This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/VOGa2OgWjgky6pjaze0aKigA4Xw.roa
File:                     VOGa2OgWjgky6pjaze0aKigA4Xw.roa (raw, json)
Hash identifier:          AEeSZ9408PCHxw0xHDJSkG2Qd0qqfMOh4o/RtotNNi4=
Subject key identifier:   54:E1:9A:D8:E8:16:8E:09:32:EA:98:DA:CD:ED:1A:2A:28:00:E1:7C
Certificate issuer:       /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial:       019B77587D6820F0CF2F1B249159F39E0BEA
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/VOGa2OgWjgky6pjaze0aKigA4Xw.roa
Signing time:             Thu 01 Jan 2026 02:17:26 +0000
ROA not before:           Thu 01 Jan 2026 02:17:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9163
IP address blocks:        213.208.52.0/24 maxlen: 24
                          213.208.53.0/24 maxlen: 24
                          213.208.54.0/24 maxlen: 24
                          213.208.55.0/24 maxlen: 24
                          213.208.56.0/24 maxlen: 24
                          213.208.57.0/24 maxlen: 24
                          213.208.58.0/24 maxlen: 24
                          213.208.59.0/24 maxlen: 24
                          213.208.60.0/24 maxlen: 24
                          213.208.61.0/24 maxlen: 24
                          213.208.62.0/24 maxlen: 24
                          213.208.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:7d:68:20:f0:cf:2f:1b:24:91:59:f3:9e:0b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
        Validity
            Not Before: Jan  1 02:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54e19ad8e8168e0932ea98dacded1a2a2800e17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3f:53:14:e0:b3:f0:05:3d:18:95:ab:fe:a8:
                    ef:ee:aa:23:b4:ac:3f:b9:16:46:ff:dc:72:22:29:
                    96:d8:e4:65:ab:26:43:0b:78:16:49:da:71:a4:d8:
                    64:4a:8b:26:ea:6c:f5:68:55:72:2f:52:93:47:79:
                    3c:80:3f:72:7f:38:de:dd:be:c1:ea:4b:18:0c:ad:
                    7e:11:40:ba:68:dc:e7:27:85:70:92:f4:3a:0c:00:
                    f5:52:db:da:17:d9:3b:a7:9e:10:91:30:d1:58:05:
                    01:f6:ab:6c:96:43:39:78:8e:0b:7d:10:f0:44:b0:
                    c9:aa:ac:91:57:17:66:43:27:d5:fe:1d:59:61:d9:
                    6c:97:46:0e:24:0c:7c:b0:02:2b:2a:5c:4a:db:f9:
                    b2:13:37:7a:07:84:bf:c1:9c:c3:53:24:fd:44:b8:
                    70:35:13:f7:cc:8d:83:d6:87:8d:c3:e2:cb:cc:a6:
                    c9:8b:48:35:09:37:d5:c3:b5:66:d0:43:62:33:d6:
                    69:c7:bc:11:d4:2b:76:da:aa:9d:c9:91:09:3d:ec:
                    5c:8e:7a:11:a9:02:b9:93:79:93:65:ec:fe:ba:d7:
                    19:e3:49:2d:94:71:8f:7e:4c:35:b4:0e:78:b4:ae:
                    5a:38:37:20:40:7d:e4:58:3b:68:73:5d:33:cf:5a:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E1:9A:D8:E8:16:8E:09:32:EA:98:DA:CD:ED:1A:2A:28:00:E1:7C
            X509v3 Authority Key Identifier:
                keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/VOGa2OgWjgky6pjaze0aKigA4Xw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.208.52.0-213.208.63.255

    Signature Algorithm: sha256WithRSAEncryption
         47:12:34:16:e8:da:5b:4c:e7:4b:ee:fc:a3:57:3d:ed:dc:74:
         0e:6a:9b:cb:22:45:c0:7c:59:15:2c:b8:d6:0c:29:d9:7a:3d:
         77:ce:00:95:c5:d7:1e:25:1d:1f:59:a3:29:9e:4a:24:e0:e3:
         a5:e5:73:2b:01:a3:19:f0:03:5c:26:ec:69:32:1f:a3:f7:33:
         fd:ac:c9:36:80:14:b8:d7:83:11:70:fc:68:81:4a:5a:1b:ee:
         70:87:28:01:ed:58:cc:f0:7d:a0:32:ec:db:12:ae:a8:fd:2d:
         6d:1c:3d:c6:09:a1:18:9a:25:67:17:21:2e:74:61:1c:9a:53:
         90:9d:43:06:a6:b7:46:96:d3:c7:32:57:cd:c1:74:87:96:27:
         f4:b4:47:53:46:b2:e2:31:45:cb:92:e9:c2:78:5e:84:3a:9d:
         4c:d6:38:e0:c4:51:7f:ae:15:4f:61:35:04:22:b7:e3:bb:a4:
         0a:b6:10:74:8b:93:9b:dd:98:d3:f8:c4:60:1e:5c:65:f9:29:
         5c:e2:4b:fe:91:f2:d4:76:c3:57:d6:97:5b:be:87:98:be:13:
         47:f0:a2:bc:d7:7e:2a:f7:ed:bc:5e:9d:22:5f:b7:75:f8:67:
         3c:d3:c9:c4:69:e2:b5:b6:18:1e:c3:a2:09:65:06:ac:68:42:
         50:ba:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:39:17 2026 by rpki-client