This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/VCaBXA83kQ4IbxESu3hYVvwGiKQ.roa
File:                     VCaBXA83kQ4IbxESu3hYVvwGiKQ.roa (raw, json)
Hash identifier:          JiCIb+YRtulc3qQU64KIqOX0lzuFqDEPkxOzypzATAA=
Subject key identifier:   54:26:81:5C:0F:37:91:0E:08:6F:11:12:BB:78:58:56:FC:06:88:A4
Certificate issuer:       /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial:       019B77C68EE957C5BB913DD89A4AAA9DFE40
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/VCaBXA83kQ4IbxESu3hYVvwGiKQ.roa
Signing time:             Thu 01 Jan 2026 04:17:40 +0000
ROA not before:           Thu 01 Jan 2026 04:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215148
IP address blocks:        62.212.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:8e:e9:57:c5:bb:91:3d:d8:9a:4a:aa:9d:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
        Validity
            Not Before: Jan  1 04:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5426815c0f37910e086f1112bb785856fc0688a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:97:93:02:d4:f8:0a:ca:e5:90:0a:3f:51:
                    ac:98:e7:71:d5:2b:43:31:ec:c8:6d:86:c0:40:8a:
                    1b:fa:40:fc:88:f1:06:1c:96:63:ce:fe:c2:0f:35:
                    ec:18:8f:b9:20:77:bb:7c:62:c7:f4:35:f7:48:2d:
                    18:7c:88:f5:a4:b6:4f:9b:6d:74:cf:1a:15:e4:4b:
                    59:04:72:cd:d5:80:d0:e5:89:70:3e:40:c2:21:cc:
                    49:be:59:39:4a:61:b9:3d:18:d1:56:07:a2:d5:27:
                    b2:0c:53:f5:8d:96:7e:96:40:35:2e:0a:ea:cd:9d:
                    55:be:27:4d:de:e0:2e:4a:a6:7c:cc:72:71:45:54:
                    57:65:12:6c:36:b2:cd:40:7b:bf:7f:3d:25:b7:29:
                    1f:c1:b2:a5:00:47:ae:2f:5e:2a:19:e2:a9:5b:0d:
                    83:93:30:3a:11:24:f6:06:38:c2:78:db:4c:db:4e:
                    00:32:88:95:c1:fa:9e:94:64:b4:1c:3e:b0:da:b8:
                    e7:dc:02:cb:02:9c:96:49:40:19:a3:7d:10:87:0a:
                    86:a2:d1:76:30:3b:30:77:dd:0f:8d:96:44:a4:08:
                    f7:24:49:4c:01:79:07:8d:44:f5:16:92:49:2e:b5:
                    73:c7:3c:d3:ff:5b:8c:1c:69:bf:96:f7:dc:e8:af:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:81:5C:0F:37:91:0E:08:6F:11:12:BB:78:58:56:FC:06:88:A4
            X509v3 Authority Key Identifier:
                keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/VCaBXA83kQ4IbxESu3hYVvwGiKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.212.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:35:a8:d1:1e:0a:db:9c:f0:1e:5d:d4:b9:dd:38:6b:b9:
         6d:b6:15:f5:bd:7a:92:6f:ab:16:98:78:77:1a:c9:44:d4:7b:
         4a:10:01:43:3e:f5:88:91:16:19:2e:45:4f:ee:11:7c:ac:0a:
         24:20:3c:8d:34:2b:b2:1a:a1:fa:a6:6b:73:9d:2d:1e:1c:19:
         54:fd:6f:1f:15:9a:0e:79:d5:57:93:9c:5c:03:94:14:39:af:
         b0:e0:99:47:6a:d2:36:9b:56:8d:03:8a:60:d5:89:8d:48:1d:
         86:a3:f1:f5:38:14:49:46:ce:41:b6:74:07:61:2a:f0:b7:56:
         52:d3:a8:18:a0:32:c6:4f:c0:e6:38:d0:75:6a:32:7e:58:94:
         71:dd:a0:b9:cb:41:65:45:6d:91:5b:cb:bf:80:a5:8f:38:ee:
         e2:0d:94:49:9f:19:be:6d:db:d8:cf:5c:d5:81:0b:33:07:07:
         09:08:4a:ca:f4:dd:68:c4:f4:27:7a:00:8c:13:9f:58:ff:f8:
         d3:7d:f5:eb:21:49:25:0d:21:b0:09:62:c3:28:c9:4a:ca:9f:
         a2:ab:d7:67:22:78:3d:5e:2b:28:a8:20:f8:fc:9f:d2:fd:c7:
         45:13:ab:91:33:0e:fd:74:30:ed:48:e9:2a:53:b9:78:d1:23:
         eb:40:e0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:44:33 2026 by rpki-client