This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/vOZ7Ql9vFtpu8bzXS7DfcShwpKs.roa
File:                     vOZ7Ql9vFtpu8bzXS7DfcShwpKs.roa (raw, json)
Hash identifier:          fRjqYFBpTHjloeLUzQR6YEC3mRguqtT0T3tph3Olr7E=
Subject key identifier:   BC:E6:7B:42:5F:6F:16:DA:6E:F1:BC:D7:4B:B0:DF:71:28:70:A4:AB
Certificate issuer:       /CN=15e0c079ebbee9453adf40783340016497710e08
Certificate serial:       019B7D5A930EC9F3551B498A3FBAC09B1E6D
Authority key identifier: 15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/vOZ7Ql9vFtpu8bzXS7DfcShwpKs.roa
Signing time:             Fri 02 Jan 2026 06:17:26 +0000
ROA not before:           Fri 02 Jan 2026 06:17:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208805
IP address blocks:        45.84.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:93:0e:c9:f3:55:1b:49:8a:3f:ba:c0:9b:1e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15e0c079ebbee9453adf40783340016497710e08
        Validity
            Not Before: Jan  2 06:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bce67b425f6f16da6ef1bcd74bb0df712870a4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:5b:22:59:dd:f0:85:a3:89:2e:27:86:97:
                    6f:9f:2c:18:6a:2c:24:b8:36:23:f6:e6:02:e1:00:
                    5a:14:6a:87:58:b9:8a:f8:63:10:93:ac:38:20:c4:
                    d3:d0:b6:11:25:67:bd:4c:02:34:c4:47:e0:c6:fb:
                    24:10:b5:c2:1f:38:6d:c9:64:d8:c7:e1:9b:73:0c:
                    82:61:49:60:d6:49:a2:12:27:03:38:71:cc:fd:39:
                    33:79:f6:5c:65:0e:af:be:f1:09:29:2f:b6:36:da:
                    e7:1e:ff:b8:90:69:ff:ec:16:83:35:0d:d8:59:b3:
                    98:83:31:5f:18:80:2b:f2:75:35:bf:ad:d0:89:c5:
                    8e:8f:d2:6b:4e:6d:72:d3:34:de:83:c6:46:03:35:
                    29:0d:81:b0:58:b2:ed:8b:b2:be:bf:1f:3a:e4:43:
                    2e:f8:9d:5b:90:87:68:29:02:2c:b8:4a:8c:85:c4:
                    32:9e:78:25:14:47:81:9b:74:05:94:ef:c7:70:36:
                    1a:ec:59:49:80:e9:42:f5:99:c6:8d:5e:24:d4:89:
                    07:d6:8b:55:0f:62:b6:93:5d:cb:69:41:83:1d:3b:
                    c1:99:35:7e:0f:63:36:67:b8:19:ec:71:d0:65:cc:
                    be:ea:74:c9:c7:db:cd:d6:2f:9b:ee:b1:45:6c:2e:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:7B:42:5F:6F:16:DA:6E:F1:BC:D7:4B:B0:DF:71:28:70:A4:AB
            X509v3 Authority Key Identifier:
                keyid:15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/vOZ7Ql9vFtpu8bzXS7DfcShwpKs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:1d:ad:75:85:2b:56:a4:69:25:9f:15:1d:b3:e6:30:29:
         ec:ae:e3:ef:45:cd:de:b3:3b:9c:72:0c:09:04:cb:6e:03:38:
         09:df:61:b3:24:3d:bd:08:77:ba:5f:a9:22:c3:af:05:c3:e9:
         4c:40:10:3e:cb:a9:58:ed:fe:c9:b6:02:ae:71:da:26:77:96:
         f2:e8:d4:66:49:82:cb:fe:0a:84:a3:34:13:be:86:71:01:7f:
         99:47:b5:47:e8:23:50:cf:0c:22:17:16:f3:a6:40:f2:fd:fe:
         5e:6e:66:06:37:9c:0a:e4:3b:1e:bb:82:b2:2c:08:82:73:d9:
         32:85:df:e6:7c:d1:d5:aa:63:7e:90:fd:6d:f6:93:aa:41:d1:
         9a:53:84:fd:ba:77:21:93:f1:83:42:a1:d5:a3:84:08:a7:b4:
         62:de:10:0e:7d:2b:8f:01:0d:a5:3f:fe:85:0a:5d:89:ab:68:
         c0:0d:bb:d0:fd:9b:eb:cf:15:0e:8e:05:db:3b:1a:6c:8b:5f:
         64:a2:68:8d:5b:4d:8e:d5:00:6b:c5:6c:17:8d:db:e3:ea:b4:
         e1:5a:2f:d0:c1:47:be:f6:cc:21:71:c1:dd:1f:94:84:2a:c1:
         16:c4:ac:19:3e:93:0d:e2:b4:18:29:3b:37:fb:10:44:8f:0d:
         a7:f2:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:53 2026 by rpki-client