This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa
File:                     VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa (raw, json)
Hash identifier:          i1/itHXENkjfqquOuYnqwae8exirw7XvZQTu+xWF/aw=
Subject key identifier:   54:DE:94:13:5C:94:02:82:0E:76:AE:C5:37:BF:FA:2D:68:34:C4:54
Certificate issuer:       /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial:       019B7C1315DA69581AB43B14116B4696B3A7
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa
Signing time:             Fri 02 Jan 2026 00:19:44 +0000
ROA not before:           Fri 02 Jan 2026 00:19:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209848
IP address blocks:        213.190.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:15:da:69:58:1a:b4:3b:14:11:6b:46:96:b3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
        Validity
            Not Before: Jan  2 00:19:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54de94135c9402820e76aec537bffa2d6834c454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:53:e8:77:78:99:53:95:eb:b8:da:a1:82:
                    26:1c:c0:8b:8a:04:42:45:4d:f6:2c:93:7f:b1:64:
                    b6:e6:f4:a4:7d:61:9e:72:4a:9b:e4:d7:08:bf:95:
                    46:3a:65:49:66:e3:8f:af:00:3e:4c:6f:cd:d0:3b:
                    0c:15:ea:03:74:d7:99:a2:b4:57:d3:bd:ad:30:93:
                    9a:93:b3:94:1d:4d:90:04:b2:15:18:ad:2b:bc:9c:
                    1e:cb:44:a9:dc:a1:31:ad:1b:da:00:85:6c:7c:12:
                    f6:a0:8a:ab:bb:d0:5d:c2:4f:55:2f:f8:73:ca:6d:
                    7a:dd:5c:9c:ec:12:99:eb:09:db:69:cf:8e:d8:80:
                    6d:a1:fe:43:c1:29:0d:82:ad:b1:51:81:38:f8:ec:
                    26:cb:b9:cd:7e:d0:d4:4d:bc:3b:f6:66:84:60:6a:
                    02:30:89:01:fb:4a:5d:db:69:20:dd:f8:3d:13:d2:
                    88:fc:04:08:45:0b:eb:0e:a7:23:ff:57:2f:80:4c:
                    08:32:5f:44:65:6c:55:29:17:40:e7:d9:b7:e2:30:
                    37:1f:b3:fe:14:fc:74:77:b5:36:b6:d7:47:27:52:
                    01:7c:ba:34:68:5c:1d:ec:a6:5e:27:1a:c4:0e:56:
                    46:59:a5:17:48:cd:7f:9a:47:ad:6d:f0:d2:cb:d7:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DE:94:13:5C:94:02:82:0E:76:AE:C5:37:BF:FA:2D:68:34:C4:54
            X509v3 Authority Key Identifier:
                keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/VN6UE1yUAoIOdq7FN7_6LWg0xFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.190.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:4c:07:0a:15:f0:6b:00:e3:75:1b:09:ee:81:56:50:25:
         45:2f:f8:2b:96:44:94:8d:ac:37:30:2a:cd:cb:f5:55:93:16:
         26:cb:24:8e:09:87:db:89:ac:c0:78:aa:76:a4:8d:50:7d:ae:
         c9:42:ef:b0:7e:76:19:43:d0:a5:bf:ff:91:e2:f6:2f:57:e7:
         cd:10:97:d3:43:46:e7:46:cd:b0:6c:70:a3:90:1b:43:8f:c9:
         6f:4b:10:4d:65:23:39:47:15:db:76:f4:86:65:c8:1a:1b:0b:
         9a:88:ec:26:4f:03:58:8c:2e:38:bd:f6:ae:a9:aa:58:6f:30:
         24:b5:75:ce:f0:db:38:fc:c6:3f:9d:42:f9:9a:16:d7:e2:b9:
         8a:76:79:24:dc:95:13:36:16:9c:23:86:3b:b9:84:38:82:36:
         a8:7b:aa:83:01:94:86:ee:d1:ca:f7:fd:78:c4:5b:57:77:01:
         9e:41:9a:cf:29:09:30:b6:60:14:dd:bd:2f:42:f3:f0:44:0b:
         2b:6b:ce:90:d4:95:d6:27:e4:ee:7a:34:c8:83:b4:4c:55:c6:
         e9:f8:d9:48:5d:82:72:7e:91:dd:f6:0d:60:2d:c4:68:57:d2:
         89:f7:63:4d:1a:37:ac:7f:44:eb:9f:be:1c:7e:b4:48:67:71:
         c8:2a:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:42:24 2026 by rpki-client