This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/vvIOu90M6kEZ71mN06u0tYK02eU.roa
File:                     vvIOu90M6kEZ71mN06u0tYK02eU.roa (raw, json)
Hash identifier:          rr9r1oYZxg4M15XzRNVPfU9mZGnGg57yCNPY5TXNgYg=
Subject key identifier:   BE:F2:0E:BB:DD:0C:EA:41:19:EF:59:8D:D3:AB:B4:B5:82:B4:D9:E5
Certificate issuer:       /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial:       019B7834F3737DB74AB72ECD06F59567C2BD
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/vvIOu90M6kEZ71mN06u0tYK02eU.roa
Signing time:             Thu 01 Jan 2026 06:18:14 +0000
ROA not before:           Thu 01 Jan 2026 06:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48455
IP address blocks:        195.162.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:f3:73:7d:b7:4a:b7:2e:cd:06:f5:95:67:c2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
        Validity
            Not Before: Jan  1 06:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bef20ebbdd0cea4119ef598dd3abb4b582b4d9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:6b:1d:7a:0b:58:6a:6f:8d:32:e1:20:ee:
                    d4:a5:56:27:06:b6:16:3c:fe:30:9a:b3:e3:be:7a:
                    f9:9b:e3:d6:d7:08:ae:3d:84:5b:a6:50:45:f8:24:
                    0c:80:10:8a:c3:3d:a2:4b:16:37:f8:55:e7:69:7d:
                    73:dd:95:8a:cc:73:61:58:54:f7:c3:a7:6f:e2:80:
                    83:5a:ef:64:cb:28:3f:b8:74:8f:ea:72:b3:84:29:
                    e0:9e:f4:d5:ce:c1:71:d5:5b:04:6b:25:7f:31:fa:
                    63:b5:14:0b:4b:85:de:67:10:15:80:79:08:bd:78:
                    eb:85:78:df:9e:eb:d8:eb:c2:b3:4f:74:65:d1:73:
                    c9:bb:ae:2e:24:b3:54:82:b8:e1:2e:89:74:b4:77:
                    1c:00:21:af:bf:df:fe:fb:1c:9e:3b:76:1f:1c:e9:
                    b2:8b:93:e8:31:28:e4:d9:11:51:85:4a:dd:c3:55:
                    be:bc:a0:7e:8d:5b:20:19:70:b2:b1:2b:67:bd:37:
                    c4:dd:18:8f:81:28:82:7d:f2:a8:b6:a9:0e:7f:66:
                    79:64:ec:0a:4a:cb:66:1d:38:b5:b3:38:a8:e6:c6:
                    75:32:f3:48:a7:f0:2c:61:99:93:0c:8f:ef:9a:87:
                    ed:fc:56:2e:9d:32:2f:4a:5b:88:29:7e:27:b5:aa:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F2:0E:BB:DD:0C:EA:41:19:EF:59:8D:D3:AB:B4:B5:82:B4:D9:E5
            X509v3 Authority Key Identifier:
                keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/vvIOu90M6kEZ71mN06u0tYK02eU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.162.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:1e:13:e8:c4:69:8c:87:2d:84:1d:86:e1:ea:61:5a:ce:18:
         b0:5d:21:65:df:61:83:d1:f0:ac:0f:5a:d7:b7:c2:52:6c:ed:
         ea:03:e9:ec:93:a1:3f:26:d6:3e:5a:cc:32:fa:1e:b9:cd:07:
         62:fd:cf:6d:aa:38:b1:2c:c0:ba:a0:05:a0:2a:0e:90:42:07:
         b6:9a:f2:99:c0:2d:14:ba:a5:c0:40:2f:07:de:7e:24:ac:d9:
         e6:4f:2b:6e:25:57:c1:06:b6:68:2e:1d:27:56:27:d2:a0:c6:
         28:a1:4d:9a:57:0a:8f:55:4a:36:a5:18:9a:55:70:e6:e4:89:
         74:a9:be:67:07:d5:b5:09:03:a8:24:60:58:41:ad:fd:2f:2f:
         2d:d1:83:0d:70:9f:f6:b7:fd:f8:00:d9:63:a1:18:47:f8:19:
         b6:20:db:84:3c:fb:05:62:60:b7:df:3f:65:6e:5a:0f:93:ce:
         41:92:9c:10:ef:1b:fd:0f:27:37:62:fc:49:fb:6a:97:40:64:
         c7:80:63:a4:7e:09:e8:51:3b:af:52:d7:45:6e:21:e4:74:21:
         0a:a8:61:08:2b:11:91:c3:f4:3b:f2:39:35:e5:af:d1:a5:15:
         6c:5a:fe:a5:d4:e2:14:5a:5d:66:ad:30:5b:b5:9c:c3:e2:8e:
         10:c4:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:20 2026 by rpki-client