This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/vVYDZup6TPMR4MVl16L5Tcxugnk.roa
File:                     vVYDZup6TPMR4MVl16L5Tcxugnk.roa (raw, json)
Hash identifier:          YNo9hVKBV6+t6/2iujMaXScihQA5Uyp7lluOC3Eyk8o=
Subject key identifier:   BD:56:03:66:EA:7A:4C:F3:11:E0:C5:65:D7:A2:F9:4D:CC:6E:82:79
Certificate issuer:       /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial:       019B79ECCE15E6A56C66A6F492A4DC86680A
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/vVYDZup6TPMR4MVl16L5Tcxugnk.roa
Signing time:             Thu 01 Jan 2026 14:18:40 +0000
ROA not before:           Thu 01 Jan 2026 14:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20965
IP address blocks:        62.40.96.0/19 maxlen: 19
                          83.97.92.0/22 maxlen: 22
                          2001:798::/32 maxlen: 32
                          2001:799::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:ce:15:e6:a5:6c:66:a6:f4:92:a4:dc:86:68:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
        Validity
            Not Before: Jan  1 14:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd560366ea7a4cf311e0c565d7a2f94dcc6e8279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:79:9b:b9:29:d6:59:4d:d8:de:43:95:40:ad:
                    88:50:59:42:14:43:fc:c3:16:72:43:a7:3d:4e:36:
                    b3:1c:97:ad:42:2f:32:5e:e8:a7:d4:7d:4f:43:61:
                    d3:d1:63:60:ce:51:f2:74:0c:ed:0d:55:12:93:e1:
                    53:09:25:23:8e:ec:77:41:d5:ac:b5:99:15:46:7e:
                    be:d9:ef:42:c3:35:aa:59:75:3a:7f:df:d7:d1:33:
                    15:81:b8:c0:f0:20:d9:83:03:aa:4f:4b:28:b6:0e:
                    4b:c0:6e:e4:2a:92:8f:49:8f:94:27:9e:5b:eb:cc:
                    5d:4b:cd:2c:d5:d4:97:33:18:8b:bd:ed:5e:23:fd:
                    fd:55:66:7c:6a:4c:26:46:06:d5:f4:4d:cb:6c:72:
                    7e:6f:d1:5d:a5:17:f5:2b:6d:78:49:9a:cd:d9:62:
                    69:af:56:d8:67:97:a7:75:99:03:0a:6f:b6:e8:56:
                    78:e6:01:19:55:e3:49:32:db:17:31:c9:df:b7:ba:
                    0f:ed:57:2d:8b:18:d8:cf:a9:98:db:f2:a8:2e:2f:
                    24:08:a5:c0:a8:bf:17:9c:06:c4:62:10:b4:42:d8:
                    20:d1:37:3a:e2:45:0a:93:70:1f:90:db:a6:83:02:
                    77:b8:46:41:3a:3c:98:77:1b:7c:e7:fe:92:42:e5:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:03:66:EA:7A:4C:F3:11:E0:C5:65:D7:A2:F9:4D:CC:6E:82:79
            X509v3 Authority Key Identifier:
                keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/vVYDZup6TPMR4MVl16L5Tcxugnk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.40.96.0/19
                  83.97.92.0/22
                IPv6:
                  2001:798::/31

    Signature Algorithm: sha256WithRSAEncryption
         7c:c5:5e:dc:86:2e:69:d0:57:76:3d:0c:6e:43:35:38:b0:be:
         4e:6b:e2:24:c2:df:e6:30:08:a5:47:5c:af:9b:91:40:a7:d9:
         28:3f:45:21:94:a7:7e:a5:f2:4b:98:4e:e6:b1:9b:4a:2e:c5:
         b0:57:57:67:ff:a4:10:af:ea:0b:a4:f0:65:5c:1d:a6:75:0b:
         cc:3f:f3:e0:55:57:41:ff:e5:96:99:16:4a:55:a7:67:c1:11:
         58:5b:c0:0b:c4:32:f5:7e:c6:64:e6:c1:db:77:23:7b:4f:03:
         ea:7c:88:c3:92:e0:1c:01:e7:97:72:0b:ac:62:77:d2:81:d0:
         fc:4e:1c:88:34:de:6d:08:82:18:50:d4:4b:6c:37:63:32:1e:
         c2:c1:be:87:78:00:65:fc:d6:da:2b:f0:4a:fa:db:f2:f8:23:
         e6:5c:03:d5:fb:0b:a2:a7:c0:2c:47:a6:5d:c7:48:f2:c0:67:
         55:c9:70:53:4e:42:9c:42:28:b4:77:92:a8:63:6e:5f:4d:86:
         e6:b2:6c:4a:73:d5:ef:ee:1a:81:f9:09:43:e0:97:31:73:d4:
         ab:43:69:8e:8e:dc:79:be:db:73:c8:39:a8:6a:b1:54:a7:82:
         0b:0c:e7:44:6a:97:fe:cb:e0:6d:62:ef:71:0d:62:17:96:75:
         3a:3a:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:49 2026 by rpki-client