This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/visYnsWssq-v4yl52IlMFPrlMUk.roa
File:                     visYnsWssq-v4yl52IlMFPrlMUk.roa (raw, json)
Hash identifier:          Qj6uck81QSogg2iX6yeaIJc7cuAtBsJX3p/4Z4VS0Lk=
Subject key identifier:   BE:2B:18:9E:C5:AC:B2:AF:AF:E3:29:79:D8:89:4C:14:FA:E5:31:49
Certificate issuer:       /CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Certificate serial:       019B797E5D80F3BC8ACCFEA6408B24F34586
Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/visYnsWssq-v4yl52IlMFPrlMUk.roa
Signing time:             Thu 01 Jan 2026 12:18:03 +0000
ROA not before:           Thu 01 Jan 2026 12:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31592
IP address blocks:        193.247.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:5d:80:f3:bc:8a:cc:fe:a6:40:8b:24:f3:45:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba
        Validity
            Not Before: Jan  1 12:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=be2b189ec5acb2afafe32979d8894c14fae53149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:0a:49:e5:bf:15:b0:33:af:be:e4:8d:cd:
                    bf:85:75:77:79:a8:a3:ea:b9:88:b8:46:8c:1d:b9:
                    66:1b:98:d3:5a:c1:5f:c3:11:fc:30:2f:d8:4a:ce:
                    f8:10:a1:1e:c8:ea:c6:4f:a0:28:df:41:f1:63:ea:
                    80:dd:65:69:a2:84:f5:75:ad:53:3b:95:26:29:f0:
                    95:c6:df:d9:94:59:47:d3:20:76:e4:2e:62:30:22:
                    b9:a6:fc:0d:64:ef:83:1e:03:23:f2:16:8a:ae:ff:
                    4c:d6:a9:54:ce:dc:85:ec:cc:88:5f:88:38:d5:9c:
                    19:5a:20:15:83:51:d5:a6:90:fb:b5:65:ec:fd:c7:
                    82:91:c5:e8:84:b8:22:b2:bb:3a:4c:fd:ec:b5:d9:
                    28:10:00:27:e8:b2:84:00:8e:6b:44:b0:dc:bf:be:
                    9a:f5:8c:52:f0:15:45:2d:ba:f6:8e:23:fd:3f:27:
                    a3:67:be:21:d1:bc:e8:01:29:39:bd:83:c6:d2:5c:
                    b1:cd:5a:56:5a:d4:df:ef:4a:e5:69:f6:61:61:22:
                    0b:fd:0f:70:9d:a3:ea:46:6d:13:64:68:9e:c1:96:
                    36:48:9d:f0:7a:1f:3d:cb:9c:f2:02:04:85:ed:ee:
                    b8:23:86:d2:7b:90:44:72:3e:b5:d4:e0:30:7c:0d:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2B:18:9E:C5:AC:B2:AF:AF:E3:29:79:D8:89:4C:14:FA:E5:31:49
            X509v3 Authority Key Identifier:
                keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/visYnsWssq-v4yl52IlMFPrlMUk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e1:18:8d:28:0a:02:fc:0d:b1:0a:a6:18:a9:f8:43:8c:fd:
         38:04:76:6d:a5:30:da:bf:8b:2c:53:92:8f:5b:cd:0b:8c:cd:
         29:d6:06:c6:a8:dc:91:2f:67:2d:6d:e1:b8:5b:48:1b:3b:7a:
         13:71:23:75:eb:e6:c8:2a:11:dc:94:38:e0:af:80:09:95:4b:
         1f:23:0b:74:e0:23:fd:b4:af:f6:8a:09:20:61:bc:55:5a:c5:
         83:9f:f7:03:5f:c5:40:d3:f1:b2:eb:a8:fd:09:32:5a:96:6d:
         97:ef:91:41:13:1a:69:45:aa:cc:c5:b4:1a:33:c3:8b:18:7b:
         55:ca:26:bb:77:c1:a2:ce:ee:5c:52:04:bc:df:92:b6:7c:b0:
         bc:56:53:cd:5a:57:58:c5:1b:b4:e4:f2:a9:94:84:78:35:76:
         32:e3:36:7c:93:db:83:4e:6e:bc:c8:0f:0c:b3:65:de:48:6d:
         4a:6c:66:84:da:3e:4c:d0:2d:ba:41:0e:06:93:b9:ea:5a:1a:
         c4:d1:c0:43:4e:74:5d:14:89:6c:ab:60:b7:84:e2:4a:27:6b:
         c2:8f:93:5e:aa:eb:63:f0:fe:1b:33:81:bc:a9:2d:3e:53:99:
         9f:6e:fc:e6:3a:3d:82:f5:9f:c7:74:3a:84:1c:2a:7e:b3:e2:
         51:b4:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:26:55 2026 by rpki-client