This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/VxCQxc08P0DZgAyO7KWudQ0O7Z8.roa
File:                     VxCQxc08P0DZgAyO7KWudQ0O7Z8.roa (raw, json)
Hash identifier:          jH4w5LTxZTZZ58UjnOoWvUcYyFEbQg4ioEzvd4CJ7H4=
Subject key identifier:   57:10:90:C5:CD:3C:3F:40:D9:80:0C:8E:EC:A5:AE:75:0D:0E:ED:9F
Certificate issuer:       /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial:       019B7910166D1F05BEB5D087C2517B566612
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/VxCQxc08P0DZgAyO7KWudQ0O7Z8.roa
Signing time:             Thu 01 Jan 2026 10:17:36 +0000
ROA not before:           Thu 01 Jan 2026 10:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3268
IP address blocks:        82.116.192.0/19 maxlen: 19
                          82.116.202.0/24 maxlen: 24
                          82.116.208.0/24 maxlen: 24
                          2a0d:8700::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:16:6d:1f:05:be:b5:d0:87:c2:51:7b:56:66:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
        Validity
            Not Before: Jan  1 10:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=571090c5cd3c3f40d9800c8eeca5ae750d0eed9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:93:ab:ae:26:0a:d3:9c:51:17:17:1d:33:
                    b1:80:b8:dc:83:08:d2:dd:9f:6b:67:89:b9:db:a4:
                    93:32:af:06:06:3e:f8:e4:79:a2:63:6e:32:85:73:
                    0e:ae:4e:1e:46:dd:cb:00:54:e4:50:3f:a6:46:45:
                    84:9a:6b:59:44:00:97:b9:64:99:bc:0b:62:21:2f:
                    8e:9b:8c:f0:b4:fb:c9:7f:00:16:2c:51:fc:8c:f3:
                    4a:d1:78:a7:33:52:b9:be:25:70:37:00:c1:db:35:
                    c1:bb:bd:cb:fb:5c:bb:d2:3e:a6:86:22:17:63:e7:
                    67:57:e8:45:19:59:fd:50:53:a6:64:12:fa:72:30:
                    42:76:8a:f0:2f:a3:ef:9a:f2:6c:4f:88:8a:ab:a9:
                    06:df:a3:f5:0b:87:84:83:e4:ea:fa:6c:89:37:93:
                    d5:5c:6e:40:38:27:f3:7e:66:7e:41:5e:3d:d9:b5:
                    bc:a3:f5:f5:52:d6:7a:ad:d3:af:46:c5:cc:d0:fd:
                    97:1e:67:b7:74:52:61:c7:34:6b:66:a2:e9:2b:2b:
                    21:18:b4:81:bb:bb:32:0d:8b:b8:fa:57:09:26:02:
                    33:fb:6d:f7:54:65:b1:fc:97:e4:97:71:30:c2:b6:
                    46:d3:a1:1b:3a:0a:b6:e5:b5:7a:4d:d9:96:42:6d:
                    45:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:10:90:C5:CD:3C:3F:40:D9:80:0C:8E:EC:A5:AE:75:0D:0E:ED:9F
            X509v3 Authority Key Identifier:
                keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/VxCQxc08P0DZgAyO7KWudQ0O7Z8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.116.192.0/19
                IPv6:
                  2a0d:8700::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:ea:58:d7:33:28:9e:f1:ef:e3:ad:22:47:a0:f0:4c:79:a7:
         ca:39:73:f2:20:82:8b:88:b4:fb:c1:6e:96:1a:53:73:54:0d:
         a9:6b:b1:88:71:58:51:d5:b4:28:03:e7:3e:63:25:4d:f6:77:
         51:d4:17:af:5f:5c:9b:23:88:6c:a7:ee:e2:9a:4c:cf:0f:3f:
         eb:69:b2:40:75:a2:8f:aa:89:96:d5:f0:d5:74:f2:ad:33:df:
         9f:ef:bf:68:68:a0:b3:7b:b0:dd:b2:1a:d5:cc:8a:f6:c4:83:
         e1:23:05:31:be:fe:2c:c3:dd:7b:2c:1c:2f:ac:6e:8f:3f:0b:
         92:5d:39:5d:e6:43:7d:1c:f4:64:74:87:18:89:04:37:b5:af:
         85:c4:be:8c:cd:2a:48:59:ee:c4:0a:9e:f6:ab:0e:82:7d:da:
         bc:87:23:93:94:90:84:ae:4c:c3:47:41:42:98:a7:00:38:e8:
         be:30:a5:2a:d4:66:b2:3c:3c:82:1d:ea:e1:68:3a:fe:93:a3:
         87:17:21:11:96:bf:b1:9b:13:b4:8d:84:f2:eb:3c:5f:38:34:
         4b:6c:a3:3e:4a:00:18:68:a2:b9:ea:de:a7:46:01:3a:20:ba:
         90:8a:b9:6a:93:ff:4f:c8:ac:00:f9:ff:4a:1d:37:db:ad:c5:
         39:b0:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:21 2026 by rpki-client