This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VilG8hdH4e2PgtPf0HH0QvCs9SA.roa
File:                     VilG8hdH4e2PgtPf0HH0QvCs9SA.roa (raw, json)
Hash identifier:          X3S3ljAAWfahEeHRRoaDomf7TEYfABDZSsMixEQ2Qa8=
Subject key identifier:   56:29:46:F2:17:47:E1:ED:8F:82:D3:DF:D0:71:F4:42:F0:AC:F5:20
Certificate issuer:       /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial:       019B7F807E2826FA46ED5A6B3EAF68E6D5D5
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VilG8hdH4e2PgtPf0HH0QvCs9SA.roa
Signing time:             Fri 02 Jan 2026 16:18:05 +0000
ROA not before:           Fri 02 Jan 2026 16:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207557
IP address blocks:        194.9.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:80:7e:28:26:fa:46:ed:5a:6b:3e:af:68:e6:d5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
        Validity
            Not Before: Jan  2 16:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=562946f21747e1ed8f82d3dfd071f442f0acf520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:e1:dc:f0:7e:f4:f5:58:62:14:3d:34:c2:
                    e5:d3:8e:e4:6c:e3:fa:8a:cf:f0:c8:bc:f8:18:82:
                    55:6b:28:7f:dc:d0:fc:f9:82:b1:a6:28:28:30:3b:
                    fd:3a:8a:10:3c:cb:27:80:4a:22:1d:48:06:3e:eb:
                    fb:7a:a1:84:c8:64:dd:49:94:57:55:33:01:4d:e2:
                    12:e8:3f:6a:6d:46:ca:bf:de:ba:63:49:4e:26:3e:
                    cf:0b:4d:03:db:56:48:81:b2:bb:a4:71:5d:34:37:
                    ef:8e:5b:c6:73:be:6a:54:9a:e8:16:06:9d:37:ac:
                    94:ad:f6:93:26:55:21:2c:f4:6e:4b:5f:fe:cd:c0:
                    d7:c0:e5:0c:5c:69:8e:f3:92:a5:0e:61:3a:1b:5f:
                    50:a3:0f:e4:39:71:03:83:77:fd:5b:e5:02:12:c3:
                    87:1b:a8:ec:79:7a:a2:1a:8d:c7:bc:39:92:fe:c1:
                    4c:3e:17:db:f7:80:01:16:74:08:83:78:2c:4e:72:
                    ab:ae:69:7f:97:cd:41:e1:76:f4:c9:f7:86:1e:43:
                    fd:fd:ac:95:9d:d4:b4:98:63:9b:4c:72:a9:c1:b8:
                    f6:30:c8:6a:7a:74:cf:45:e5:5b:22:07:5a:c3:f6:
                    de:de:19:07:d3:39:d7:d6:88:f1:b7:e1:cd:02:e8:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:29:46:F2:17:47:E1:ED:8F:82:D3:DF:D0:71:F4:42:F0:AC:F5:20
            X509v3 Authority Key Identifier:
                keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VilG8hdH4e2PgtPf0HH0QvCs9SA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:76:c1:8f:dd:f4:60:2b:44:4f:af:88:ea:4e:03:cb:35:
         7b:4a:3a:91:cc:d5:d0:e9:ab:fb:2d:96:2d:9b:70:12:8f:f4:
         d4:2f:8f:8f:34:0b:73:3b:dc:c8:90:88:8b:95:95:34:94:cd:
         47:4c:7e:5f:ba:9a:3f:d3:d1:9d:eb:db:31:ee:bc:e0:f6:1d:
         34:01:04:d2:5a:f2:c5:78:e5:ae:d4:b7:cf:fc:bc:f1:2e:45:
         c9:33:89:7b:04:92:b7:6d:ca:e4:26:4d:a0:24:ec:c6:3f:b4:
         99:d1:3d:95:eb:c7:63:dc:32:23:5b:63:cd:5a:74:19:62:1a:
         e8:f6:c1:00:3f:04:e6:cf:2d:56:d0:01:a9:6d:f4:32:77:9c:
         32:83:ae:a6:4e:6d:d8:0e:72:17:df:2d:fd:bf:de:3a:cf:fc:
         5d:ad:90:4d:64:26:4f:7a:4e:f3:eb:56:63:c0:9e:57:a7:46:
         27:b3:d0:9f:e1:fc:7b:63:f3:99:70:e5:7c:b5:b3:73:b4:c7:
         72:84:5f:49:fb:61:17:2f:52:f4:c9:40:69:0a:18:98:15:a6:
         eb:ca:bd:8d:52:2d:88:26:6a:76:23:5b:b7:c6:dd:48:e3:52:
         1f:51:85:1f:ee:83:0e:b7:5d:34:f8:75:e3:78:f2:20:8a:94:
         b7:7a:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:38:02 2026 by rpki-client