This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/VqtWffeEI3gFa2JxkIrr6uKyEHQ.roa
File:                     VqtWffeEI3gFa2JxkIrr6uKyEHQ.roa (raw, json)
Hash identifier:          49h69eiCv9MsxP2gN+eJBOZr+EudlWoVpdEDAOKpTcI=
Subject key identifier:   56:AB:56:7D:F7:84:23:78:05:6B:62:71:90:8A:EB:EA:E2:B2:10:74
Certificate issuer:       /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial:       019B7834971F1525CDFC93BA4B7E838F775B
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/VqtWffeEI3gFa2JxkIrr6uKyEHQ.roa
Signing time:             Thu 01 Jan 2026 06:17:51 +0000
ROA not before:           Thu 01 Jan 2026 06:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48893
IP address blocks:        195.114.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:97:1f:15:25:cd:fc:93:ba:4b:7e:83:8f:77:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
        Validity
            Not Before: Jan  1 06:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56ab567df7842378056b6271908aebeae2b21074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:3e:fc:6c:d6:2c:e3:dc:17:b6:76:fa:5f:
                    35:c7:6b:4a:7e:32:06:b1:57:55:04:b7:08:fa:ef:
                    b0:a4:b5:b7:dc:02:60:dd:e9:2e:a6:e1:ed:c1:82:
                    4c:60:e9:61:8b:cb:98:c0:2a:cb:d8:ca:4b:75:fd:
                    0d:ec:d9:3e:27:76:40:e2:c9:18:ad:71:e5:53:91:
                    65:ab:8f:73:83:1a:54:94:5b:27:77:cc:86:4e:46:
                    e2:c3:da:91:4d:39:44:10:e0:3d:be:7f:be:b6:93:
                    d5:fd:5c:56:d0:65:53:fc:bd:18:cd:16:ad:17:d8:
                    71:7b:cb:48:ec:03:a2:a0:5e:cb:ad:9e:a9:6b:f3:
                    a8:c1:5e:f8:75:63:24:96:aa:0b:ec:bf:e8:9e:9d:
                    aa:4d:81:a9:02:dc:78:6a:9a:a1:d8:11:51:1d:85:
                    ef:8f:a4:59:ea:f2:c9:ac:32:02:98:02:90:f7:be:
                    f1:de:35:c7:99:a9:05:54:14:f5:4a:17:7b:a9:f1:
                    71:47:db:f4:df:3e:aa:70:1f:81:2d:cc:71:46:f6:
                    7e:fd:eb:fd:a6:41:05:25:4b:c0:f9:98:71:9c:e9:
                    16:19:a7:63:50:dd:e0:3a:3d:89:26:81:78:eb:72:
                    7f:b7:52:84:65:ed:c8:b5:5a:8b:88:41:78:34:46:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AB:56:7D:F7:84:23:78:05:6B:62:71:90:8A:EB:EA:E2:B2:10:74
            X509v3 Authority Key Identifier:
                keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/VqtWffeEI3gFa2JxkIrr6uKyEHQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:b7:fe:4d:c7:eb:14:24:f3:23:3b:9d:34:8c:bb:7b:02:
         28:72:b1:f2:03:12:04:ee:f6:07:48:51:3d:d3:70:21:d4:e6:
         7c:d3:f9:8b:16:16:55:f1:8f:0c:39:e0:47:66:f4:75:0a:da:
         f2:49:55:94:c6:12:1b:37:b2:d4:fa:6b:c6:0f:4e:9f:bf:cd:
         4b:93:15:b5:20:2a:85:5a:53:5a:1a:79:bf:fb:86:2d:9b:ac:
         bc:28:84:f0:7d:c6:8e:44:23:86:e3:88:7c:de:6f:3c:96:f7:
         15:eb:da:09:c2:df:1d:fa:49:03:e1:fa:e1:64:b0:d1:c7:98:
         a9:f6:66:2b:e6:28:41:a3:d9:ba:e1:0b:0e:34:01:3c:b3:07:
         55:e4:24:a8:79:7f:34:eb:4a:2f:59:69:6e:92:d4:11:00:51:
         d6:54:7b:78:ef:d6:09:9b:23:86:cf:60:58:4f:6e:c3:ad:5d:
         80:86:0f:1a:58:0e:ec:38:47:4a:23:60:97:c7:b6:f2:7e:20:
         ee:bf:f0:a9:9d:5b:68:96:30:0e:84:08:7e:e7:24:18:62:05:
         8b:6d:a7:86:d6:b6:9d:68:a7:ef:0b:1d:46:aa:e5:69:3b:13:
         74:f1:02:ba:14:99:15:33:96:bf:b2:61:53:a1:19:3a:ef:a4:
         78:b5:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:13 2026 by rpki-client