This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/VmoSUZB_YwVO3RGWmDSF29nsGPs.roa
File:                     VmoSUZB_YwVO3RGWmDSF29nsGPs.roa (raw, json)
Hash identifier:          aKDz3hszk2w0c4ThUwFprKtq7QSsO1nVkwJ3BeHiXA0=
Subject key identifier:   56:6A:12:51:90:7F:63:05:4E:DD:11:96:98:34:85:DB:D9:EC:18:FB
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       019B7FF1A9323FFBAC1F9F3309E2F2B34D26
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/VmoSUZB_YwVO3RGWmDSF29nsGPs.roa
Signing time:             Fri 02 Jan 2026 18:21:42 +0000
ROA not before:           Fri 02 Jan 2026 18:21:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48347
IP address blocks:        212.15.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 18:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:a9:32:3f:fb:ac:1f:9f:33:09:e2:f2:b3:4d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Jan  2 18:21:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=566a1251907f63054edd1196983485dbd9ec18fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:50:3a:d3:08:03:bc:d9:6f:eb:54:3f:4e:
                    c7:6c:4e:57:ba:b3:81:a9:2d:0d:b9:1f:24:53:1e:
                    e3:2c:24:c8:72:1a:90:e8:96:9d:19:9f:0d:31:9c:
                    66:25:9b:b7:0b:a4:b3:68:10:ef:2e:13:53:60:3e:
                    37:e9:06:57:68:9d:53:2a:ef:36:15:3b:b7:06:91:
                    7c:93:8d:9b:3f:c0:5e:d3:97:c4:d5:84:96:67:c4:
                    8e:48:f2:ad:17:9f:dc:5a:26:b3:92:39:f7:14:ae:
                    22:76:7d:f3:22:55:fd:81:71:3f:33:30:11:f5:ba:
                    e6:d2:d4:f2:84:7e:c2:72:70:62:66:d4:29:64:39:
                    96:67:3a:41:61:ec:be:84:4f:11:54:75:2d:f6:65:
                    24:b3:83:05:22:45:4a:a9:6f:d8:0b:44:97:12:92:
                    f8:6a:8c:87:db:b2:a0:e9:b6:ab:fd:e5:57:ec:99:
                    e3:fb:0c:61:e8:44:00:dc:88:f1:fb:d5:50:7e:10:
                    5d:72:92:b0:a8:05:94:ec:cb:b9:53:a5:bf:3a:e8:
                    19:4c:04:ce:10:0c:13:92:26:e5:49:0d:6b:7f:5a:
                    4e:eb:6f:94:7e:c5:f5:24:7f:be:eb:66:00:b4:73:
                    22:cc:74:1b:99:c8:ff:38:51:63:93:72:06:85:64:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6A:12:51:90:7F:63:05:4E:DD:11:96:98:34:85:DB:D9:EC:18:FB
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/VmoSUZB_YwVO3RGWmDSF29nsGPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.15.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:ba:80:d8:1b:92:dd:f5:ec:07:48:e3:cd:72:69:64:37:
         e0:43:6e:2b:e9:67:5f:98:1e:6e:e8:bb:2e:ac:ca:68:9b:30:
         e8:00:88:84:f1:0d:4d:39:a5:e7:1f:65:b3:35:a2:8f:b4:80:
         97:4d:87:db:30:ad:e9:52:1f:0e:5a:6c:60:6b:43:3c:f9:f8:
         fc:8c:a4:14:51:2e:aa:d3:73:a0:82:b2:f2:52:4b:12:cb:8a:
         9d:29:de:bd:d4:aa:d5:d2:4d:ae:5b:95:57:dc:c3:03:e8:1e:
         28:b3:b5:01:ab:c8:5b:04:1c:43:37:7a:c7:7d:f7:a4:37:ed:
         48:84:b9:8c:52:64:34:b6:68:96:61:37:65:41:15:58:f5:7d:
         f6:3d:81:80:1a:80:76:e5:b3:a1:f2:e1:19:9a:4f:74:13:94:
         f1:26:87:5e:1b:60:1f:34:dc:a7:c0:ff:53:a9:25:aa:5f:22:
         fd:d8:ef:d7:f3:3b:e8:1e:50:89:3c:b2:2c:53:94:89:14:a1:
         42:1a:c7:ae:75:53:63:82:48:08:9d:2a:15:6a:b7:a8:94:e2:
         61:e5:7f:72:23:bf:56:22:86:cb:9d:aa:c5:89:c9:ad:4e:c0:
         05:d5:8d:db:27:12:d5:53:8e:9f:b6:51:9e:18:a4:01:cc:db:
         1f:93:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 00:54:56 2026 by rpki-client