This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/vuod5WTfo-bMzWgcehLtUNsV8iQ.roa
File:                     vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (raw, json)
Hash identifier:          S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=
Subject key identifier:   BE:EA:1D:E5:64:DF:A3:E6:CC:CD:68:1C:7A:12:ED:50:DB:15:F2:24
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       019B76EB7EF0ACE7DAA32EE886813A1565DE
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/vuod5WTfo-bMzWgcehLtUNsV8iQ.roa
Signing time:             Thu 01 Jan 2026 00:18:23 +0000
ROA not before:           Thu 01 Jan 2026 00:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9121
IP address blocks:        82.222.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:7e:f0:ac:e7:da:a3:2e:e8:86:81:3a:15:65:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Jan  1 00:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=beea1de564dfa3e6cccd681c7a12ed50db15f224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:77:b2:ad:33:bd:4b:38:a9:fa:00:df:7f:e8:
                    fd:cb:6a:cb:67:05:86:f4:2f:78:de:7c:25:89:0a:
                    4b:82:2a:6b:20:a1:1c:fd:6b:fd:66:3c:05:f9:8f:
                    6a:e0:1c:51:6e:dc:d1:3c:49:a1:3b:49:a1:56:d2:
                    38:d3:8e:b5:55:f4:7c:9d:41:f7:d0:8a:09:b3:8a:
                    27:ca:33:3b:4b:11:9c:d3:a1:fe:ac:8a:3f:29:df:
                    56:ae:ff:e7:9c:91:0e:c9:ef:2b:53:9c:74:50:26:
                    73:5c:35:d3:a1:ed:50:35:9a:06:d2:0d:34:56:d1:
                    89:41:54:b5:79:a7:d1:51:3f:77:68:8a:57:1f:39:
                    a1:28:a9:a6:61:f2:94:21:1b:94:7a:42:59:88:2b:
                    ba:a1:89:c5:f4:3e:e5:24:ab:56:2c:c2:d1:dc:1b:
                    47:bd:4d:25:b5:d2:1c:0d:8c:a4:f2:6e:2b:86:9c:
                    6b:b9:3d:bf:46:ff:01:fe:f0:bb:1e:17:cb:ad:8b:
                    07:5f:5d:8f:c9:f5:d2:e0:fd:bc:4b:a3:71:1d:eb:
                    93:ab:7b:2c:ab:41:3c:8e:3d:88:7b:4c:3f:fc:be:
                    ee:a8:9c:b7:eb:10:82:4e:5a:55:2d:d4:be:d1:b4:
                    6d:fa:36:5b:b3:06:4e:9a:83:55:b5:58:d2:85:fc:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:1D:E5:64:DF:A3:E6:CC:CD:68:1C:7A:12:ED:50:DB:15:F2:24
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/vuod5WTfo-bMzWgcehLtUNsV8iQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.222.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:24:17:6f:35:9d:66:ca:7f:68:6e:8d:15:1b:aa:2d:a1:
         f6:a0:e8:aa:20:87:c9:9f:6e:8b:e2:dc:e3:7e:33:0f:e7:c6:
         6d:60:61:80:a7:3a:6e:a5:a6:86:9f:a2:90:2e:7e:b7:c9:25:
         49:2a:3c:1e:b3:63:77:e6:6b:99:d7:a6:f9:85:e4:3f:1f:e6:
         24:a7:be:0f:82:45:79:2d:f7:6f:a3:a8:ad:a3:f5:0e:a1:1e:
         a4:00:3a:d5:16:4d:6e:bd:9d:45:af:bb:be:a0:b6:6e:64:a3:
         91:ef:32:a6:97:3a:bc:4f:e0:5c:3a:17:94:30:c6:eb:86:3d:
         77:89:d0:1a:7c:3e:b9:30:7c:db:70:bd:17:14:58:eb:d8:c8:
         fe:ba:0a:cd:f3:4f:2d:c6:05:3c:d7:9a:4f:bf:ae:d8:c6:ba:
         e8:d9:93:5c:0a:10:a6:ee:44:c3:65:e2:57:b0:eb:85:84:85:
         12:73:ca:b7:3f:0b:43:f5:f1:19:47:a9:76:8a:25:6c:06:57:
         f4:21:ef:42:04:ba:10:a3:a6:86:af:85:dd:d2:71:bc:84:30:
         a9:15:8b:3e:4f:34:13:21:9b:38:a3:ad:81:29:52:71:e5:00:
         3c:9b:77:df:87:61:e8:8f:1e:86:a3:ed:b9:43:c4:7b:02:56:
         b9:73:af:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:17:01 2026 by rpki-client