This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/VRiS5ofRQHVuC_lAcxdhVPzJ5ys.roa
File:                     VRiS5ofRQHVuC_lAcxdhVPzJ5ys.roa (raw, json)
Hash identifier:          djTEy2SpZpwfwHAY9CNLF5jemLo53ls13ygOIxPg5rI=
Subject key identifier:   55:18:92:E6:87:D1:40:75:6E:0B:F9:40:73:17:61:54:FC:C9:E7:2B
Certificate issuer:       /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial:       019B79104AF887BF55286FB54533B54B43D0
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/VRiS5ofRQHVuC_lAcxdhVPzJ5ys.roa
Signing time:             Thu 01 Jan 2026 10:17:49 +0000
ROA not before:           Thu 01 Jan 2026 10:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211492
IP address blocks:        5.8.249.0/24 maxlen: 24
                          2a06:f40::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:4a:f8:87:bf:55:28:6f:b5:45:33:b5:4b:43:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
        Validity
            Not Before: Jan  1 10:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=551892e687d140756e0bf94073176154fcc9e72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:44:24:32:01:4f:59:ce:ff:b1:7e:15:65:
                    cb:03:31:c1:31:18:a2:7e:d1:6d:75:c7:18:4e:2f:
                    32:50:0f:f7:da:72:6b:24:02:d7:98:72:4c:de:9c:
                    40:dd:64:ae:92:db:3a:f9:95:5b:b2:97:ea:01:23:
                    e2:0b:24:9b:7c:f5:e1:2e:96:ec:0c:49:a7:1c:be:
                    4f:6e:21:ed:b0:ba:e4:c6:88:ae:c2:ea:ce:3d:d0:
                    36:cc:c8:1c:5b:d7:fc:51:ee:a7:1a:18:64:08:34:
                    67:35:b4:05:8f:8f:a8:cc:c4:db:dd:a6:33:f1:6a:
                    20:3c:6b:95:26:d3:43:f5:f6:8e:a0:c9:60:a2:37:
                    0f:64:a6:20:09:2c:21:de:50:e8:27:cb:34:6c:48:
                    4f:56:2f:22:43:5e:e3:6e:4e:28:bc:60:86:65:44:
                    c7:b2:6d:77:16:34:ce:3c:25:4b:64:31:44:fd:6a:
                    84:a2:c6:8e:28:28:68:e9:cf:07:5a:ae:2b:d5:3c:
                    31:eb:af:aa:ba:6c:62:3f:c5:79:c4:f2:ef:40:85:
                    08:be:9c:e1:21:bf:57:66:af:18:c0:97:49:1c:0d:
                    0c:a1:d5:b8:c3:f2:25:09:93:95:73:e4:ee:90:7c:
                    7b:e2:7c:39:d3:2b:a3:19:b1:5a:ae:90:5b:34:87:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:18:92:E6:87:D1:40:75:6E:0B:F9:40:73:17:61:54:FC:C9:E7:2B
            X509v3 Authority Key Identifier:
                keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/VRiS5ofRQHVuC_lAcxdhVPzJ5ys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.249.0/24
                IPv6:
                  2a06:f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         92:54:fc:9c:6b:2e:71:62:90:f3:b6:d9:88:47:c7:c3:19:7c:
         75:2e:b1:20:00:b4:b0:28:f0:0d:36:e3:50:a8:97:43:97:ff:
         f1:57:dc:c4:fa:6e:2d:d7:67:1e:a3:69:8d:41:6f:d4:9f:65:
         10:16:7c:50:4d:08:ff:b9:5a:e7:6d:04:d7:da:ab:ed:03:3b:
         83:69:1a:0c:93:72:79:54:f2:94:50:ca:20:ef:e9:5d:bb:95:
         3e:d5:be:a3:f0:1d:04:ff:34:41:9e:61:3b:ab:34:ca:26:3e:
         70:5b:3e:e7:8e:e3:de:b8:93:48:73:f4:76:7c:bd:ab:c3:80:
         b9:f4:66:b8:f2:8b:be:b3:74:bf:55:83:80:58:f0:7a:b7:97:
         4d:e8:89:bc:4d:88:e9:59:bb:4c:b1:04:5b:b4:07:a1:96:52:
         f7:44:c0:89:1f:b4:ad:36:bd:2e:42:e2:3c:26:b6:b6:38:1e:
         bb:b9:6e:07:a6:a7:87:4a:44:2a:aa:4e:2d:d0:8f:cf:2d:55:
         ca:ec:ce:4d:98:63:d1:60:f5:a3:ad:9c:67:ef:e6:63:d5:38:
         0b:bf:36:8d:86:42:b1:51:1b:b0:33:a5:e3:68:d6:39:ae:ae:
         8c:5f:97:81:ec:d2:ed:e7:fa:b0:ea:2e:5b:e4:c4:30:43:ad:
         90:f6:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:42:40 2026 by rpki-client