This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/VET9JzpN742Kxi_PTAzuOfpLzjw.roa
File:                     VET9JzpN742Kxi_PTAzuOfpLzjw.roa (raw, json)
Hash identifier:          tmq0ncjsAGMD4Bt4MuYWz/LdnVYgu2OPec/Dp5evxVU=
Subject key identifier:   54:44:FD:27:3A:4D:EF:8D:8A:C6:2F:CF:4C:0C:EE:39:FA:4B:CE:3C
Certificate issuer:       /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial:       019B7C134B336220B10E97D6A41A7C494BD2
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/VET9JzpN742Kxi_PTAzuOfpLzjw.roa
Signing time:             Fri 02 Jan 2026 00:19:57 +0000
ROA not before:           Fri 02 Jan 2026 00:19:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47227
IP address blocks:        93.190.168.0/21 maxlen: 30
                          2a02:6d0::/32 maxlen: 126
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:4b:33:62:20:b1:0e:97:d6:a4:1a:7c:49:4b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
        Validity
            Not Before: Jan  2 00:19:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5444fd273a4def8d8ac62fcf4c0cee39fa4bce3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0e:f8:e4:53:f7:44:2a:17:8e:8a:73:6f:1f:
                    ae:80:2c:0e:34:c3:f9:b3:0b:d2:a4:ee:1b:26:28:
                    e7:d4:77:86:78:ea:df:db:9e:c8:05:cb:72:3a:f4:
                    a3:92:70:2c:5c:fe:39:56:ce:fc:1a:d5:b9:91:f7:
                    20:52:f7:98:5c:72:eb:81:97:39:28:cc:10:a9:90:
                    5f:f0:e9:2e:f8:65:15:32:29:94:81:ac:bf:22:6c:
                    2d:59:b4:c7:6e:e6:d7:29:b8:65:1f:2f:5b:96:16:
                    a6:7c:47:95:16:bc:4a:b2:06:c5:e7:fa:27:e8:67:
                    70:51:01:a7:d4:9a:73:c8:ef:f6:51:bf:ff:c1:ec:
                    25:e6:da:27:b3:d9:c7:be:4c:45:ad:1b:1b:36:5a:
                    ba:a1:42:6f:37:54:e6:c9:91:8f:60:8d:75:1c:15:
                    33:f3:7b:f3:2e:64:c3:30:5f:dc:b2:cf:eb:f9:4d:
                    2e:62:c7:9c:cc:eb:ac:c4:06:8f:8b:cb:95:09:68:
                    07:b8:62:aa:06:28:bb:72:eb:19:bc:28:10:86:0f:
                    ed:af:de:85:7c:1e:16:13:6d:68:f7:51:6b:bb:51:
                    96:61:9d:bb:57:29:da:58:55:74:ff:53:3b:b4:ed:
                    ce:57:45:44:e7:2c:33:3a:1d:b0:b7:38:f2:4f:48:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:FD:27:3A:4D:EF:8D:8A:C6:2F:CF:4C:0C:EE:39:FA:4B:CE:3C
            X509v3 Authority Key Identifier:
                keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/VET9JzpN742Kxi_PTAzuOfpLzjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.168.0/21
                IPv6:
                  2a02:6d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:bb:45:d4:f8:73:be:3b:17:67:95:e5:36:07:a2:b4:9a:
         45:aa:3d:41:e8:9d:0e:bf:06:d1:6f:6c:c9:ba:4b:cd:94:7f:
         2a:b2:ef:43:37:1c:02:4c:6d:41:89:3e:d9:9e:8e:fe:55:5a:
         30:08:5c:c4:b1:a3:46:23:be:4f:9d:f2:5c:29:e7:bc:7a:32:
         26:df:e1:e8:1b:a2:67:7e:74:d7:a4:56:00:e4:93:e9:a6:dc:
         a5:c4:95:c9:57:7c:98:74:e6:f2:ca:7f:0e:5f:41:27:b5:3a:
         84:96:88:67:b0:b9:fb:88:47:f8:e4:48:ea:8f:38:52:57:d7:
         60:04:6b:b1:27:f6:aa:a8:62:5f:9b:25:52:b0:e0:b7:01:ec:
         df:7a:55:10:1c:4a:0c:86:52:5d:be:af:14:26:34:4b:c1:6c:
         9a:8a:87:25:a8:90:0e:79:83:8f:77:bc:b9:87:76:66:ed:86:
         51:0e:65:9d:27:a3:3a:1a:e9:5f:33:c4:03:21:f8:3d:0e:54:
         f1:1b:1a:23:85:dc:6d:05:de:2c:d0:f9:4d:d9:cd:2e:8a:9c:
         d0:b8:c1:64:94:cb:05:6c:13:d6:9f:0b:e0:36:d5:cb:6a:68:
         1b:00:f6:2e:4e:86:08:07:ce:88:2b:59:1b:fe:fe:c1:8d:4a:
         01:7d:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:26:04 2026 by rpki-client