This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/vAWr7DCiErOxN_C5-TPGoRi3VBg.roa
File:                     vAWr7DCiErOxN_C5-TPGoRi3VBg.roa (raw, json)
Hash identifier:          yOuxPDX3hQeFVT5meNKt6VOVi7//Pn4HmhuFPEp2iEM=
Subject key identifier:   BC:05:AB:EC:30:A2:12:B3:B1:37:F0:B9:F9:33:C6:A1:18:B7:54:18
Certificate issuer:       /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial:       019B77C6C7A078EB346061723E625320267A
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/vAWr7DCiErOxN_C5-TPGoRi3VBg.roa
Signing time:             Thu 01 Jan 2026 04:17:54 +0000
ROA not before:           Thu 01 Jan 2026 04:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28919
IP address blocks:        193.163.14.0/24 maxlen: 24
                          2a10:d100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:c7:a0:78:eb:34:60:61:72:3e:62:53:20:26:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
        Validity
            Not Before: Jan  1 04:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc05abec30a212b3b137f0b9f933c6a118b75418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7d:16:d1:39:1b:50:d9:2a:57:1c:67:5e:25:
                    ea:eb:d5:1b:ab:fb:72:75:2c:be:ef:24:da:79:02:
                    21:16:7a:fd:9b:e3:88:2d:ad:f1:c4:af:be:6d:f7:
                    65:c9:2a:6a:af:33:29:5e:12:14:e0:0b:60:e5:a3:
                    cd:96:40:c1:0d:27:ff:37:bc:23:f1:84:7b:5f:c3:
                    b4:ce:70:e7:07:6d:52:cb:ba:37:7f:0a:41:75:ee:
                    2e:a1:c6:55:23:fe:66:22:81:e8:61:bc:b3:b4:ce:
                    0a:90:c7:39:53:67:73:bb:8e:d9:23:39:30:e9:46:
                    10:25:fa:df:33:ad:22:8f:b2:4c:b1:3f:8b:08:79:
                    07:f2:2c:bd:5e:84:78:0e:7b:f7:9c:f2:93:eb:14:
                    f6:31:89:e8:8f:4b:60:83:0b:a7:6b:af:e7:f1:05:
                    20:b1:2a:89:9f:fb:14:58:ab:e8:b9:84:31:19:18:
                    10:42:9c:b1:fe:4f:d0:aa:48:96:33:c4:bf:c4:29:
                    dd:e8:74:2d:49:20:cb:44:69:d0:43:ed:25:17:03:
                    36:4c:2a:39:81:78:92:8f:ab:cc:77:ad:6c:f8:f8:
                    1b:6e:b1:d1:ad:62:dc:6f:e3:52:cb:cd:a5:38:bf:
                    da:ca:18:48:3e:c3:91:0e:6d:68:cd:c4:92:cb:6a:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:05:AB:EC:30:A2:12:B3:B1:37:F0:B9:F9:33:C6:A1:18:B7:54:18
            X509v3 Authority Key Identifier:
                keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/vAWr7DCiErOxN_C5-TPGoRi3VBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.14.0/24
                IPv6:
                  2a10:d100::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:9f:7b:bd:09:c9:c2:1b:3a:2f:30:b6:ac:7a:29:5b:04:75:
         4e:ee:44:db:69:6b:d9:a1:ab:60:25:29:b0:37:50:43:3a:9c:
         8b:97:a7:3a:2a:d4:bd:f9:f2:c6:92:a0:d7:2c:29:7e:09:8d:
         3b:55:8a:83:0d:2f:1d:e7:f9:27:0b:99:54:dd:06:43:99:25:
         ac:e0:cf:32:99:28:b3:48:c7:e7:b0:22:42:dd:f0:48:4c:5a:
         72:a7:79:03:2b:e4:1b:57:60:b4:4e:73:b1:c1:97:71:7f:dd:
         25:5f:07:3c:ab:8c:9f:a5:0d:b0:d3:c5:16:d3:c9:d7:84:fb:
         7f:dc:56:79:82:8a:a3:ba:ad:ee:43:90:a6:0f:81:1a:3b:90:
         df:9d:5a:8e:ee:b9:97:73:32:57:2b:4d:11:38:1c:20:e2:b3:
         6f:9c:e5:1e:61:96:77:bb:79:e7:26:46:35:68:28:ec:84:59:
         c7:b9:67:a6:58:b4:12:6a:32:68:27:14:dd:2c:99:f8:a9:67:
         e6:33:74:fb:76:36:08:cc:03:c6:8d:db:aa:3d:42:f1:ab:ed:
         32:3d:11:14:80:90:d3:d3:e4:b6:83:24:78:b5:5c:42:2b:08:
         1b:9c:56:8f:57:15:00:c3:40:21:66:0e:21:7e:06:c3:14:8c:
         71:e6:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:32 2026 by rpki-client