This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VHOz9VBt2yj86xeyuDa4hZTDY3Q.roa
File:                     VHOz9VBt2yj86xeyuDa4hZTDY3Q.roa (raw, json)
Hash identifier:          GwR0O6OHzLtkYoQXQvQUNavxTngJZ1nSSQirQyqjprQ=
Subject key identifier:   54:73:B3:F5:50:6D:DB:28:FC:EB:17:B2:B8:36:B8:85:94:C3:63:74
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       019B46F2B6EAEDEDD3ABC86603F12C62A6A7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VHOz9VBt2yj86xeyuDa4hZTDY3Q.roa
Signing time:             Mon 22 Dec 2025 16:44:30 +0000
ROA not before:           Mon 22 Dec 2025 16:44:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44103
IP address blocks:        2a0e:46c3:700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:46:f2:b6:ea:ed:ed:d3:ab:c8:66:03:f1:2c:62:a6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Dec 22 16:44:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5473b3f5506ddb28fceb17b2b836b88594c36374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:1a:9b:fc:b7:17:4a:74:e5:6e:74:db:14:
                    3a:39:cb:17:bd:1b:f4:65:47:cf:91:51:56:1a:7c:
                    76:a6:07:d4:f8:5c:37:d8:e3:4c:c8:bc:16:e9:2c:
                    13:ba:f2:54:3b:5d:1a:5f:ab:f4:a5:b9:3e:07:52:
                    0f:e9:e5:a2:84:2c:32:70:ac:4b:0c:83:03:d7:cb:
                    3f:37:7f:e7:dc:81:9a:ce:e3:fe:3a:87:cd:40:fb:
                    93:4d:5e:2c:16:6e:c9:f1:20:64:f5:03:e7:42:fe:
                    28:f6:90:cd:c2:31:c2:51:c6:aa:43:20:8a:83:a5:
                    da:13:cd:fc:a0:6e:27:39:04:e8:b2:97:06:1b:c4:
                    69:ef:99:50:a0:88:54:f3:fe:92:2b:18:c1:2a:19:
                    90:99:4d:d2:6f:92:6e:74:3b:a8:57:5f:35:1c:6e:
                    c0:16:64:2c:63:d2:bb:53:18:b2:f2:b2:b3:08:33:
                    64:2d:75:66:fe:95:9c:58:46:fa:3f:a3:45:67:57:
                    a9:2d:8c:7f:e4:06:46:4a:19:0c:3f:85:82:ee:7a:
                    23:8e:62:fc:06:5a:e9:ac:09:57:9f:5e:ef:d2:d4:
                    2d:1d:94:51:08:02:fc:44:20:85:eb:ff:11:c6:fa:
                    81:e2:b0:d8:5f:4f:23:1a:97:55:b3:11:09:11:75:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:73:B3:F5:50:6D:DB:28:FC:EB:17:B2:B8:36:B8:85:94:C3:63:74
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VHOz9VBt2yj86xeyuDa4hZTDY3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:46c3:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:30:58:71:96:24:ba:db:20:37:1b:3a:4c:58:c1:23:9d:15:
         83:dd:8d:a4:7e:7a:d4:ed:71:11:74:4e:27:08:9f:bd:06:c5:
         b1:18:9c:dc:ce:2a:49:73:6d:b9:f7:6c:25:2f:cf:65:65:f9:
         d8:ea:7f:21:5c:f1:e4:2c:e3:2d:c1:23:c9:c1:f2:db:bc:2c:
         28:7a:43:12:c4:ab:55:b5:cd:5b:25:2d:75:40:51:d5:1f:4b:
         97:b2:54:2f:b2:40:62:de:cf:c1:9d:60:c5:d8:f8:b3:c7:2a:
         da:70:c0:a6:a0:c7:80:44:5b:15:6d:31:1e:d5:db:a7:92:33:
         96:dd:91:e1:5a:6f:91:be:bd:15:b6:8d:d3:ed:d3:c5:9b:5b:
         7b:35:d5:bb:4f:4b:94:8f:e9:f7:fe:47:72:43:09:6d:01:21:
         22:31:52:82:ce:94:47:f2:64:96:99:96:0e:23:1e:70:0f:d7:
         21:dc:dc:8c:85:55:0a:25:89:55:16:7b:e1:e5:96:90:70:07:
         08:02:0f:59:66:c8:e7:17:4c:72:06:36:93:38:a3:16:86:26:
         68:cc:f8:ac:a7:e7:04:a9:1e:8b:57:48:ad:77:38:bf:e9:57:
         50:68:0f:66:c2:39:20:46:55:98:76:14:d5:6b:92:38:43:a6:
         1e:c5:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 00:40:35 2025 by rpki-client