This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/vIC9OJp6vwhWqdc81j14JoQUKx8.roa
File:                     vIC9OJp6vwhWqdc81j14JoQUKx8.roa (raw, json)
Hash identifier:          jB6UoCFQZz2b8pZgCJew4WFZOuGss5ssZCVbFkKzZ1Q=
Subject key identifier:   BC:80:BD:38:9A:7A:BF:08:56:A9:D7:3C:D6:3D:78:26:84:14:2B:1F
Certificate issuer:       /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial:       019B7C803B4C030960E8501FB89B945DD129
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/vIC9OJp6vwhWqdc81j14JoQUKx8.roa
Signing time:             Fri 02 Jan 2026 02:18:57 +0000
ROA not before:           Fri 02 Jan 2026 02:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209345
IP address blocks:        85.208.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:3b:4c:03:09:60:e8:50:1f:b8:9b:94:5d:d1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
        Validity
            Not Before: Jan  2 02:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc80bd389a7abf0856a9d73cd63d782684142b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:bb:b6:61:68:ae:90:36:bf:f8:17:8d:c1:
                    c4:4b:c9:73:a8:04:6b:84:b6:58:8f:bf:aa:02:47:
                    9e:e9:66:56:a7:a9:b7:07:31:a6:87:59:3a:9f:f0:
                    77:0d:05:26:d8:dc:b9:fd:39:49:83:cc:86:5a:62:
                    0f:d4:76:30:bc:d7:90:c6:ca:b2:04:35:08:f9:ce:
                    5a:19:a7:97:dc:13:63:08:b7:1f:fb:fa:c7:53:6f:
                    52:dc:5d:f5:75:7d:a6:84:31:0c:c6:48:66:f3:f8:
                    be:9d:71:90:4a:95:40:ac:de:d2:a4:4f:5a:53:c4:
                    6f:0e:54:76:53:2a:42:0a:3e:05:a0:63:2c:6c:ac:
                    56:06:2b:98:5e:2d:06:b8:12:33:6c:bc:d8:17:49:
                    35:b9:ab:5c:6e:97:6f:d8:d4:d9:48:75:7c:c3:42:
                    c1:12:b9:7c:d3:e6:5e:d1:3f:b8:f9:77:6e:b4:62:
                    1d:c0:5c:0a:a7:d6:e3:9b:89:e1:15:7a:4f:63:8f:
                    3f:03:36:3d:b7:5e:44:0e:62:cd:6f:fe:04:8f:2f:
                    df:b2:44:27:d0:80:74:4a:86:39:53:83:4d:a4:6f:
                    03:b1:9c:c2:fa:80:94:42:8f:83:b0:c2:3b:4a:40:
                    9b:62:52:74:d6:83:f0:bb:36:ad:ea:b8:7b:12:b3:
                    65:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:80:BD:38:9A:7A:BF:08:56:A9:D7:3C:D6:3D:78:26:84:14:2B:1F
            X509v3 Authority Key Identifier:
                keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/vIC9OJp6vwhWqdc81j14JoQUKx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:88:f0:12:84:43:97:61:8d:2d:db:d4:37:3b:6f:d6:51:28:
         df:54:fa:c2:e1:f4:4e:fa:4f:b5:2a:60:c6:c2:bc:a1:45:9d:
         92:a1:9b:a2:94:8c:d2:c2:14:d4:a9:a1:e8:fa:61:ce:d0:a4:
         c9:f9:23:7d:cf:9b:47:71:41:37:ac:02:cc:f7:bd:fb:e8:f6:
         95:96:0d:4c:0b:51:9d:08:a9:dd:9a:be:34:60:86:c9:e7:b3:
         5d:30:49:58:98:2a:a9:18:81:9a:1c:6e:33:69:6b:92:60:c7:
         48:55:a2:fd:4f:e0:f3:53:42:02:cb:22:aa:26:c2:00:e1:da:
         4b:ae:bd:5d:ed:72:10:a1:12:d6:30:0c:d9:a5:8b:53:19:a2:
         1d:1d:f8:a2:57:06:fb:ad:c3:c1:c7:b9:ae:06:c4:94:a8:da:
         0a:71:1d:9d:b5:e6:0c:89:b2:22:a0:e9:0f:fa:e0:4c:50:dd:
         44:b2:a5:59:4b:e9:56:87:ee:8c:19:d7:ad:75:33:76:57:b1:
         98:5c:fd:20:10:6b:f1:13:d4:e3:4a:e3:b4:16:08:33:95:c5:
         e1:77:40:d3:02:8d:6b:c9:2a:56:f0:bf:c2:99:2b:e7:e8:45:
         49:25:d5:86:8b:66:7a:80:b5:47:d2:7b:1c:85:0d:a3:fb:1e:
         62:94:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:02:51 2026 by rpki-client