This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7QYciA91Y3ZpXorb3ky2REf2-vk.roa
File:                     7QYciA91Y3ZpXorb3ky2REf2-vk.roa (raw, json)
Hash identifier:          EdgU29xIB8fHmqCyJuC4sbz1Q7bSDQm/cU+igR6M8yk=
Subject key identifier:   ED:06:1C:88:0F:75:63:76:69:5E:8A:DB:DE:4C:B6:44:47:F6:FA:F9
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5D228B8B2A16058CEC0FB308476517
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7QYciA91Y3ZpXorb3ky2REf2-vk.roa
Signing time:             Fri 02 Jan 2026 06:20:14 +0000
ROA not before:           Fri 02 Jan 2026 06:20:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210013
IP address blocks:        2a0e:97c0:6c0::/44 maxlen: 48
                          2a0e:97c0:6c0::/48 maxlen: 48
                          2a0e:97c0:6c1::/48 maxlen: 48
                          2a0e:97c0:6c2::/48 maxlen: 48
                          2a0e:97c0:6c3::/48 maxlen: 48
                          2a0e:97c0:6c4::/48 maxlen: 48
                          2a0e:97c0:6c5::/48 maxlen: 48
                          2a0e:97c0:6c6::/48 maxlen: 48
                          2a0e:97c0:6c7::/48 maxlen: 48
                          2a0e:97c0:6c8::/48 maxlen: 48
                          2a0e:97c0:6c9::/48 maxlen: 48
                          2a0e:97c0:6ca::/48 maxlen: 48
                          2a0e:97c0:6cb::/48 maxlen: 48
                          2a0e:97c0:6cc::/48 maxlen: 48
                          2a0e:97c0:6cd::/48 maxlen: 48
                          2a0e:97c0:6ce::/48 maxlen: 48
                          2a0e:97c0:6cf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:22:8b:8b:2a:16:05:8c:ec:0f:b3:08:47:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:20:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed061c880f756376695e8adbde4cb64447f6faf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:aa:6c:8e:65:b9:b8:81:37:a2:e6:80:90:
                    25:9d:b5:96:81:b6:c8:ca:d7:64:b7:fd:8c:6d:15:
                    f2:62:50:4a:bd:84:53:06:3e:0f:2a:ce:da:39:02:
                    a8:55:bd:7e:63:18:c1:bf:68:ba:12:ad:fc:4a:71:
                    c4:de:e4:e0:01:2d:7b:39:74:47:b6:a5:31:fd:07:
                    09:4f:73:1e:8b:34:0b:f7:07:7e:10:23:63:f8:c0:
                    a1:f0:96:a2:3e:64:ba:c9:d3:8a:5f:5a:14:13:31:
                    6c:3d:32:fe:45:24:20:03:1c:72:99:40:7a:92:40:
                    ac:e9:ee:88:d4:1b:9a:22:e5:d9:0c:a7:bb:4c:99:
                    96:47:cf:ec:09:82:04:4a:c4:b2:c5:2a:77:d1:d7:
                    37:0b:f3:f1:9b:c3:ed:0a:72:a1:0a:05:db:79:48:
                    8e:6d:22:cd:a0:a1:3a:d5:7e:ce:80:f6:c6:b4:82:
                    40:e1:8b:e5:2c:1a:2d:51:18:7c:b0:e5:90:86:09:
                    f9:96:05:a8:43:72:6b:38:c4:21:1a:da:bd:2a:c9:
                    6f:26:ea:f6:3d:fd:d2:3e:29:a7:5a:6d:f2:62:b6:
                    7e:42:9c:16:15:ac:2a:da:b5:db:e8:ad:25:a7:ef:
                    38:0c:c3:1a:39:e5:de:07:d9:1c:97:2a:e7:aa:ff:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:06:1C:88:0F:75:63:76:69:5E:8A:DB:DE:4C:B6:44:47:F6:FA:F9
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7QYciA91Y3ZpXorb3ky2REf2-vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:6c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a9:ee:72:7d:b2:88:e3:99:55:90:fe:29:0b:cb:db:f6:5a:5d:
         c0:bc:1b:92:e0:09:87:48:65:ea:9c:6c:e2:34:ed:3d:45:2b:
         45:d2:33:23:45:2e:da:df:c7:87:e1:82:14:60:c6:49:0a:ed:
         84:0a:1d:59:8c:71:22:cf:f9:ec:96:e4:19:52:30:21:f7:9f:
         48:b5:37:53:64:08:d5:c0:c4:87:78:d8:00:b7:48:40:11:24:
         37:ea:26:ee:97:8b:ae:4e:92:5d:7a:a0:98:c7:47:cf:4d:94:
         3d:f8:d8:7c:72:06:1d:39:50:e0:09:1e:75:b3:37:02:3f:9e:
         ff:e4:09:7e:66:5a:9d:23:ea:ce:c1:08:d6:16:7f:24:e4:bb:
         c4:89:ba:97:25:fa:2a:57:64:b6:48:30:77:04:d1:ef:5b:76:
         b1:0d:28:11:0a:68:23:1d:3b:4c:8f:a6:4b:02:b6:58:3b:c2:
         12:a4:09:37:ff:48:6c:f2:d1:9f:9c:2e:2c:9f:94:cc:6a:6d:
         ee:79:c1:3e:a4:4a:7f:bf:48:81:61:68:9e:17:91:16:70:dd:
         dc:5f:79:93:70:d4:3e:64:c5:e1:07:4a:a3:75:a6:fd:83:01:
         4c:37:0c:6c:e0:4c:d5:72:62:ae:71:8e:39:68:39:c9:7b:13:
         01:00:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:13:26 2026 by rpki-client