This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/vc4rQV1btws3GoUjJ72MXPBLjsA.roa
File:                     vc4rQV1btws3GoUjJ72MXPBLjsA.roa (raw, json)
Hash identifier:          vJx5UKv6BgNsvAF5bCtGkQAa0ljtx4RqY02ta/bz2CY=
Subject key identifier:   BD:CE:2B:41:5D:5B:B7:0B:37:1A:85:23:27:BD:8C:5C:F0:4B:8E:C0
Certificate issuer:       /CN=a5618936eae39f274040a0d3327cf88102c84c6f
Certificate serial:       019C2AB94E477C36F19468CA3985E5A90FB1
Authority key identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/vc4rQV1btws3GoUjJ72MXPBLjsA.roa
Signing time:             Wed 04 Feb 2026 22:15:13 +0000
ROA not before:           Wed 04 Feb 2026 22:15:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31898
IP address blocks:        109.232.16.0/24 maxlen: 24
                          109.232.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2a:b9:4e:47:7c:36:f1:94:68:ca:39:85:e5:a9:0f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5618936eae39f274040a0d3327cf88102c84c6f
        Validity
            Not Before: Feb  4 22:15:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bdce2b415d5bb70b371a852327bd8c5cf04b8ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:f7:f7:37:8a:8a:1f:f9:4b:c9:94:c8:e8:
                    6c:20:c7:70:9f:3c:5a:75:b8:91:f8:94:05:db:8c:
                    24:df:17:dc:c6:e7:87:9e:53:e5:f2:28:6e:d7:48:
                    c0:d8:d6:f2:0c:e0:39:28:38:7c:a9:a1:3f:33:24:
                    56:01:46:4c:3c:9d:b9:b1:65:e0:03:ba:09:bd:84:
                    5a:e3:11:8e:a9:53:02:40:c6:35:ec:46:27:23:a9:
                    cf:e1:ef:62:5c:3b:df:4a:91:72:23:44:72:c8:4d:
                    29:a5:30:a7:80:f0:67:59:d0:1a:1f:d4:3c:ad:61:
                    c0:ca:6c:d0:c8:ee:77:a8:5d:31:0f:da:f5:bd:9a:
                    11:96:5b:fe:b4:54:fc:68:63:6a:41:4c:c4:47:4f:
                    b2:91:da:03:83:91:03:97:0b:b6:39:ea:c6:0c:a5:
                    24:88:af:af:61:f6:2e:2c:fd:0a:3a:0f:36:5d:63:
                    a4:8e:f6:14:a5:cd:f8:79:29:40:9c:bf:b4:cf:6a:
                    d7:47:14:f4:17:0d:11:a4:84:9d:0e:b4:42:47:48:
                    5c:5f:cd:f7:4c:9e:2d:92:35:58:05:af:82:96:5a:
                    ea:67:81:bd:f9:6a:83:03:0a:0d:44:d0:9a:b8:c0:
                    3d:70:93:61:1f:81:55:52:93:4e:2c:90:3e:5d:cc:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CE:2B:41:5D:5B:B7:0B:37:1A:85:23:27:BD:8C:5C:F0:4B:8E:C0
            X509v3 Authority Key Identifier:
                keyid:A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/vc4rQV1btws3GoUjJ72MXPBLjsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.232.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:cb:a3:63:d2:df:62:b5:69:50:98:b4:26:b7:2d:1b:6a:09:
         0a:8a:23:d2:a0:64:78:08:1c:2f:ad:59:17:8f:8e:0f:54:20:
         7e:fe:11:e7:3c:23:f3:76:f9:e2:58:e3:79:7e:73:89:d3:e7:
         9b:ba:77:fd:c9:24:38:f7:c5:79:c8:22:4c:e4:c9:af:6a:d1:
         94:7b:84:e6:b2:ca:b5:e0:70:b6:b8:bc:d2:12:28:49:8a:ff:
         dd:df:4b:b2:db:f7:a3:f5:f7:34:0b:1f:50:c7:f7:a1:ea:00:
         44:2e:b4:d0:2d:be:41:e2:9b:08:0e:52:86:14:79:76:7d:89:
         42:36:be:0f:49:7b:44:8c:e6:a9:4e:e7:ef:86:cb:4e:45:33:
         60:3e:9e:b5:d4:ad:26:7e:8c:4a:cb:f6:7c:6a:b7:2d:4c:bc:
         ee:55:5f:d1:0f:d7:c2:8e:da:f3:bd:0b:fe:24:20:0a:fd:cf:
         d8:58:dc:3c:8d:7a:2c:76:d4:1f:c1:6c:99:b3:d7:e6:1d:76:
         f9:4d:dd:b3:c7:68:3a:47:c1:d3:84:c1:46:a9:de:ed:62:d2:
         d6:ef:05:5b:8a:ec:43:bf:c9:eb:93:ae:55:ed:3e:61:d3:62:
         34:4c:86:b7:f0:d3:ce:5d:3e:a5:6d:c4:37:a5:05:14:6e:7d:
         e9:e2:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:45 2026 by rpki-client