This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SI_VNBeqAKzuXT2RwuUFbAe8GTI.roa
File:                     SI_VNBeqAKzuXT2RwuUFbAe8GTI.roa (raw, json)
Hash identifier:          BEtON6yxd8VJbO0j3aO1JOgBEX6FrHexBD4KhNFXKwc=
Subject key identifier:   48:8F:D5:34:17:AA:00:AC:EE:5D:3D:91:C2:E5:05:6C:07:BC:19:32
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797E03A4EA5086887AF0F267D9A102DB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SI_VNBeqAKzuXT2RwuUFbAe8GTI.roa
Signing time:             Thu 01 Jan 2026 12:17:40 +0000
ROA not before:           Thu 01 Jan 2026 12:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213711
IP address blocks:        103.110.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 23:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:03:a4:ea:50:86:88:7a:f0:f2:67:d9:a1:02:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=488fd53417aa00acee5d3d91c2e5056c07bc1932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:fe:af:db:f2:81:d9:3f:3b:cd:5f:06:bc:
                    87:fc:95:c2:77:ce:1f:1a:7c:07:b6:e6:b7:33:21:
                    20:b4:21:99:4d:3e:6c:db:02:17:37:ee:86:4a:ff:
                    0e:6c:42:3f:37:38:4c:3c:e5:f0:9a:c6:64:6d:4d:
                    49:77:b1:6a:83:2e:37:2b:57:80:1e:f5:86:7d:7f:
                    e2:0d:6a:c1:99:de:3a:bf:2e:dc:eb:43:f7:31:4f:
                    c1:7f:dc:2f:97:ec:f6:cf:e2:ec:b8:ad:2e:5f:27:
                    39:3d:d7:03:d5:36:3f:45:69:a9:43:6b:fb:a6:e7:
                    f7:82:8c:b9:35:55:59:7b:f9:68:7f:76:da:75:50:
                    2a:6e:6f:c9:9f:36:b0:86:ba:59:e8:15:80:c0:c6:
                    63:8f:3b:b1:ed:21:11:c0:fe:cc:78:b9:44:f3:c5:
                    37:6a:3f:e1:b3:d6:b1:80:bb:2d:0c:85:7a:14:c6:
                    5c:54:ff:7f:6a:1e:3b:6c:4f:2d:7b:ff:3a:47:66:
                    0a:d5:d1:5d:be:ff:27:35:c7:2a:02:ff:23:cd:15:
                    d9:7e:2c:d8:ee:4d:4c:0c:da:0d:f5:a7:e2:76:01:
                    bd:04:28:f9:c5:aa:6b:ac:25:46:c3:c0:01:8e:52:
                    e6:c8:44:d7:86:f0:2c:c7:e2:5e:2f:fd:4d:46:45:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8F:D5:34:17:AA:00:AC:EE:5D:3D:91:C2:E5:05:6C:07:BC:19:32
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SI_VNBeqAKzuXT2RwuUFbAe8GTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:67:c0:1c:78:2e:19:aa:90:99:ee:25:0c:43:aa:e5:6a:e6:
         15:95:00:f0:5a:e1:e8:b7:39:2d:33:ae:e6:55:ca:15:32:7b:
         4a:1b:93:a6:b8:f6:35:4f:64:bd:0e:21:24:61:e4:15:a2:8a:
         c1:53:5a:ce:8d:4f:ad:ed:8a:62:5d:70:95:3a:5e:0f:3d:7d:
         a2:0f:c6:c3:dd:4b:d4:39:8e:1d:bf:ef:14:74:9b:4c:9d:4d:
         a0:ca:9b:12:bd:28:2c:f4:ef:5b:c5:c9:ef:e5:38:06:a3:84:
         f5:19:d6:df:ff:ab:ee:f1:4f:d1:0f:f0:27:18:0d:d3:2f:dd:
         41:67:c1:54:c9:56:5c:64:96:62:73:05:1c:d9:aa:7a:a2:12:
         b0:b6:66:20:69:bd:e3:0c:84:ea:e8:7c:b3:3a:ff:dd:bc:92:
         51:3f:58:4b:a2:1d:5a:d2:25:ef:17:df:a4:d9:01:d7:b5:43:
         47:f6:76:49:c0:70:f7:6b:c0:17:b0:57:69:23:72:79:0b:a0:
         9d:5a:4f:f9:c2:e5:97:c1:f4:8f:a5:56:93:ad:14:8c:26:aa:
         35:65:16:93:b3:4e:4d:1d:b0:b7:4e:1d:73:81:56:90:f2:22:
         0b:1c:bc:ad:d8:1a:be:ad:a4:54:30:40:18:51:45:27:f4:c4:
         5b:23:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:31:01 2026 by rpki-client