This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/LeacyVsv1RcXFogC-zGtNs0rOAM.roa
File:                     LeacyVsv1RcXFogC-zGtNs0rOAM.roa (raw, json)
Hash identifier:          j3qojoQtMWggtkDzJQQqZamlkQYEGNHbKlwdO2tUD/I=
Subject key identifier:   2D:E6:9C:C9:5B:2F:D5:17:17:16:88:02:FB:31:AD:36:CD:2B:38:03
Certificate issuer:       /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial:       019B77C6E7064B7BAF486C0C7D5718B2BABE
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/LeacyVsv1RcXFogC-zGtNs0rOAM.roa
Signing time:             Thu 01 Jan 2026 04:18:02 +0000
ROA not before:           Thu 01 Jan 2026 04:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25091
IP address blocks:        160.53.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:e7:06:4b:7b:af:48:6c:0c:7d:57:18:b2:ba:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
        Validity
            Not Before: Jan  1 04:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2de69cc95b2fd51717168802fb31ad36cd2b3803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:43:66:7e:82:75:72:0f:ff:eb:b5:86:68:
                    e6:c9:9b:9b:d2:ae:23:15:d7:b0:f9:95:4b:9f:01:
                    4b:cc:84:12:72:2f:44:ba:40:64:38:71:57:7e:c0:
                    a7:1e:84:0e:6b:c3:b5:47:fc:af:06:f8:bd:bb:74:
                    3d:d9:6d:03:58:71:2b:e0:47:6e:ce:32:a2:c4:e6:
                    05:7d:65:1d:75:67:e7:6b:64:55:15:15:21:33:e7:
                    27:25:16:29:ba:cf:c5:99:57:fd:16:b1:ac:04:44:
                    6c:87:9c:7a:bd:c5:a9:6a:cc:91:61:ba:bd:a0:46:
                    ef:17:cf:14:9a:de:c4:1a:69:f1:f8:8e:2e:08:c8:
                    43:48:b6:a4:63:70:99:f5:a0:82:91:6a:db:98:0f:
                    2c:4f:37:47:f0:da:69:a4:89:95:5e:1f:96:f0:b3:
                    37:7a:56:58:93:7a:0a:f9:3e:54:d4:42:55:6e:b5:
                    3a:3e:d2:1b:95:4f:43:e7:f6:f0:4e:43:c7:32:91:
                    a9:06:59:eb:37:cf:7f:1d:23:fc:5a:51:98:97:fa:
                    2c:d9:ed:6b:12:29:52:7a:43:fe:25:2f:cf:67:ca:
                    b8:b4:a3:9f:da:5b:50:4d:79:d6:17:1c:2c:b2:dd:
                    56:62:d6:29:af:a6:82:91:75:c3:84:10:65:dc:2c:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E6:9C:C9:5B:2F:D5:17:17:16:88:02:FB:31:AD:36:CD:2B:38:03
            X509v3 Authority Key Identifier:
                keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/LeacyVsv1RcXFogC-zGtNs0rOAM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.53.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:a2:60:de:a3:26:3e:17:86:23:5e:c1:9c:2d:e1:c5:3f:1b:
         5a:9b:19:3f:c8:93:89:44:4d:df:8b:c9:ca:a2:04:3a:b8:4b:
         f8:42:8f:5e:86:b1:c8:5a:21:ab:f8:90:4e:ab:8e:e3:56:97:
         1e:db:0b:77:95:0b:24:0a:ff:bb:b3:65:f3:45:0d:b9:89:bc:
         f6:5c:d9:59:83:ef:eb:a3:57:ba:56:0b:f0:aa:b2:86:fd:73:
         d2:6c:52:80:47:60:ff:aa:8e:b0:92:a7:95:73:11:d8:34:d8:
         a7:db:b6:7d:03:40:8b:21:87:15:b2:27:14:14:5f:f5:7b:57:
         3d:34:c7:3b:74:fd:35:46:ef:5b:d9:ee:c1:17:94:99:7c:25:
         ed:7f:e7:bb:ba:e9:f2:42:8a:cd:95:ff:1b:82:3b:12:24:20:
         63:82:55:ff:3e:8b:09:3c:63:d9:48:ac:5c:7e:bc:9f:ab:21:
         9b:a7:2e:13:4d:13:5e:33:89:21:63:01:fa:22:35:5c:85:6a:
         c6:18:d2:16:f2:ed:61:b5:5c:c8:a5:c2:4b:2b:47:0f:4a:ab:
         4f:e8:de:ce:89:7b:eb:9c:94:66:64:28:c1:6e:d3:78:65:52:
         49:25:80:c9:18:37:f1:0a:82:16:55:a8:25:ac:1f:8a:72:ca:
         c5:68:7e:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xucGS3uvSGwMfVcYsrq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDhjMjhiZTE1NTE2MjkwYjlkYTUxMzVlNThmNTVmYmI4
MGZmYjQwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGU2OWNjOTViMmZkNTE3MTcxNjg4MDJmYjMxYWQzNmNkMmIzODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRpDZn6CdXIP/+u1hmjmyZub0q4j
Fdew+ZVLnwFLzIQSci9EukBkOHFXfsCnHoQOa8O1R/yvBvi9u3Q92W0DWHEr4Edu
zjKixOYFfWUddWfna2RVFRUhM+cnJRYpus/FmVf9FrGsBERsh5x6vcWpasyRYbq9
oEbvF88Umt7EGmnx+I4uCMhDSLakY3CZ9aCCkWrbmA8sTzdH8NpppImVXh+W8LM3
elZYk3oK+T5U1EJVbrU6PtIblU9D5/bwTkPHMpGpBlnrN89/HSP8WlGYl/os2e1r
EilSekP+JS/PZ8q4tKOf2ltQTXnWFxwsst1WYtYpr6aCkXXDhBBl3Cy73wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC3mnMlbL9UXFxaIAvsxrTbNKzgDMB8GA1UdIwQY
MBaAFIoIwovhVRYpC52lE15Y9V+7gP+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2Mt
MDYxOGM5YThjYWM0LzEvTGVhY3lWc3YxUmNYRm9nQy16R3ROczByT0FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2MtMDYxOGM5YThjYWM0
LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoDXyMA0G
CSqGSIb3DQEBCwUAA4IBAQCVomDeoyY+F4YjXsGcLeHFPxtamxk/yJOJRE3fi8nK
ogQ6uEv4Qo9ehrHIWiGr+JBOq47jVpce2wt3lQskCv+7s2XzRQ25ibz2XNlZg+/r
o1e6VgvwqrKG/XPSbFKAR2D/qo6wkqeVcxHYNNin27Z9A0CLIYcVsicUFF/1e1c9
NMc7dP01Ru9b2e7BF5SZfCXtf+e7uunyQorNlf8bgjsSJCBjglX/PosJPGPZSKxc
fryfqyGbpy4TTRNeM4khYwH6IjVchWrGGNIW8u1htVzIpcJLK0cPSqtP6N7OiXvr
nJRmZCjBbtN4ZVJJJYDJGDfxCoIWVaglrB+KcsrFaH5n
-----END CERTIFICATE-----
Generated at Sun Jan 18 20:55:03 2026 by rpki-client