This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/VXP_uFqv54kn5PXeZcQj6-zBdWM.roa
File:                     VXP_uFqv54kn5PXeZcQj6-zBdWM.roa (raw, json)
Hash identifier:          RmWBZcHSSZvH3KKmvnz7cJeoXnECiQumgZ2zixWZ+YE=
Subject key identifier:   55:73:FF:B8:5A:AF:E7:89:27:E4:F5:DE:65:C4:23:EB:EC:C1:75:63
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019B7C80348C36829342893739F60F21ED2D
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/VXP_uFqv54kn5PXeZcQj6-zBdWM.roa
Signing time:             Fri 02 Jan 2026 02:18:55 +0000
ROA not before:           Fri 02 Jan 2026 02:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     63199
IP address blocks:        93.88.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:34:8c:36:82:93:42:89:37:39:f6:0f:21:ed:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jan  2 02:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5573ffb85aafe78927e4f5de65c423ebecc17563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:b6:79:05:7b:67:12:f0:56:c0:14:9f:c5:
                    ff:21:df:de:a2:86:f7:d4:7d:f4:19:de:8f:d2:e0:
                    06:1b:55:e6:07:c0:c3:c1:2e:11:a1:a8:46:46:57:
                    70:d6:71:40:13:91:50:8d:6e:32:7d:cd:0f:9d:64:
                    69:fb:50:93:7f:f1:a1:51:f6:a6:81:44:02:1b:2e:
                    ce:af:e5:67:9c:07:50:4c:fb:7e:3c:65:df:46:61:
                    f3:cb:a9:6c:43:22:32:b7:4e:c0:44:13:ea:f2:89:
                    64:0f:f8:c3:80:b8:82:54:ee:79:60:8e:d7:2b:3d:
                    4c:85:7d:44:4d:74:b0:d1:61:18:58:ce:55:54:a0:
                    02:8d:7f:ae:6b:c1:95:70:08:2b:dd:71:ca:4e:06:
                    f9:4a:02:f8:86:a7:cd:15:9d:d3:ef:50:b4:fe:85:
                    c2:77:76:ef:3c:b7:ac:63:f2:98:83:08:b5:dc:ce:
                    56:f7:bb:96:72:dc:6b:34:82:a2:12:cf:41:42:fe:
                    55:05:85:1b:7c:f0:0e:ae:f5:dd:b1:1a:cb:ce:5a:
                    47:b1:aa:00:59:07:da:a4:09:e9:d1:0d:48:fa:e5:
                    c8:46:a1:07:09:9e:9d:c7:72:0b:cc:64:fa:a6:0a:
                    81:28:83:07:a2:ca:79:d2:84:08:11:10:82:5f:49:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:73:FF:B8:5A:AF:E7:89:27:E4:F5:DE:65:C4:23:EB:EC:C1:75:63
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/VXP_uFqv54kn5PXeZcQj6-zBdWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.88.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:99:97:f6:ba:d1:a5:0a:e4:fd:2a:a3:06:ef:45:6f:7a:b8:
         eb:8b:7a:16:8b:ae:85:54:4f:24:2a:eb:15:bb:1f:b4:48:d7:
         ca:4b:84:3c:6f:39:b8:97:0f:c8:39:46:e8:bd:92:42:53:64:
         1f:67:e4:35:aa:68:1f:e6:65:e1:55:1e:b9:45:1f:25:e8:87:
         f6:93:c0:65:8c:2d:41:c0:e8:22:f6:25:65:17:2b:81:1d:e5:
         76:54:4f:96:18:76:e5:b6:46:f1:0f:78:24:67:70:ea:2b:a5:
         6e:68:87:bf:c0:a5:50:76:de:4b:c5:5d:82:6b:4c:ba:1c:9f:
         7d:6b:ef:ac:b5:b1:c2:30:2c:d0:ce:c7:81:31:81:66:91:e9:
         34:a9:62:87:2b:9e:ae:32:1f:de:88:2a:0b:63:51:ff:4c:bf:
         44:78:27:18:fc:f7:ab:de:28:22:b6:a7:86:18:0d:ab:ed:29:
         91:d3:0a:8f:3a:4f:ae:ad:bc:88:b7:d3:c8:69:50:f3:ee:f1:
         2e:f8:a4:b4:c7:65:1e:d6:64:8f:fb:a5:a1:83:b6:55:d7:2c:
         0d:20:e4:de:b9:b8:4f:42:9e:a3:08:01:86:09:5c:b6:a8:05:
         29:13:98:3e:9f:3b:40:63:4e:7e:e2:fd:1e:d3:df:22:28:4f:
         8a:83:07:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gDSMNoKTQok3OfYPIe0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTczZmZiODVhYWZlNzg5MjdlNGY1ZGU2NWM0MjNlYmVjYzE3NTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3O2eQV7ZxLwVsAUn8X/Id/eoob3
1H30Gd6P0uAGG1XmB8DDwS4RoahGRldw1nFAE5FQjW4yfc0PnWRp+1CTf/GhUfam
gUQCGy7Or+VnnAdQTPt+PGXfRmHzy6lsQyIyt07ARBPq8olkD/jDgLiCVO55YI7X
Kz1MhX1ETXSw0WEYWM5VVKACjX+ua8GVcAgr3XHKTgb5SgL4hqfNFZ3T71C0/oXC
d3bvPLesY/KYgwi13M5W97uWctxrNIKiEs9BQv5VBYUbfPAOrvXdsRrLzlpHsaoA
WQfapAnp0Q1I+uXIRqEHCZ6dx3ILzGT6pgqBKIMHosp50oQIERCCX0lbMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVz/7har+eJJ+T13mXEI+vswXVjMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvVlhQX3VGcXY1NGtuNVBYZVpjUWo2LXpCZFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXViZMA0G
CSqGSIb3DQEBCwUAA4IBAQALmZf2utGlCuT9KqMG70Vverjri3oWi66FVE8kKusV
ux+0SNfKS4Q8bzm4lw/IOUbovZJCU2QfZ+Q1qmgf5mXhVR65RR8l6If2k8BljC1B
wOgi9iVlFyuBHeV2VE+WGHbltkbxD3gkZ3DqK6VuaIe/wKVQdt5LxV2Ca0y6HJ99
a++stbHCMCzQzseBMYFmkek0qWKHK56uMh/eiCoLY1H/TL9EeCcY/Per3igitqeG
GA2r7SmR0wqPOk+urbyIt9PIaVDz7vEu+KS0x2Ue1mSP+6Whg7ZV1ywNIOTeubhP
Qp6jCAGGCVy2qAUpE5g+nztAY05+4v0e098iKE+Kgwd0
-----END CERTIFICATE-----
Generated at Mon Jan 19 17:09:23 2026 by rpki-client