f:a2:8f:a0:4c:0f:b6:dd:2f:c6:e0:55:12:dc:
                    0a:20:b8:eb:6b:ec:3b:9f:c6:a0:d3:aa:04:b5:41:
                    d3:cb:01:07:40:3e:9e:a1:27:e3:59:1d:b7:ca:28:
                    22:99:5d:5f:ac:ad:b0:d3:ec:24:2a:fe:31:1c:05:
                    d3:9f:83:e4:2b:fa:55:ba:74:6a:1b:fd:e4:ff:62:
                    29:d4:12:e2:31:9f:dc:5f:2a:8a:60:41:d4:2d:58:
                    6e:c7:b4:f9:35:81:a8:25:9f:58:d0:7c:ed:61:3a:
                    f8:c8:f8:cc:3f:01:9d:bf:e8:ef:f5:89:ae:f8:fb:
                    8d:73:6c:5d:6c:e4:e9:b2:58:da:c0:d9:8b:36:f6:
                    db:56:45:cb:a8:03:83:97:14:9f:e8:59:bb:57:af:
                    50:26:a2:30:da:65:78:90:9e:ae:85:3b:1b:3a:2e:
                    a0:eb:95:6c:7c:32:72:2f:a0:9b:4a:77:a6:d9:d3:
                    4b:70:be:f1:0d:2c:00:02:fa:3a:9c:9e:41:db:33:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:97:13:77:AC:57:96:01:45:51:2A:E9:93:87:25:3F:52:E9:94:29
            X509v3 Authority Key Identifier:
                keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/VpcTd6xXlgFFUSrpk4clP1LplCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:1a:1f:69:22:30:b0:84:c1:3a:61:cb:4c:f6:b5:a2:55:e4:
         db:64:e4:31:92:8d:c3:c0:9b:c6:1e:de:63:c2:19:c9:5c:d5:
         08:b7:35:9f:29:16:1f:45:28:34:9b:9f:05:ec:00:f7:09:8c:
         e9:02:d1:be:c8:e6:0f:93:26:2b:79:a9:62:bd:4f:68:e1:d1:
         b7:1f:3c:f7:ab:4d:f8:7a:45:09:f1:36:3b:39:92:44:d7:ae:
         4b:1c:78:de:66:fd:8b:82:f9:95:92:b9:8c:df:c3:e1:2a:3f:
         ac:06:c7:80:d5:bc:06:b7:11:48:f3:c9:18:5d:f4:5a:69:38:
         02:67:5d:ec:b8:ec:82:38:b8:41:dc:33:17:4f:b8:f0:92:4b:
         82:2b:09:cd:21:0f:06:d8:67:22:e6:8c:ff:25:72:40:ae:62:
         f0:5f:df:fa:12:88:c3:e1:4d:da:fc:11:2f:18:66:36:21:b8:
         8a:4f:26:7d:25:4c:40:eb:95:23:89:be:70:e9:82:ac:13:d1:
         94:ab:ce:04:1f:e1:51:3a:90:72:0c:38:86:07:cd:a6:f7:7c:
         3a:7e:8b:99:3c:68:ba:46:a9:b6:a2:45:f5:4f:f3:dd:99:29:
         30:b7:e4:48:b7:8d:6a:8d:46:85:04:9b:2a:cc:34:c9:af:77:
         24:0e:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:17:13 2026 by rpki-client