This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/VIPwVpOCOBxM-6VZdHVb4qW1KjM.roa
File:                     VIPwVpOCOBxM-6VZdHVb4qW1KjM.roa (raw, json)
Hash identifier:          a3fvMBDRuRl6Fi34mUUPnVeDXMuKhZqOr31AZb3er1w=
Subject key identifier:   54:83:F0:56:93:82:38:1C:4C:FB:A5:59:74:75:5B:E2:A5:B5:2A:33
Certificate issuer:       /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial:       019B7F13663633195AD4BD7BB7EBEA1A6B64
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/VIPwVpOCOBxM-6VZdHVb4qW1KjM.roa
Signing time:             Fri 02 Jan 2026 14:18:56 +0000
ROA not before:           Fri 02 Jan 2026 14:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210784
IP address blocks:        119.235.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:66:36:33:19:5a:d4:bd:7b:b7:eb:ea:1a:6b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
        Validity
            Not Before: Jan  2 14:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5483f0569382381c4cfba55974755be2a5b52a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:54:84:5f:97:4e:66:13:71:cd:16:bb:a7:
                    42:ed:ff:13:77:f2:9f:4b:45:92:e4:ac:68:fa:95:
                    ea:94:2e:5f:3a:9f:da:4e:8b:dc:25:b3:6a:67:ef:
                    6a:42:71:90:fd:15:b1:d2:1e:4a:49:5f:e3:f8:f7:
                    94:d2:c5:86:9a:a9:2f:af:01:e4:69:29:27:dc:a0:
                    f8:9d:0f:e0:dd:24:11:60:57:fa:27:87:c5:ed:a9:
                    6e:6d:fe:88:f3:54:4c:5e:31:29:70:a7:44:e1:15:
                    80:90:82:71:b6:bb:71:9d:96:f2:9d:01:c1:dc:bc:
                    b9:97:81:f8:10:af:fb:a4:7d:91:27:8b:1a:ea:96:
                    7f:81:a6:0e:17:82:3e:75:dd:4e:e1:7d:8a:6f:7f:
                    12:86:e4:9e:01:78:84:84:f2:b1:df:ce:aa:ef:bc:
                    84:a8:20:f8:27:b8:8a:97:48:84:ab:4d:86:f2:94:
                    3f:30:8c:5d:2a:52:29:8e:d6:8b:a6:b3:fc:36:79:
                    03:b5:cd:b4:18:5a:76:68:7d:36:2c:ed:90:d1:c7:
                    36:55:9f:5c:f6:24:3c:a4:d2:c2:d0:7c:48:98:06:
                    c0:81:a2:8e:54:c3:e3:7a:44:f0:f3:13:1d:c7:0d:
                    e7:31:67:e4:b0:fe:9f:30:0d:31:a7:00:43:60:ff:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:83:F0:56:93:82:38:1C:4C:FB:A5:59:74:75:5B:E2:A5:B5:2A:33
            X509v3 Authority Key Identifier:
                keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/VIPwVpOCOBxM-6VZdHVb4qW1KjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:4e:4d:da:32:fa:1f:01:f5:bd:24:c1:90:8b:18:e6:f6:70:
         aa:34:a1:d7:d3:7d:bd:e1:1d:75:5f:11:51:65:ed:cf:72:3f:
         05:3a:fc:0f:ba:cc:2b:1a:b0:78:c0:b1:1f:d8:80:59:23:80:
         45:09:cd:d4:b0:58:74:8c:56:02:71:1b:ee:4b:de:28:69:91:
         1b:35:16:61:95:7b:ce:e9:88:e2:16:d2:c7:0c:0f:a3:0c:7d:
         43:10:81:70:a8:8d:11:b5:37:cd:57:e6:15:e9:4a:59:9a:eb:
         1b:1e:6d:16:58:e0:e1:c0:42:fc:3a:b9:e4:55:d7:24:82:00:
         8f:93:39:5b:2f:8c:a3:4b:59:45:21:a6:35:1c:2d:64:04:58:
         44:11:8f:a1:ae:e8:84:1f:3a:51:09:49:ad:4f:40:1d:5b:d6:
         af:52:d7:8c:12:b4:33:76:36:39:e5:a6:2a:be:e9:f8:46:e3:
         9f:db:ea:3e:22:64:a6:41:bb:75:68:39:2d:1d:92:ab:0d:89:
         db:3b:41:09:2b:44:4e:f1:83:7b:07:d0:93:19:ef:0a:0c:84:
         c8:00:4d:5f:6a:88:bd:ad:07:ee:b9:bf:89:7d:b0:8f:d6:a7:
         8c:d5:f8:c6:17:eb:6d:ba:fe:53:2a:12:0e:3e:bd:6f:9b:6b:
         9b:89:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:55 2026 by rpki-client