This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VUywaIJ-fsX87Xu2bg_NpQdoRiM.roa
File:                     VUywaIJ-fsX87Xu2bg_NpQdoRiM.roa (raw, json)
Hash identifier:          KsYjyfK6aYrJGyqiOOz1JXLV7ntqF8qasf8uNcFoT7g=
Subject key identifier:   55:4C:B0:68:82:7E:7E:C5:FC:ED:7B:B6:6E:0F:CD:A5:07:68:46:23
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5D205104290A4A121307643EE6B085
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VUywaIJ-fsX87Xu2bg_NpQdoRiM.roa
Signing time:             Fri 02 Jan 2026 06:20:13 +0000
ROA not before:           Fri 02 Jan 2026 06:20:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209745
IP address blocks:        2a0e:97c0:d10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:20:51:04:29:0a:4a:12:13:07:64:3e:e6:b0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:20:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=554cb068827e7ec5fced7bb66e0fcda507684623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:14:87:68:98:1d:f1:6a:29:ad:fe:58:ac:b2:
                    f1:ab:b8:e1:84:05:da:57:7f:0c:8c:df:6f:12:fb:
                    96:f6:99:8b:75:33:a9:25:e2:46:c8:8c:69:0a:c8:
                    27:1b:d7:df:17:c7:c3:ff:1d:bc:cc:fe:e0:82:5c:
                    fc:23:46:49:59:c8:1f:64:59:ba:f2:b9:6a:f8:c2:
                    d6:1e:3b:50:8a:f9:68:58:0d:21:c8:11:3d:49:08:
                    e3:c1:f4:b3:95:e0:99:01:64:3e:e3:22:66:01:e9:
                    05:97:94:a5:2f:af:fd:6a:50:0f:4a:f8:a9:04:fc:
                    07:89:d1:28:df:28:41:cc:cb:45:d9:4a:bc:04:c4:
                    b3:ca:3c:bb:2f:27:a5:04:5c:90:a3:ff:1d:87:17:
                    b0:9f:c8:22:64:4a:72:74:b4:e8:5c:1d:96:5c:1f:
                    5b:4a:57:83:e9:52:b8:33:4a:4b:8f:3b:41:cf:70:
                    e2:9d:cb:35:e6:30:84:12:e1:8a:3f:83:d1:dd:65:
                    6d:29:fd:40:e6:e0:ec:27:12:fb:82:6b:ca:ab:21:
                    b6:82:e4:79:c6:d0:81:f2:bf:ba:0c:af:b5:1e:30:
                    d1:1a:d3:ec:70:9a:14:c9:e4:6c:19:4d:42:d9:0c:
                    09:72:90:f5:3b:7e:7e:61:2a:69:0f:3c:c9:11:d8:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4C:B0:68:82:7E:7E:C5:FC:ED:7B:B6:6E:0F:CD:A5:07:68:46:23
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VUywaIJ-fsX87Xu2bg_NpQdoRiM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:63:c8:96:d6:4c:ae:06:95:a6:84:2d:70:3d:42:39:52:
         2d:d2:f2:2e:7b:e1:b1:77:e7:c0:60:f0:ab:00:c6:64:44:01:
         04:5c:ca:65:a2:b5:14:29:08:1c:db:6e:a3:4b:f1:9b:2f:e5:
         6c:03:5f:75:24:12:9e:bd:7d:cf:3d:3e:f2:db:ea:18:c5:bc:
         34:d5:77:38:c0:e1:bd:82:05:05:f2:15:9b:d7:da:b4:37:e8:
         cb:6c:9f:b4:c7:74:61:bb:26:7b:42:48:a3:3c:32:17:26:8e:
         53:0f:1c:dc:75:f4:10:97:bc:f2:bd:03:df:c1:10:fd:ce:07:
         d8:d7:d3:08:a0:f0:d5:1e:8b:38:2a:00:56:7e:5a:f9:1d:e6:
         f5:b6:f9:bb:55:24:8e:96:99:5e:47:56:a8:ba:04:d1:80:af:
         c4:8c:21:29:f5:96:f2:db:4a:03:a0:ed:cb:4e:1b:cb:b5:98:
         48:5c:85:08:53:fe:b9:8e:33:b3:40:94:d9:54:65:a4:88:c8:
         c3:11:14:4c:e8:cb:fc:67:8f:b6:54:06:39:fe:a0:f2:8c:0a:
         8b:7f:ec:62:5a:28:4e:2c:a0:f6:17:ce:1f:72:0c:f1:cb:d1:
         6c:db:45:84:a5:02:12:e4:1b:7b:99:ee:c4:5d:fa:af:95:c9:
         a3:03:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:53:23 2026 by rpki-client