This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/vrE3hwEnS1QTByXaca8_W_PJzRA.roa
File:                     vrE3hwEnS1QTByXaca8_W_PJzRA.roa (raw, json)
Hash identifier:          OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=
Subject key identifier:   BE:B1:37:87:01:27:4B:54:13:07:25:DA:71:AF:3F:5B:F3:C9:CD:10
Certificate issuer:       /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial:       019B76EB1E6FE466E61AC91558395C6CAA08
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/vrE3hwEnS1QTByXaca8_W_PJzRA.roa
Signing time:             Thu 01 Jan 2026 00:17:58 +0000
ROA not before:           Thu 01 Jan 2026 00:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57219
IP address blocks:        185.198.18.0/23 maxlen: 23
                          2001:7f8:b3::/48 maxlen: 48
                          2a0a:8240::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:1e:6f:e4:66:e6:1a:c9:15:58:39:5c:6c:aa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
        Validity
            Not Before: Jan  1 00:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=beb1378701274b54130725da71af3f5bf3c9cd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:30:6d:5e:63:ef:11:2a:29:c8:90:20:63:
                    fa:67:31:95:f7:f8:76:a6:00:ec:b5:11:cd:92:02:
                    31:98:db:03:46:33:75:55:71:ae:cc:7a:40:d8:89:
                    5d:2f:65:0e:87:54:63:d5:bb:4c:8c:4e:31:5a:4c:
                    5e:60:77:20:34:93:a5:67:02:db:d5:87:d7:36:25:
                    07:fa:a6:39:5e:c9:08:c9:56:24:f8:eb:67:36:62:
                    d0:ce:6c:58:8c:40:b9:95:61:2c:d8:76:99:0f:0d:
                    5f:5f:6f:64:d0:b3:34:fd:3f:99:e9:7d:33:3c:8c:
                    4e:67:cb:54:bc:59:5b:0f:97:a1:81:a4:e7:99:5c:
                    d5:dd:ac:61:53:41:ac:0c:dd:82:67:ca:e6:b2:ac:
                    93:e4:6b:35:13:46:8c:71:fc:09:15:a2:35:7e:e8:
                    1e:4e:84:91:84:9b:a9:89:17:cd:61:eb:8c:52:e2:
                    80:46:37:f7:33:62:0a:3f:5d:82:f4:bc:e5:11:a9:
                    fb:f5:d3:69:4c:0a:1c:ba:b9:14:1d:b5:be:59:8f:
                    b7:93:ce:5f:d4:fd:c7:33:b1:7f:f7:6b:fe:10:dc:
                    18:24:d6:f1:7a:22:71:55:84:f2:9c:8f:85:36:f6:
                    0b:11:f5:59:b5:4d:4e:fe:35:10:77:1c:b6:81:09:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B1:37:87:01:27:4B:54:13:07:25:DA:71:AF:3F:5B:F3:C9:CD:10
            X509v3 Authority Key Identifier:
                keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/vrE3hwEnS1QTByXaca8_W_PJzRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.18.0/23
                IPv6:
                  2001:7f8:b3::/48
                  2a0a:8240::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:86:ac:29:7b:50:ff:15:94:f8:4d:79:4a:09:cc:5f:ad:12:
         d8:50:cd:b3:01:46:08:ff:2d:fc:95:cb:78:18:e8:c9:21:7c:
         01:86:36:a7:f8:82:98:0e:a7:e6:f9:a7:98:a6:2a:1f:66:46:
         2a:55:41:41:22:10:b6:63:fd:25:d5:4d:c0:eb:50:47:ca:56:
         86:84:36:40:46:12:19:e3:f8:a0:ee:a5:d0:99:97:54:b6:c1:
         f8:c6:1e:35:1c:22:c5:3b:1a:ca:e5:08:df:e5:d4:41:4a:d6:
         07:c2:81:fd:3b:f1:dc:93:61:39:2f:8b:db:39:8b:94:f4:0e:
         7f:00:62:f9:15:1c:e0:a4:43:91:00:7f:71:7d:98:91:6a:60:
         9e:c0:eb:30:53:01:94:10:36:a8:53:29:af:f2:28:10:13:6a:
         f9:a6:7a:50:26:7b:8d:f3:b5:d3:86:f6:d2:06:de:00:25:3a:
         bf:99:2f:7f:68:1b:ca:25:90:c7:82:2c:7f:2f:32:ac:bd:ba:
         b2:96:c7:67:7e:aa:24:57:b5:4b:24:f7:d9:05:23:40:e1:f7:
         7a:65:99:da:19:40:0b:1f:5d:36:48:98:9b:3d:ad:73:1f:53:
         ad:53:a6:5a:35:96:90:f0:93:82:39:ef:1b:97:3c:25:f8:1c:
         ba:02:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:58 2026 by rpki-client