This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/VU2zNi6GXyBR_Kxxaa0Tcvmf6FM.roa
File:                     VU2zNi6GXyBR_Kxxaa0Tcvmf6FM.roa (raw, json)
Hash identifier:          3Kij+pdAh6hVG1cxRMJCxmbZU6rFpPSUJMYxL2WpuAs=
Subject key identifier:   55:4D:B3:36:2E:86:5F:20:51:FC:AC:71:69:AD:13:72:F9:9F:E8:53
Certificate issuer:       /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial:       019B7759300F8387B5059AAA71708647B3C3
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/VU2zNi6GXyBR_Kxxaa0Tcvmf6FM.roa
Signing time:             Thu 01 Jan 2026 02:18:12 +0000
ROA not before:           Thu 01 Jan 2026 02:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137
IP address blocks:        160.78.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:30:0f:83:87:b5:05:9a:aa:71:70:86:47:b3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
        Validity
            Not Before: Jan  1 02:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=554db3362e865f2051fcac7169ad1372f99fe853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:2b:fa:1b:ff:5e:78:21:04:a9:3a:50:04:
                    51:f5:04:66:f2:a5:e5:90:0d:92:cf:be:57:76:83:
                    1b:b2:60:cc:fe:3d:44:1e:f0:2a:23:87:c9:ef:a5:
                    c8:d9:51:d1:ad:04:6a:e3:4e:d5:30:0d:19:54:c1:
                    e7:64:06:4f:a8:cd:15:01:ab:f8:71:76:ce:f7:d1:
                    c9:3e:fb:01:77:aa:ee:d7:4e:65:a6:00:2d:e4:ce:
                    be:e2:e9:e9:91:97:0b:ac:c6:ad:7f:aa:b0:c5:ae:
                    ea:18:b9:e3:e8:b3:1c:32:e9:08:7c:7b:5c:56:d1:
                    ce:f2:91:fc:9a:38:3b:5e:5f:5c:cb:87:6d:a9:00:
                    89:c5:90:95:74:23:ad:a2:0d:09:ed:2e:9a:09:78:
                    05:c7:6d:40:2f:60:d8:c4:a7:88:60:91:35:0e:2d:
                    98:13:07:21:9b:5e:13:2f:ca:22:82:ae:9f:b1:a0:
                    b1:d5:6e:3b:6f:cf:e0:50:44:34:08:67:2d:16:e7:
                    2b:64:18:1d:b7:79:e3:28:37:04:31:15:9c:45:63:
                    69:0b:7e:17:4f:89:79:d2:c0:1f:d4:8e:23:d4:bf:
                    15:1f:3c:88:39:dc:a6:f2:4a:92:be:68:93:65:94:
                    19:48:9e:27:27:d5:fc:f1:32:06:91:ab:24:64:e2:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4D:B3:36:2E:86:5F:20:51:FC:AC:71:69:AD:13:72:F9:9F:E8:53
            X509v3 Authority Key Identifier:
                keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/VU2zNi6GXyBR_Kxxaa0Tcvmf6FM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.78.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:af:43:30:9a:00:80:1d:bf:0a:cd:2e:d7:64:75:0f:b7:c8:
         c4:20:31:6b:30:3f:a0:98:c7:fd:b6:25:2f:43:98:52:70:19:
         46:f1:ae:72:cc:e6:4a:b0:3a:10:4f:9d:f3:03:08:69:13:ac:
         bd:a6:f6:cb:f5:69:ea:a5:3c:d4:1b:2d:80:22:1e:e0:bd:31:
         59:c6:95:f6:ba:97:20:36:a8:6a:f5:aa:45:2f:22:bf:45:0c:
         e0:5b:e8:d2:51:8f:04:bf:e0:fd:f1:6c:1a:9c:fa:b9:c3:bd:
         e6:4a:8a:c3:46:f4:c9:ae:cd:bb:95:85:c4:5c:90:c5:d2:b5:
         9a:73:fd:75:88:60:35:37:09:18:87:bb:d6:5e:8c:1e:98:6d:
         42:35:be:f2:18:bf:78:32:ff:f4:48:12:6f:f1:90:30:f7:e9:
         2c:48:40:03:24:3b:ed:14:3e:d2:30:e3:71:04:84:c5:f6:5f:
         37:14:51:5c:ab:19:fc:60:d4:bb:9d:bf:d1:ea:fe:21:8d:3a:
         9c:2e:ce:c7:2e:17:04:35:62:1d:17:fc:2f:bb:12:dc:41:12:
         cf:13:1b:d9:f7:46:f5:93:12:d8:f7:f4:ae:24:93:0f:92:4a:
         8a:93:98:25:52:66:92:74:f0:7b:51:e3:91:b9:fc:ef:8f:c9:
         23:61:21:20
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZt3WTAPg4e1BZqqcXCGR7PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNmIzZTE3ZjliOWQwYzMxM2QwNTMwMjM0MjUyNzViMjc0
NWZjODMwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTRkYjMzNjJlODY1ZjIwNTFmY2FjNzE2OWFkMTM3MmY5OWZlODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvgr+hv/XnghBKk6UARR9QRm8qXl
kA2Sz75XdoMbsmDM/j1EHvAqI4fJ76XI2VHRrQRq407VMA0ZVMHnZAZPqM0VAav4
cXbO99HJPvsBd6ru105lpgAt5M6+4unpkZcLrMatf6qwxa7qGLnj6LMcMukIfHtc
VtHO8pH8mjg7Xl9cy4dtqQCJxZCVdCOtog0J7S6aCXgFx21AL2DYxKeIYJE1Di2Y
Ewchm14TL8oigq6fsaCx1W47b8/gUEQ0CGctFucrZBgdt3njKDcEMRWcRWNpC34X
T4l50sAf1I4j1L8VHzyIOdym8kqSvmiTZZQZSJ4nJ9X88TIGkaskZOKjuQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFFVNszYuhl8gUfyscWmtE3L5n+hTMB8GA1UdIwQY
MBaAFB5rPhf5udDDE9BTAjQlJ1snRfyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1zLUZfbTUwTU1UMEZNQ05DVW5XeWRGX0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81NmQyMDAtNDE2ZC00NDMwLTg1Yzgt
ODdkM2UxODFlNTk0LzEvVlUyek5pNkdYeUJSX0t4eGFhMFRjdm1mNkZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81NmQyMDAtNDE2ZC00NDMwLTg1YzgtODdkM2UxODFlNTk0
LzEvSG1zLUZfbTUwTU1UMEZNQ05DVW5XeWRGX0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoE4wDQYJ
KoZIhvcNAQELBQADggEBAIKvQzCaAIAdvwrNLtdkdQ+3yMQgMWswP6CYx/22JS9D
mFJwGUbxrnLM5kqwOhBPnfMDCGkTrL2m9sv1aeqlPNQbLYAiHuC9MVnGlfa6lyA2
qGr1qkUvIr9FDOBb6NJRjwS/4P3xbBqc+rnDveZKisNG9MmuzbuVhcRckMXStZpz
/XWIYDU3CRiHu9ZejB6YbUI1vvIYv3gy//RIEm/xkDD36SxIQAMkO+0UPtIw43EE
hMX2XzcUUVyrGfxg1Ludv9Hq/iGNOpwuzscuFwQ1Yh0X/C+7EtxBEs8TG9n3RvWT
Etj39K4kkw+SSoqTmCVSZpJ08HtR45G5/O+PySNhISA=
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:32 2026 by rpki-client