This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/473COPKd9olJMqE4kR25XOWDFnY.roa
File:                     473COPKd9olJMqE4kR25XOWDFnY.roa (raw, json)
Hash identifier:          monMcaQ2KeRWOvX/C8J08SlGKpHbfXIEgRkLvwPSBPI=
Subject key identifier:   E3:BD:C2:38:F2:9D:F6:89:49:32:A1:38:91:1D:B9:5C:E5:83:16:76
Certificate issuer:       /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial:       019B7D5AF07521F07846DCB381816275A367
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/473COPKd9olJMqE4kR25XOWDFnY.roa
Signing time:             Fri 02 Jan 2026 06:17:50 +0000
ROA not before:           Fri 02 Jan 2026 06:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198463
IP address blocks:        2001:67c:2d04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:f0:75:21:f0:78:46:dc:b3:81:81:62:75:a3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
        Validity
            Not Before: Jan  2 06:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3bdc238f29df6894932a138911db95ce5831676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:40:07:22:50:89:43:93:68:03:7f:b3:92:25:
                    84:40:26:61:37:dd:cc:2a:68:e1:fc:c2:8a:ee:01:
                    90:5a:70:5a:ef:d0:73:28:45:77:f7:72:d6:14:02:
                    22:d1:60:f4:fd:ba:b2:6f:bb:0d:35:8e:33:ca:c2:
                    0c:ef:ce:9a:8b:24:60:4a:b7:c1:50:b3:cd:65:4b:
                    90:18:e5:2e:ef:17:2f:fd:77:1d:ed:34:7b:d8:ff:
                    b3:89:5b:4f:99:ec:65:b4:19:32:50:b9:13:80:62:
                    5f:59:80:67:1c:54:86:40:a1:fb:97:b8:87:15:67:
                    6e:27:0a:cb:a9:47:91:8a:e6:42:e4:ad:74:2d:64:
                    4f:12:0d:1a:62:26:fd:ad:4c:07:c7:ed:a8:a2:ab:
                    d8:b4:7e:fd:78:9a:fa:40:31:d6:e9:16:e8:46:dc:
                    1a:b2:ed:25:3a:4f:72:e3:5d:3a:35:1d:63:37:ed:
                    b1:7b:f2:c7:77:f4:1d:ab:8c:6a:7a:64:29:b5:d1:
                    46:63:95:6d:7d:55:ad:18:24:e9:84:a8:d8:4c:56:
                    30:82:8a:1f:7b:52:18:2b:f5:c6:ab:98:81:82:b4:
                    62:83:b8:23:6f:46:82:30:12:ca:32:e6:40:4e:a6:
                    4f:b9:ef:4e:e6:89:e2:7c:71:a7:91:2d:fa:88:39:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:C2:38:F2:9D:F6:89:49:32:A1:38:91:1D:B9:5C:E5:83:16:76
            X509v3 Authority Key Identifier:
                keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/473COPKd9olJMqE4kR25XOWDFnY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2d04::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:6f:a8:58:d0:d5:92:37:e8:d9:60:3f:0f:e4:bd:0e:93:6f:
         d2:fb:7f:51:b0:32:08:96:6a:5e:00:bd:21:0b:4b:f2:c0:95:
         07:46:d2:7a:27:30:3a:b7:64:ac:d0:8d:4e:bb:be:ab:09:75:
         62:ae:5b:fb:f2:ab:bf:3e:90:91:e3:a2:f4:85:ee:4b:bd:f6:
         b0:5c:84:88:ec:d2:b0:97:11:50:63:d5:93:b2:6c:5d:f0:be:
         fa:c4:76:d8:66:e8:c8:89:36:15:f9:56:e8:a9:6b:13:30:4a:
         55:2d:43:55:c4:92:df:d1:5a:b0:7b:55:e5:63:e0:67:0e:65:
         27:58:ec:30:78:b1:02:c5:81:7e:bb:bb:06:f9:d4:0d:0e:89:
         b7:eb:48:ff:ed:5a:83:57:a5:69:ef:43:46:4e:76:f7:df:31:
         0d:a7:4c:af:ac:06:fd:14:c4:b2:ba:df:08:f4:f0:ce:a9:59:
         c3:b6:1e:36:a0:c3:bd:a5:23:3d:96:42:9e:0c:13:00:2e:ee:
         1a:95:2e:42:7c:4c:25:52:8e:18:2f:f9:30:8a:6e:8c:c5:4d:
         84:90:01:ed:69:3e:e1:6b:2f:35:8a:5a:36:52:3d:03:43:d2:
         63:2a:c4:dd:8e:ea:ee:3a:4f:01:2e:f3:a4:d8:aa:52:e7:49:
         05:5d:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:24:26 2026 by rpki-client