This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/VizEqnthMjQ52TLR8h7x9BYDAIM.roa
File:                     VizEqnthMjQ52TLR8h7x9BYDAIM.roa (raw, json)
Hash identifier:          41b89AhKzVApaqcIg1s1Z2VRJk8VnvLCBhm/gL3LlSM=
Subject key identifier:   56:2C:C4:AA:7B:61:32:34:39:D9:32:D1:F2:1E:F1:F4:16:03:00:83
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       019B77C67ADE9BE0490768607762FEF5377A
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/VizEqnthMjQ52TLR8h7x9BYDAIM.roa
Signing time:             Thu 01 Jan 2026 04:17:34 +0000
ROA not before:           Thu 01 Jan 2026 04:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51910
IP address blocks:        46.17.72.0/21 maxlen: 24
                          46.17.77.0/24 maxlen: 24
                          46.17.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:7a:de:9b:e0:49:07:68:60:77:62:fe:f5:37:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Jan  1 04:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=562cc4aa7b61323439d932d1f21ef1f416030083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:88:87:ce:db:32:03:80:e0:ad:65:e6:3a:
                    8f:c2:66:84:2a:6c:a1:44:9b:54:7b:5f:39:f0:8d:
                    93:36:fd:06:5a:41:67:4b:c9:01:38:a0:9f:e8:d0:
                    d3:59:91:a7:26:4a:10:ee:17:c2:c4:ea:36:8a:de:
                    50:00:d6:48:da:c4:13:84:a4:d9:28:b7:af:85:bd:
                    28:36:8d:c7:37:93:38:ea:99:28:df:b1:0d:c8:87:
                    57:68:47:16:c6:e5:06:b4:df:c3:be:77:4d:eb:19:
                    4f:2f:1a:e0:f4:8c:64:74:2c:07:90:d0:08:5f:3d:
                    eb:69:9d:c1:cb:14:2c:48:31:b5:ed:c5:d3:b2:a2:
                    0c:70:5f:92:be:ab:57:a3:98:74:09:54:50:69:86:
                    be:a8:2a:b3:6d:47:98:ac:e3:b7:d8:34:d9:f0:3e:
                    bf:16:45:e9:de:18:5c:7e:70:7a:6f:c4:5d:eb:7b:
                    e1:b1:73:f4:0b:b2:cd:40:41:02:0d:76:19:08:98:
                    bf:c1:25:13:d2:34:b5:6f:9b:75:ac:54:51:e3:f3:
                    83:fa:16:9d:38:12:5f:57:3e:66:e3:b4:73:86:1c:
                    6f:95:9b:76:87:db:64:41:60:48:ee:d3:fd:1d:b8:
                    3f:68:9b:f0:ba:7c:6e:43:a6:7c:93:37:2d:72:fd:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2C:C4:AA:7B:61:32:34:39:D9:32:D1:F2:1E:F1:F4:16:03:00:83
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/VizEqnthMjQ52TLR8h7x9BYDAIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.17.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:2a:be:27:64:fd:cc:01:d2:71:db:8c:06:48:b4:ee:df:c6:
         c5:c0:40:d8:82:24:c7:18:8c:f1:60:8a:05:f7:8a:9f:44:67:
         57:1d:d9:d9:f7:d8:04:fe:9b:8d:0c:92:ac:b3:08:57:32:fd:
         d7:bf:9e:4e:e2:e7:e7:7e:ac:c2:16:15:39:b4:3b:13:5f:17:
         5e:17:34:4c:e6:a6:31:60:6d:d8:3f:b0:2e:cb:6a:0f:52:87:
         8e:eb:f1:55:74:64:c5:7b:2e:6e:4e:9a:5e:31:c4:5a:df:bc:
         5f:40:f5:db:41:94:58:07:e7:e0:a3:9b:0f:be:d9:d6:1c:dd:
         3a:51:4a:27:ff:8d:37:19:57:93:4b:13:c8:7e:0c:01:56:49:
         60:2f:a5:53:51:fa:2f:a3:7b:3e:96:20:2c:76:11:fe:7a:01:
         53:7d:2c:e1:d2:1c:71:06:bd:59:54:52:bf:cc:ea:74:59:4f:
         7c:6f:7a:7b:b0:f9:29:67:0c:6d:1c:70:18:3c:1a:70:46:f5:
         a2:ca:b3:50:a8:8a:24:8f:be:5c:1d:34:c3:5e:e6:5e:66:df:
         58:e8:01:1c:a8:f0:0c:07:c8:ec:3d:71:1a:6a:92:64:ac:00:
         5b:78:98:9c:e1:c9:28:82:95:75:20:43:a6:bb:ea:22:69:13:
         9f:0f:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 01:35:58 2026 by rpki-client