This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/vgtVr70kHPIfAxYDvnSk95pwEEc.roa
File:                     vgtVr70kHPIfAxYDvnSk95pwEEc.roa (raw, json)
Hash identifier:          89W5k6eZxucvQF9QfxUPssd3/Izg32hrnMQ2Jj8vRdM=
Subject key identifier:   BE:0B:55:AF:BD:24:1C:F2:1F:03:16:03:BE:74:A4:F7:9A:70:10:47
Certificate issuer:       /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial:       019B7F8425D62B040F6242C4EAAE9DE01CF6
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/vgtVr70kHPIfAxYDvnSk95pwEEc.roa
Signing time:             Fri 02 Jan 2026 16:22:05 +0000
ROA not before:           Fri 02 Jan 2026 16:22:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203187
IP address blocks:        185.82.80.0/22 maxlen: 24
                          185.238.124.0/22 maxlen: 24
                          2a05:8e00::/29 maxlen: 48
                          2a0c:2e80::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:25:d6:2b:04:0f:62:42:c4:ea:ae:9d:e0:1c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Validity
            Not Before: Jan  2 16:22:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=be0b55afbd241cf21f031603be74a4f79a701047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:d2:e8:34:06:72:9c:09:84:86:f1:d1:57:
                    fb:84:be:9c:ee:09:d7:8a:08:08:35:4d:ce:25:3a:
                    66:b5:fd:14:39:23:3d:25:db:98:d1:14:9f:70:d5:
                    a1:5f:e0:29:cc:ca:e0:b2:11:88:09:ec:2d:a3:91:
                    d7:7d:33:d6:97:5b:06:5c:5a:5c:c5:07:b8:ab:68:
                    14:da:14:77:55:30:43:0a:64:5a:9d:5c:b3:36:01:
                    a8:47:0a:98:71:dc:ed:5a:89:6b:b5:f4:5d:b8:3d:
                    b9:a6:24:0f:30:bf:c5:34:3b:54:d5:cf:44:0b:65:
                    91:38:2e:cb:6c:cc:d8:6d:58:f0:3d:7a:15:ab:5c:
                    df:62:40:31:7d:ca:f3:00:a4:93:36:cc:d7:13:9e:
                    69:47:88:f6:97:f7:6c:23:9b:b1:58:77:c7:27:73:
                    09:6e:ee:cb:aa:f8:c7:2d:ae:76:93:2d:91:33:bb:
                    07:29:19:80:9e:70:8a:99:e7:8f:e0:bc:75:ec:fb:
                    d9:3d:c0:1f:20:b1:77:c5:43:a8:db:6d:4f:f2:84:
                    5f:7d:6f:e1:16:0c:32:b3:32:bf:95:c4:ae:89:cc:
                    bc:c3:ab:c6:ed:04:01:24:b7:53:94:7b:54:69:24:
                    20:79:c0:a7:25:7a:84:33:24:10:a7:ed:ba:5f:55:
                    40:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0B:55:AF:BD:24:1C:F2:1F:03:16:03:BE:74:A4:F7:9A:70:10:47
            X509v3 Authority Key Identifier:
                keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/vgtVr70kHPIfAxYDvnSk95pwEEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.80.0/22
                  185.238.124.0/22
                IPv6:
                  2a05:8e00::/29
                  2a0c:2e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:33:b1:ce:51:d9:10:99:ee:f5:fd:07:38:47:25:48:da:
         8a:6c:94:23:f2:39:86:fd:67:fe:53:95:dd:30:b9:bb:1f:34:
         55:2c:2e:b4:f2:cf:73:90:80:5c:9c:ac:61:21:7a:6d:51:4a:
         2a:df:3c:61:db:17:21:b6:c6:b7:b8:d1:6f:5d:fe:9a:a3:10:
         32:84:30:15:2c:fc:7c:93:cb:da:04:0c:25:27:13:99:bf:c7:
         79:52:30:82:65:8a:92:3f:6e:e8:ff:f3:08:2b:37:79:a7:eb:
         68:01:02:3f:9a:cd:31:b7:ce:4d:1a:a3:9f:74:71:de:37:a3:
         3f:8a:96:90:fc:bb:38:db:58:75:85:58:ae:ad:e3:ea:da:ea:
         7a:d7:4c:da:59:7e:d1:51:17:0d:fc:c9:d0:62:47:ac:d2:ef:
         71:71:54:17:b3:56:aa:bc:f2:8c:70:74:14:db:76:28:d7:e4:
         d3:dc:bd:80:47:5d:8b:5a:be:59:39:e6:45:3b:25:a6:5d:5f:
         c3:e2:21:96:a0:c8:a8:af:e0:d9:66:69:eb:18:e2:61:01:19:
         1c:99:9d:9e:10:18:77:97:8c:06:6b:21:fc:5b:21:e6:e3:10:
         d8:32:ee:79:76:e6:aa:a5:95:96:ab:aa:49:f4:55:b9:5c:02:
         58:9b:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:15 2026 by rpki-client