This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/V-9JPYN-A-WMOgSKb1UfTFbhlII.roa
File:                     V-9JPYN-A-WMOgSKb1UfTFbhlII.roa (raw, json)
Hash identifier:          D4qboXeBZRmSsdaZnMV1zPHaYNz+ftpVychfvUBIDgc=
Subject key identifier:   57:EF:49:3D:83:7E:03:E5:8C:3A:04:8A:6F:55:1F:4C:56:E1:94:82
Certificate issuer:       /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial:       019B7C803BC2CFA3F6415F09180BCBB9671A
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/V-9JPYN-A-WMOgSKb1UfTFbhlII.roa
Signing time:             Fri 02 Jan 2026 02:18:57 +0000
ROA not before:           Fri 02 Jan 2026 02:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209462
IP address blocks:        185.196.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:3b:c2:cf:a3:f6:41:5f:09:18:0b:cb:b9:67:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
        Validity
            Not Before: Jan  2 02:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57ef493d837e03e58c3a048a6f551f4c56e19482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:d4:ee:04:77:b6:ad:83:a3:d9:27:45:80:
                    6a:cc:5b:14:e3:7a:09:83:f9:a1:53:44:1b:ce:f9:
                    b5:ab:e9:ac:ec:fd:15:11:27:a5:72:ec:3d:e3:54:
                    d8:6c:69:aa:40:da:d7:a4:61:7b:b7:28:5a:24:6c:
                    0d:7e:e9:a6:45:a6:13:f3:a6:b7:6f:3b:71:9a:ff:
                    96:a2:3d:0f:d7:35:84:8c:0e:49:d6:cd:ee:c0:41:
                    50:49:55:4a:df:d5:60:4f:ab:33:da:9d:fd:d0:0f:
                    48:34:f5:77:d1:20:3e:6a:b9:43:7f:07:30:3a:71:
                    f7:fa:00:50:1e:61:51:c6:09:57:5f:c1:32:e7:2b:
                    60:fc:22:03:27:62:13:ce:56:2d:87:89:b3:5e:a7:
                    1c:ec:c6:c1:21:26:2e:0b:2e:a2:a0:79:9f:bb:a5:
                    fa:aa:90:69:14:51:7c:97:90:cc:c4:df:74:47:3e:
                    b6:28:35:51:3d:39:37:89:77:28:12:2f:f5:b5:39:
                    94:10:8c:1a:8b:a1:ba:ff:5f:11:f9:41:03:71:49:
                    65:90:3b:fe:9a:08:cc:e8:cb:94:7b:2f:61:a0:9a:
                    95:70:bd:3d:d8:a2:24:e7:9e:47:55:52:e8:4b:28:
                    3e:50:23:ea:9e:cd:3d:b2:34:fe:98:49:ae:2a:58:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EF:49:3D:83:7E:03:E5:8C:3A:04:8A:6F:55:1F:4C:56:E1:94:82
            X509v3 Authority Key Identifier:
                keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/V-9JPYN-A-WMOgSKb1UfTFbhlII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:80:2e:16:36:16:52:b7:9f:3a:1a:0d:73:03:8a:22:4f:93:
         ff:ce:f2:fc:4c:70:3c:f1:00:39:03:ac:98:18:6e:78:5c:ee:
         92:29:e6:e1:14:46:46:54:72:53:c8:e3:57:dc:bf:41:db:94:
         b9:11:14:02:4f:34:fa:69:4a:25:92:f1:a7:5c:b9:25:d3:85:
         cf:df:2e:1e:f8:02:c3:b8:97:52:30:be:93:b2:e9:e9:1f:f7:
         8f:01:a3:a5:bb:d3:ee:60:57:8a:a8:18:9b:fd:a4:bd:75:48:
         4e:f4:28:7a:0e:63:5d:89:4f:c6:9b:7e:c9:8d:db:67:9b:f2:
         56:68:5c:a4:ee:00:54:2c:11:26:6b:a9:3c:98:f8:39:cc:0c:
         4d:52:42:4d:6b:b0:b6:48:a1:ba:43:85:79:67:3f:ae:f3:8b:
         62:8b:2b:f2:91:60:90:08:d1:3e:05:54:d0:44:79:ac:b9:50:
         73:c9:b6:69:90:1d:2f:6b:be:be:8a:43:43:0a:40:ad:02:37:
         71:af:b7:b0:08:d2:57:5c:89:b4:b5:b5:d5:a8:e8:9a:16:a0:
         31:34:15:15:d1:3f:02:8f:41:87:ab:0a:33:d6:e7:6e:9c:c8:
         ee:74:ed:cd:34:e2:21:6e:0e:a3:cf:98:28:44:db:10:dd:b4:
         8d:22:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:06:09 2026 by rpki-client