This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/VCisrPtNvtB7bscmQGWvZKbtHFo.roa
File:                     VCisrPtNvtB7bscmQGWvZKbtHFo.roa (raw, json)
Hash identifier:          5zS8VmmJLoewFXoJ5XZ3WMz0MzfOi8w0Bvod98H2Sr4=
Subject key identifier:   54:28:AC:AC:FB:4D:BE:D0:7B:6E:C7:26:40:65:AF:64:A6:ED:1C:5A
Certificate issuer:       /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial:       019B7A5A8A73185BFDF1E67DD7BD82C0D251
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/VCisrPtNvtB7bscmQGWvZKbtHFo.roa
Signing time:             Thu 01 Jan 2026 16:18:32 +0000
ROA not before:           Thu 01 Jan 2026 16:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60111
IP address blocks:        185.255.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:8a:73:18:5b:fd:f1:e6:7d:d7:bd:82:c0:d2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
        Validity
            Not Before: Jan  1 16:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5428acacfb4dbed07b6ec7264065af64a6ed1c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:16:0d:bf:e3:e7:e8:d0:4e:79:06:0c:75:a0:
                    f2:22:e8:4e:e9:d7:21:26:21:e9:90:36:4b:3e:eb:
                    dd:ac:bb:ad:70:08:c2:f4:19:0e:12:78:9f:bf:ba:
                    72:bb:f6:5d:83:7b:24:f0:9b:37:51:fe:42:a4:a9:
                    bf:26:5e:02:63:65:66:0d:5b:11:51:8c:bc:c4:16:
                    62:fb:1d:f6:0a:38:7a:4a:e9:7d:ad:73:f8:df:5e:
                    df:72:23:d3:3d:16:84:f7:e2:6f:6a:ef:58:d7:e0:
                    0d:80:e5:16:ba:c5:d0:d7:ef:37:cb:51:3e:4a:cc:
                    aa:95:ca:df:d2:88:6a:50:83:a9:65:4e:e1:78:59:
                    7b:19:8d:51:00:ab:ca:22:3d:8f:d2:da:1f:db:58:
                    c7:51:48:19:36:68:47:7a:3d:64:6d:85:bd:c4:06:
                    4a:d9:27:11:ac:cb:29:99:a0:dd:71:69:52:1b:c0:
                    85:fb:32:dd:8a:60:b0:fb:b9:08:9b:60:7c:65:cc:
                    83:47:d1:b5:1c:ca:6d:30:40:55:13:6a:cb:fa:25:
                    b6:75:69:8c:33:b8:5a:39:c3:ad:71:a7:08:80:e2:
                    f4:43:af:fb:fe:c8:80:13:9e:b1:e5:04:98:19:4d:
                    69:23:bc:2a:76:73:55:61:fb:dc:a7:1c:1b:98:6e:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:28:AC:AC:FB:4D:BE:D0:7B:6E:C7:26:40:65:AF:64:A6:ED:1C:5A
            X509v3 Authority Key Identifier:
                keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/VCisrPtNvtB7bscmQGWvZKbtHFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:ab:fe:e9:bb:6d:5a:94:4f:c6:10:9b:de:fb:ea:fa:2d:de:
         2b:53:31:e5:82:ac:85:55:05:b4:0f:dd:86:65:78:d0:06:33:
         79:e3:e3:6a:ae:70:83:cb:ee:70:aa:cd:e2:4f:dc:32:46:85:
         3b:06:03:a9:79:9d:79:b7:b2:dd:37:a3:95:72:75:43:54:40:
         a8:a5:d8:f0:ce:9f:20:bb:e5:bc:8b:8d:fd:a1:3f:1e:9e:ed:
         fd:2f:48:14:96:c3:c4:ef:bc:14:14:87:82:61:65:fb:ae:71:
         6b:69:5e:32:67:a8:18:4c:b8:05:20:77:a2:d9:76:dc:c4:34:
         65:50:d5:14:1e:5a:0c:d9:a0:81:30:ec:1e:05:9c:27:ff:20:
         c6:0a:dd:73:11:71:4a:28:c6:b5:d9:cd:d1:a4:1f:85:9b:dc:
         3a:80:4b:3e:69:02:df:06:fd:7b:a9:da:f2:78:c0:81:0e:bc:
         de:49:34:ee:51:7a:ec:d9:25:5b:f8:68:d5:94:eb:fd:c8:c3:
         cd:d4:1b:ae:67:dd:0a:5c:70:77:6d:7d:f0:dd:e8:b4:50:5e:
         be:d9:3e:aa:20:a9:72:64:33:97:ac:82:51:1e:64:8f:5e:54:
         77:e9:18:8a:54:9d:07:1d:2e:78:ea:fa:cf:fd:b2:e7:ec:77:
         e9:2d:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:43 2026 by rpki-client