This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/vuuk7Bw0qNuOFi3i_WnG1bmfFIk.roa
File:                     vuuk7Bw0qNuOFi3i_WnG1bmfFIk.roa (raw, json)
Hash identifier:          ApgLzh88e1nVK1T+pmvKzZNPx17TlVOhS603xJ5WCsI=
Subject key identifier:   BE:EB:A4:EC:1C:34:A8:DB:8E:16:2D:E2:FD:69:C6:D5:B9:9F:14:89
Certificate issuer:       /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial:       019B790FF7C2C1105D69CFAE1DE436C2B983
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/vuuk7Bw0qNuOFi3i_WnG1bmfFIk.roa
Signing time:             Thu 01 Jan 2026 10:17:28 +0000
ROA not before:           Thu 01 Jan 2026 10:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16178
IP address blocks:        80.87.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:0f:f7:c2:c1:10:5d:69:cf:ae:1d:e4:36:c2:b9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
        Validity
            Not Before: Jan  1 10:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=beeba4ec1c34a8db8e162de2fd69c6d5b99f1489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:95:28:23:8c:9a:35:88:55:05:31:2a:74:
                    5f:d4:07:bc:00:3a:c8:c3:fc:97:91:7a:49:2a:74:
                    b2:f5:12:6a:26:84:e5:d1:d4:3f:88:61:1b:36:f7:
                    5b:9c:1c:2b:8a:6e:20:7c:04:73:fe:95:49:6a:7d:
                    d2:83:e4:8d:ef:f6:12:cc:e4:b7:9a:5a:8a:6a:5a:
                    ea:19:93:5a:6c:84:c7:32:a7:a5:8b:b8:fb:b1:90:
                    11:a1:56:a8:9c:69:84:a7:4f:be:08:b4:e4:60:60:
                    6f:ba:0d:f5:41:c7:35:dd:cd:35:8e:be:b0:5f:3e:
                    00:28:4d:4c:68:db:57:6e:0e:66:8a:a7:db:cb:9d:
                    e9:4d:12:49:08:c5:81:72:a2:b4:b6:06:e3:91:3d:
                    06:f6:df:23:bf:7a:c1:76:46:e2:92:91:7b:c2:3e:
                    4b:3f:11:ce:98:c6:f2:c0:fd:db:70:35:e8:2e:76:
                    d3:7e:9c:26:ec:5c:9c:19:a3:a2:eb:d0:8a:8e:98:
                    71:4f:6b:06:e1:ff:3c:ed:1e:0f:2a:60:d9:0d:da:
                    29:5a:49:55:9a:4c:bb:fb:a7:fd:5a:ca:4b:1e:ce:
                    3c:a3:95:7b:0a:db:3f:96:25:3c:c2:ee:dd:b1:a8:
                    fd:24:e6:04:3f:b8:64:6a:c8:30:8d:6a:9c:58:13:
                    66:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EB:A4:EC:1C:34:A8:DB:8E:16:2D:E2:FD:69:C6:D5:B9:9F:14:89
            X509v3 Authority Key Identifier:
                keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/vuuk7Bw0qNuOFi3i_WnG1bmfFIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.87.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:b7:d3:b6:f2:5f:b8:52:c1:ed:c1:39:0f:0e:75:fa:d7:
         11:37:0d:d8:7c:34:4c:86:b1:ac:71:be:e7:fa:6e:d6:4a:9a:
         5a:d6:ab:99:d8:9a:bc:9a:f9:f0:d9:5a:77:79:8a:b1:07:14:
         04:bd:2d:6b:f7:81:d0:b9:8e:26:d5:63:fc:17:f7:82:7b:25:
         16:ea:66:01:13:76:7f:33:44:dc:73:f2:04:b2:7b:2f:01:56:
         96:5e:c5:48:6f:81:43:28:7a:30:12:68:c4:d8:30:63:c5:ac:
         80:51:74:74:d9:1f:0a:9d:3d:64:6d:a6:bf:3f:15:d5:ef:5f:
         bf:be:d3:36:34:14:17:3f:69:87:6a:5f:01:37:e6:24:d1:50:
         d1:a4:08:75:93:75:5d:c3:bf:2e:7a:17:b3:ac:b2:b1:73:ff:
         ad:8a:28:1f:69:fc:91:73:a3:f4:a1:1f:29:0f:11:1c:93:f9:
         62:93:39:c4:82:fc:54:fc:11:16:0a:37:64:48:74:7a:b2:84:
         51:12:44:24:18:36:b0:d9:7e:6e:f8:98:b8:48:1a:ad:d7:60:
         cf:e9:c4:6d:fb:fc:83:0c:c1:9c:f7:2c:79:de:5e:1c:9f:fa:
         9e:3c:e6:23:b7:45:78:78:4f:fd:0e:fc:0b:bd:7e:a9:12:aa:
         a1:06:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:25:44 2026 by rpki-client