This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vIblwZxN64SvUYUFSjF7NWfiEJc.roa
File:                     vIblwZxN64SvUYUFSjF7NWfiEJc.roa (raw, json)
Hash identifier:          9IYzxt1w2FNIYLPjsSuHw5CK+WT1Q+QDcNlheElIlik=
Subject key identifier:   BC:86:E5:C1:9C:4D:EB:84:AF:51:85:05:4A:31:7B:35:67:E2:10:97
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019B7C806972B1CB57EB4D53B0CC47FD2A8F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vIblwZxN64SvUYUFSjF7NWfiEJc.roa
Signing time:             Fri 02 Jan 2026 02:19:08 +0000
ROA not before:           Fri 02 Jan 2026 02:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202273
IP address blocks:        93.92.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:69:72:b1:cb:57:eb:4d:53:b0:cc:47:fd:2a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 02:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc86e5c19c4deb84af5185054a317b3567e21097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7b:1e:e6:78:83:99:63:5a:8c:00:a8:62:9c:
                    a9:91:84:e0:7b:bf:ce:95:ea:9e:c1:65:0c:06:64:
                    d9:6d:61:19:87:4a:89:c4:c1:d9:47:7a:64:5e:e9:
                    05:c5:94:74:3a:8a:ba:9f:f3:5c:32:fd:62:82:05:
                    15:5c:04:b5:03:39:cd:98:8f:46:18:c4:6a:bb:61:
                    23:00:58:24:ca:61:61:9b:45:5b:45:69:fd:37:99:
                    c5:1a:22:24:8b:53:2a:2c:7f:a6:af:4f:24:d6:f5:
                    c7:e4:63:88:8d:cd:ac:02:41:c0:27:a5:2a:11:81:
                    45:31:3b:4b:f7:97:09:0e:22:2e:c9:19:c6:ac:3c:
                    fe:31:c5:5a:2b:2c:76:63:80:f5:fe:79:5e:fb:a1:
                    0c:0d:cc:00:89:c7:e0:dd:ed:02:db:c6:35:3b:78:
                    58:a6:8d:90:83:22:49:08:ec:5b:c3:55:1a:e7:19:
                    a6:cb:7f:73:1a:b2:a3:e2:40:ac:f2:ce:75:c0:7f:
                    e7:c9:5d:d6:d6:f0:7e:97:b5:29:c2:90:6d:ec:61:
                    05:87:90:75:a5:66:20:bf:33:09:c4:42:c5:61:9f:
                    ed:b6:e2:78:b3:b2:b3:72:e7:31:bf:10:35:8d:53:
                    c2:c9:dd:ad:ed:cd:c7:62:ff:16:3d:29:0b:35:23:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:86:E5:C1:9C:4D:EB:84:AF:51:85:05:4A:31:7B:35:67:E2:10:97
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vIblwZxN64SvUYUFSjF7NWfiEJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:43:32:53:f0:77:58:aa:a5:26:bf:33:da:76:4b:fc:f8:
         d7:e4:6b:97:41:18:61:3a:b2:ad:31:a5:71:a0:02:73:fb:c5:
         5b:20:d4:ea:b8:bd:ba:4e:49:07:76:1d:29:53:d5:5a:bf:e9:
         78:9d:0a:7c:75:31:d8:71:9e:02:39:13:d9:78:88:3d:6d:05:
         67:67:59:19:e4:34:ab:08:ea:54:b9:2a:be:0e:06:ce:dd:4d:
         81:c9:9b:e4:05:48:2b:27:03:3f:51:74:06:9d:76:e8:98:fa:
         ff:5f:5d:c8:af:b3:d7:31:e5:a0:4b:36:34:a9:b5:2c:ca:76:
         7b:91:36:6f:86:59:25:e8:8d:59:f2:34:24:2a:55:2b:c6:51:
         33:96:42:ba:a0:a8:3f:06:87:9e:ea:f8:c8:b7:b9:8d:2b:03:
         8d:64:ba:2b:ce:a0:0c:5a:3f:60:7f:29:b3:30:93:c9:7b:19:
         72:63:a7:a3:3b:1a:55:95:20:09:95:a4:27:65:6c:b5:5d:8f:
         df:2d:aa:58:60:6d:52:ab:23:7b:a2:c2:5c:c2:ef:37:29:f6:
         ea:dd:5d:23:73:35:a3:5a:d5:5a:15:ff:0d:98:7d:17:fb:27:
         46:63:18:58:12:a9:b5:a2:04:d7:2e:93:d3:d4:42:ed:ff:18:
         aa:31:6c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:37 2026 by rpki-client