This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/Vi-50rUJqypgGVlY1PnfgRKVJPc.roa
File:                     Vi-50rUJqypgGVlY1PnfgRKVJPc.roa (raw, json)
Hash identifier:          JefSHWYR7YbXg1+D5PyzTIFvu4XKwcfsRRc2C4+Vfyg=
Subject key identifier:   56:2F:B9:D2:B5:09:AB:2A:60:19:59:58:D4:F9:DF:81:12:95:24:F7
Certificate issuer:       /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial:       019B7BA3EC3363C6DC9357DDB855CEA09CA6
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/Vi-50rUJqypgGVlY1PnfgRKVJPc.roa
Signing time:             Thu 01 Jan 2026 22:18:18 +0000
ROA not before:           Thu 01 Jan 2026 22:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61395
IP address blocks:        5.83.56.0/21 maxlen: 21
                          2a04:680::/29 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:ec:33:63:c6:dc:93:57:dd:b8:55:ce:a0:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
        Validity
            Not Before: Jan  1 22:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=562fb9d2b509ab2a60195958d4f9df81129524f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:f6:d7:59:d7:6e:bb:3d:f6:fb:e8:7c:f7:
                    7d:3c:08:6a:47:c8:18:9f:2d:0f:fc:2c:a4:7f:cc:
                    dd:10:6f:8c:de:0c:31:4b:26:5f:65:62:d2:aa:83:
                    dd:ee:da:81:0b:39:3b:07:28:7b:7e:9c:48:d0:98:
                    43:a9:f9:eb:ec:e3:4b:0d:4b:0b:54:dc:31:cb:e8:
                    28:da:13:fd:68:3e:02:4e:f7:d6:b3:62:54:b5:ec:
                    1d:1f:df:23:16:d7:34:27:f4:cd:d7:c9:8a:28:fa:
                    28:de:c9:b0:a5:bd:cf:65:07:fa:b5:0d:4c:dc:ec:
                    7f:ef:8b:9e:f6:46:cd:a5:79:e5:d5:60:ab:37:0c:
                    57:13:e0:ca:2c:92:b6:fb:ab:c9:2f:14:c9:26:33:
                    92:9f:91:a9:4e:8a:67:73:77:f9:16:9b:57:c9:87:
                    59:f7:7b:48:8d:51:a5:46:2f:b4:19:33:44:9d:19:
                    28:39:c9:26:3a:63:5e:0a:40:7d:10:4d:d6:16:f9:
                    37:25:41:0a:48:74:43:64:56:ac:0d:b0:3f:c6:7a:
                    88:1b:58:88:4e:6a:9e:34:8c:59:ed:6b:c1:f9:af:
                    94:5c:56:b3:43:93:0f:da:cd:92:29:07:29:16:8a:
                    45:06:c6:7a:04:6b:46:f7:1c:e8:c3:11:23:ff:df:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2F:B9:D2:B5:09:AB:2A:60:19:59:58:D4:F9:DF:81:12:95:24:F7
            X509v3 Authority Key Identifier:
                keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/Vi-50rUJqypgGVlY1PnfgRKVJPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.56.0/21
                IPv6:
                  2a04:680::/29

    Signature Algorithm: sha256WithRSAEncryption
         3a:5c:c7:54:b9:5b:98:0c:62:8c:6b:c5:ba:14:32:82:b5:87:
         d0:f5:4a:5b:aa:f4:c9:ce:08:ba:29:61:fc:63:1e:bb:e6:46:
         ab:b0:c5:ae:28:19:27:54:01:fb:e5:66:bb:47:7a:94:f6:2a:
         67:09:d3:89:ba:a3:40:26:75:df:d9:a2:f4:c5:c0:12:88:60:
         46:85:9e:a5:a4:70:c3:45:c7:c9:5c:7a:f7:ad:e1:fb:fb:92:
         c0:87:d2:28:90:3f:87:63:66:19:84:0e:0f:e3:13:99:28:69:
         84:1b:60:5f:e6:ab:9d:0c:d0:5e:6f:d9:f2:a1:44:e6:94:05:
         51:f1:5e:0c:f9:a2:cb:22:1d:10:7f:fa:28:2a:89:82:97:4b:
         d2:19:5a:7b:1e:1f:26:86:c7:c3:3d:fe:17:ea:de:84:a4:3c:
         af:06:89:57:43:62:60:b8:1d:57:62:1c:6a:25:b9:b1:ca:1d:
         c9:49:25:02:c6:87:d4:34:5e:06:3f:bb:0f:ff:60:6f:7b:37:
         99:f4:26:c7:3c:45:2b:26:46:39:35:82:ad:4e:01:5b:1b:57:
         81:9e:33:23:d7:5d:e3:d8:2d:78:74:6c:b1:55:56:b1:e4:a2:
         37:c3:57:32:14:e8:00:17:74:82:3b:be:8f:a9:77:3a:07:84:
         21:91:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:10 2026 by rpki-client