This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/vYDkiQ8284qwQlXQwbK7sIbrgu4.roa
File:                     vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (raw, json)
Hash identifier:          atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=
Subject key identifier:   BD:80:E4:89:0F:36:F3:8A:B0:42:55:D0:C1:B2:BB:B0:86:EB:82:EE
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       019B7C13500CEF6E55AD9A10A01C335D58AB
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/vYDkiQ8284qwQlXQwbK7sIbrgu4.roa
Signing time:             Fri 02 Jan 2026 00:19:59 +0000
ROA not before:           Fri 02 Jan 2026 00:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1930
IP address blocks:        192.26.239.0/24 maxlen: 24
                          192.82.214.0/24 maxlen: 24
                          192.92.135.0/24 maxlen: 24
                          192.94.24.0/24 maxlen: 24
                          192.133.108.0/24 maxlen: 24
                          192.147.155.0/24 maxlen: 24
                          192.153.13.0/24 maxlen: 24
                          192.207.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:50:0c:ef:6e:55:ad:9a:10:a0:1c:33:5d:58:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Jan  2 00:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd80e4890f36f38ab04255d0c1b2bbb086eb82ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:cc:2e:1a:f3:fd:c2:a0:42:88:99:dd:65:
                    96:2f:94:3a:0c:e7:33:7b:06:2e:a6:64:5f:6b:ff:
                    3f:ce:da:d2:57:5a:88:b7:96:1c:0d:b2:ed:80:76:
                    e1:24:4d:c7:3c:4c:3c:ea:36:9d:f0:fb:d4:9d:ae:
                    ff:7b:09:12:f4:c4:b6:75:85:b1:d6:88:e9:ff:3f:
                    8e:bd:e6:7e:d4:4e:76:34:46:8e:6c:17:c2:e2:a4:
                    a9:53:a7:3d:3a:d7:f5:19:3b:03:47:29:c3:2a:81:
                    10:9b:d4:30:e1:3e:53:51:a3:cc:d5:67:a5:88:c9:
                    ee:9f:63:98:62:85:b3:22:f7:dc:82:33:cd:86:5b:
                    79:41:95:44:0a:fd:ac:1d:0a:fd:6d:26:34:35:1f:
                    37:e2:ce:14:ff:62:01:0d:e2:19:eb:d8:aa:e7:8b:
                    14:a8:74:31:36:11:ce:27:49:ed:2c:58:df:4f:eb:
                    69:29:13:e6:78:c4:49:a2:19:c8:97:f7:91:00:1c:
                    6b:a0:ea:b5:c7:dc:ab:92:41:6a:23:ca:51:2c:64:
                    91:c9:8a:3c:19:fd:4d:39:d9:e6:74:5d:aa:9b:76:
                    c3:a0:75:3f:a4:7c:7e:09:69:9c:a6:39:80:fb:6e:
                    9d:02:d6:be:d0:9c:51:71:c7:6f:18:d2:84:0a:1e:
                    a1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:80:E4:89:0F:36:F3:8A:B0:42:55:D0:C1:B2:BB:B0:86:EB:82:EE
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/vYDkiQ8284qwQlXQwbK7sIbrgu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.239.0/24
                  192.82.214.0/24
                  192.92.135.0/24
                  192.94.24.0/24
                  192.133.108.0/24
                  192.147.155.0/24
                  192.153.13.0/24
                  192.207.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:23:68:0f:b0:6c:f1:f1:6f:4d:e4:39:d8:8a:d9:29:51:
         4a:6f:df:c2:8e:d9:0c:1c:c7:eb:98:a1:fe:28:fd:3d:eb:a1:
         a2:f3:5f:05:e0:8c:55:1d:9b:a5:04:70:98:09:99:b8:6d:2e:
         f6:c1:ce:bc:99:9d:43:98:3e:95:a6:94:79:1f:f8:c3:6c:dd:
         f2:69:98:81:84:ef:11:84:53:9f:29:6e:e3:c0:95:f3:55:9d:
         3f:32:d6:9b:9f:10:d9:cb:6c:a3:b5:f1:7b:6e:2e:b4:9b:70:
         06:93:ed:78:54:ba:55:57:73:b6:3d:31:86:a8:85:0b:ab:ed:
         fa:4e:46:6c:d1:7e:1f:94:02:3a:b6:62:8e:fb:fa:60:a0:5a:
         95:47:30:cf:0d:58:16:83:ad:38:d4:10:77:94:08:b0:ae:55:
         2f:40:a9:26:d2:84:9c:1a:b5:5c:38:75:ac:15:b6:c9:db:9e:
         ef:4e:aa:d3:c5:31:6e:6e:2a:38:97:b4:35:eb:6d:bb:ad:21:
         18:b4:e9:c4:90:bc:cb:e1:d3:72:93:25:f9:09:d1:4d:15:91:
         f4:d9:2e:0c:6f:4e:3f:ca:b8:b4:6b:aa:24:29:47:f4:fb:18:
         54:9e:d2:a1:6d:7d:1a:e3:ce:59:d7:db:12:88:fa:11:f6:ea:
         e7:c1:ef:fc
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZt8E1AM725VrZoQoBwzXVirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi
NjkyMzgwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDgwZTQ4OTBmMzZmMzhhYjA0MjU1ZDBjMWIyYmJiMDg2ZWI4MmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+nMLhrz/cKgQoiZ3WWWL5Q6DOcz
ewYupmRfa/8/ztrSV1qIt5YcDbLtgHbhJE3HPEw86jad8PvUna7/ewkS9MS2dYWx
1ojp/z+OveZ+1E52NEaObBfC4qSpU6c9Otf1GTsDRynDKoEQm9Qw4T5TUaPM1Wel
iMnun2OYYoWzIvfcgjPNhlt5QZVECv2sHQr9bSY0NR834s4U/2IBDeIZ69iq54sU
qHQxNhHOJ0ntLFjfT+tpKRPmeMRJohnIl/eRABxroOq1x9yrkkFqI8pRLGSRyYo8
Gf1NOdnmdF2qm3bDoHU/pHx+CWmcpjmA+26dAta+0JxRccdvGNKECh6h1QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFL2A5IkPNvOKsEJV0MGyu7CG64LuMB8GA1UdIwQY
MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct
ZTBkOTE0YzFjYjUwLzEvdllEa2lRODI4NHF3UWxYUXdiSzdzSWJyZ3U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw
LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAwBrvAwQA
wFLWAwQAwFyHAwQAwF4YAwQAwIVsAwQAwJObAwQAwJkNAwQAwM/EMA0GCSqGSIb3
DQEBCwUAA4IBAQBj+SNoD7Bs8fFvTeQ52IrZKVFKb9/CjtkMHMfrmKH+KP0966Gi
818F4IxVHZulBHCYCZm4bS72wc68mZ1DmD6VppR5H/jDbN3yaZiBhO8RhFOfKW7j
wJXzVZ0/MtabnxDZy2yjtfF7bi60m3AGk+14VLpVV3O2PTGGqIULq+36TkZs0X4f
lAI6tmKO+/pgoFqVRzDPDVgWg6041BB3lAiwrlUvQKkm0oScGrVcOHWsFbbJ257v
TqrTxTFubio4l7Q16227rSEYtOnEkLzL4dNykyX5CdFNFZH02S4Mb04/yri0a6ok
KUf0+xhUntKhbX0a485Z19sSiPoR9urnwe/8
-----END CERTIFICATE-----
Generated at Mon Jan 26 22:33:02 2026 by rpki-client