This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/e_vRpx0AWMvXWJyBYRdJs0hlb7g.roa
File:                     e_vRpx0AWMvXWJyBYRdJs0hlb7g.roa (raw, json)
Hash identifier:          Nbj3MVg8NxTh0zDvmfaX0ExMs0kHumpSgZRqc5CSxYI=
Subject key identifier:   7B:FB:D1:A7:1D:00:58:CB:D7:58:9C:81:61:17:49:B3:48:65:6F:B8
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019B455EF7BD4DACBAF94B344F6E272D8BFD
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/e_vRpx0AWMvXWJyBYRdJs0hlb7g.roa
Signing time:             Mon 22 Dec 2025 09:23:30 +0000
ROA not before:           Mon 22 Dec 2025 09:23:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6079
IP address blocks:        194.231.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:45:5e:f7:bd:4d:ac:ba:f9:4b:34:4f:6e:27:2d:8b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Dec 22 09:23:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7bfbd1a71d0058cbd7589c81611749b348656fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:c0:3f:42:12:3d:0a:1e:f3:b6:27:f1:20:
                    04:94:db:7a:a0:c9:35:8e:08:05:dc:0e:55:3a:b1:
                    35:2e:b0:11:70:aa:1a:13:fe:31:ea:1c:d0:79:56:
                    97:0e:f5:84:52:5d:2b:d7:94:4a:25:0d:03:24:5f:
                    5f:94:a9:13:9c:46:2f:10:7a:0e:db:3d:3e:ed:75:
                    82:70:21:7c:32:54:5b:47:f8:ce:60:5c:e1:99:2e:
                    fb:b6:b5:85:f7:b7:0c:13:44:b8:c1:c0:66:af:8e:
                    91:8e:3d:3c:f5:49:73:6c:bf:42:ff:91:97:99:8c:
                    35:51:bb:fc:c9:0b:d8:f4:c3:62:16:86:da:8f:e5:
                    51:77:11:52:bd:a3:29:38:d9:2b:21:7d:7d:56:a3:
                    20:f2:8f:d6:25:34:8e:6a:96:5b:48:4b:f1:26:e4:
                    d0:c5:d9:bc:a0:dd:ca:fd:26:18:24:22:ee:0b:77:
                    cb:40:c9:3e:39:d4:e9:78:e2:17:27:a1:58:32:96:
                    b2:cf:c0:7e:55:0f:e6:bf:4a:44:ae:5a:99:41:c2:
                    a0:3b:e0:f3:82:96:70:d2:2a:1d:f9:0e:2c:d3:a5:
                    3e:25:e2:f9:c6:8b:15:b3:e7:55:fd:b1:ae:9e:32:
                    2f:e6:4a:a9:51:b3:82:0b:9f:45:80:e4:ca:f7:36:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FB:D1:A7:1D:00:58:CB:D7:58:9C:81:61:17:49:B3:48:65:6F:B8
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/e_vRpx0AWMvXWJyBYRdJs0hlb7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.231.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:66:ef:bb:f2:4f:57:7b:10:83:38:0c:62:13:7a:78:44:
         f2:73:1a:60:27:fc:65:62:ed:e5:fe:f7:57:3f:e2:ff:18:58:
         54:29:36:89:16:66:40:e9:1c:95:5d:ee:44:32:ca:11:b1:f9:
         93:d6:11:d9:c3:aa:e6:ae:a4:39:28:2d:97:83:c5:2f:4a:36:
         bd:0c:d4:b4:f1:57:bf:22:28:46:66:8f:03:5a:b2:02:b0:b4:
         21:99:0b:4d:90:ed:33:36:42:03:f3:9f:57:6e:d2:0c:71:40:
         91:fd:72:25:32:fa:42:13:ca:07:be:90:77:59:8d:f0:5e:cf:
         84:1a:e8:fe:72:fa:8e:60:a2:96:54:8b:42:58:96:1f:6c:17:
         01:88:7f:37:5e:d2:a3:9a:97:75:f4:33:32:f7:3e:7d:51:61:
         fc:56:50:3c:fa:df:48:6b:09:8b:4e:cf:cf:b6:cf:43:7b:3a:
         3c:74:84:e1:fc:11:e9:3f:aa:88:59:a3:75:ac:37:b9:75:99:
         d6:fa:58:d9:83:ab:23:0b:9d:37:25:64:e0:d3:6a:5a:38:05:
         25:1e:0f:64:41:88:55:86:07:55:d1:c5:ee:33:68:04:d9:25:
         ca:00:7a:ba:11:9e:de:a9:f8:45:77:8a:92:77:ed:fe:60:aa:
         95:4c:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:28:47 2025 by rpki-client