This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VKwDG2hLFQeVgZWJxAY4yX1C_yg.roa
File:                     VKwDG2hLFQeVgZWJxAY4yX1C_yg.roa (raw, json)
Hash identifier:          UEbG2XqwNRTcXpoOeSYrxyo7FuvgtlkRqLgKyRKsfUk=
Subject key identifier:   54:AC:03:1B:68:4B:15:07:95:81:95:89:C4:06:38:C9:7D:42:FF:28
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       019C526C937FD4A2C4EC11DF1A44FE09A74C
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VKwDG2hLFQeVgZWJxAY4yX1C_yg.roa
Signing time:             Thu 12 Feb 2026 15:16:13 +0000
ROA not before:           Thu 12 Feb 2026 15:16:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        109.122.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:52:6c:93:7f:d4:a2:c4:ec:11:df:1a:44:fe:09:a7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Feb 12 15:16:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54ac031b684b150795819589c40638c97d42ff28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:61:a9:02:e8:6c:2d:d7:06:95:47:9c:d5:68:
                    db:9e:d7:ca:22:99:60:f4:84:4f:7c:68:6d:68:d1:
                    5c:5e:d4:8f:cd:2a:80:d3:24:dc:df:94:13:4d:3d:
                    77:a8:3b:9e:a9:37:7f:d6:77:e2:b1:40:c1:b7:5a:
                    41:d3:dc:61:72:ee:eb:4e:d6:59:41:68:a1:4b:8d:
                    7e:05:e1:ed:9e:27:ee:12:31:b4:68:b6:82:f2:08:
                    1f:6b:d0:e6:e1:00:66:a4:59:35:94:19:2f:e3:80:
                    3a:b0:99:c8:42:1f:25:ae:6d:5a:3d:df:ce:1e:70:
                    c9:9e:71:ed:92:1d:0e:4f:fc:fd:40:d0:11:88:9e:
                    7f:d8:6f:e5:47:45:54:6e:9f:61:80:03:91:f8:1c:
                    85:a1:75:2b:76:60:47:ad:3f:cb:b2:04:bf:1c:9b:
                    1c:fb:22:c7:6c:3f:ba:ab:95:86:87:62:9e:b2:30:
                    2e:47:40:e0:22:c2:f3:d7:1f:bb:4c:7e:e4:6f:56:
                    a2:70:13:84:3a:3e:07:73:62:4c:f6:39:1a:ec:15:
                    ba:8e:48:59:65:bb:a0:17:e3:80:17:84:92:9b:97:
                    df:31:7b:da:2f:b8:a4:f0:ff:c1:13:69:2d:1e:34:
                    7b:df:1e:1b:ea:d3:f5:da:92:57:70:8c:9a:d6:38:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:03:1B:68:4B:15:07:95:81:95:89:C4:06:38:C9:7D:42:FF:28
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VKwDG2hLFQeVgZWJxAY4yX1C_yg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:26:39:f7:2b:a7:08:b4:2a:8c:91:2d:ff:21:bc:29:05:9c:
         25:c4:31:5f:0c:db:e9:5b:a2:f0:b0:06:6e:ce:b1:14:0e:01:
         49:81:a4:33:48:9d:98:9b:6a:13:b7:e1:7f:97:d6:cb:39:d3:
         b2:91:49:22:3e:40:a1:60:cb:7c:18:45:2a:e1:c1:fd:6c:7a:
         db:a9:93:9f:6e:51:49:48:e1:1e:be:b9:c9:09:1f:69:82:59:
         38:a2:57:ef:27:55:7c:00:ca:e8:f8:f4:ff:4b:72:8b:58:80:
         28:ea:e4:5c:dd:09:12:2e:2f:bb:31:a7:40:73:79:6f:57:c3:
         16:57:62:af:64:f4:cb:6b:1c:e0:66:3a:62:24:db:13:6f:36:
         73:55:85:d9:13:f3:ae:03:60:69:1d:31:43:e5:a9:8d:ec:72:
         61:a6:9b:06:08:0e:81:b1:05:31:12:80:96:47:5b:8a:90:20:
         31:61:5c:9e:68:c4:45:32:23:6e:30:8c:ee:13:3c:21:d4:b6:
         bf:29:1a:35:4b:14:b5:b6:cc:0d:51:67:44:0a:06:6a:be:23:
         a5:da:69:05:3e:b2:23:27:18:51:d7:f4:0d:46:2f:1a:57:86:
         7e:f3:08:35:f2:b2:53:33:c7:18:86:e6:8e:af:46:dc:2d:87:
         bf:83:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:23:52 2026 by rpki-client