This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vvqeP217VwFjhamKk5gQzy7dS6A.roa
File:                     vvqeP217VwFjhamKk5gQzy7dS6A.roa (raw, json)
Hash identifier:          6RNu6aYvQ2G0fpaxyoxsQ8K0IIa8HHaLV9n928c8bhE=
Subject key identifier:   BE:FA:9E:3F:6D:7B:57:01:63:85:A9:8A:93:98:10:CF:2E:DD:4B:A0
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019B7C8052D6DBE0E2F2CBB427D2C31D6654
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vvqeP217VwFjhamKk5gQzy7dS6A.roa
Signing time:             Fri 02 Jan 2026 02:19:03 +0000
ROA not before:           Fri 02 Jan 2026 02:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43278
IP address blocks:        80.242.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:52:d6:db:e0:e2:f2:cb:b4:27:d2:c3:1d:66:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 02:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=befa9e3f6d7b57016385a98a939810cf2edd4ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:52:db:20:4c:c4:f3:17:8a:33:0b:0b:6c:
                    74:c9:3a:e2:3b:e5:03:9a:41:73:ae:8d:f8:4d:eb:
                    7c:24:93:22:a1:0d:56:9c:96:a1:96:89:10:47:ef:
                    f2:60:ad:bb:d0:99:1d:de:68:74:8a:e4:02:df:a9:
                    91:72:4d:94:7a:88:16:3d:69:0c:e5:56:bf:02:3b:
                    a2:19:48:6f:3d:c3:c7:bd:ce:e9:6c:dc:50:fd:6d:
                    68:74:97:56:86:99:aa:3f:68:08:b9:8b:7a:53:00:
                    1f:eb:2c:3e:13:b7:80:cd:57:e8:79:1f:ce:7c:47:
                    3c:13:39:27:11:71:70:8d:df:e1:35:22:f6:db:4f:
                    0e:b3:bf:81:c3:29:60:fd:42:7e:b3:04:8d:e4:1e:
                    b0:6b:3a:a5:62:18:a5:52:c8:e5:24:d2:24:1c:1f:
                    a9:eb:93:c9:77:76:ed:ca:46:09:b4:2f:83:69:33:
                    ec:c3:e2:78:07:ce:07:71:36:9f:d9:1a:e6:4c:9d:
                    30:41:fc:2a:34:8f:64:14:ea:6b:4d:04:57:da:02:
                    5d:2e:65:e8:03:f7:c9:63:3d:82:03:51:13:35:86:
                    ae:d7:17:a2:b5:6a:63:2e:85:1f:c3:94:55:dd:c1:
                    a3:a9:d6:7b:04:8e:c0:7e:84:45:d8:75:db:97:d3:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FA:9E:3F:6D:7B:57:01:63:85:A9:8A:93:98:10:CF:2E:DD:4B:A0
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vvqeP217VwFjhamKk5gQzy7dS6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.242.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:9f:b4:84:a0:84:a4:38:6c:af:a2:7f:ed:bf:63:c1:0c:
         d1:18:e3:a3:3d:5a:89:63:7e:59:da:58:c5:5b:b2:a7:c0:69:
         6c:ad:c6:cf:7a:89:8e:7e:79:df:cc:e4:c8:8e:4f:c6:7f:f6:
         f7:e0:ae:22:f6:62:23:82:29:67:1a:68:d8:41:b5:82:18:6c:
         f8:d4:ef:1a:7f:a0:c8:fc:ab:7e:6b:01:12:25:c1:d4:87:68:
         35:56:e1:1c:2e:12:0c:27:22:5b:62:f6:c6:31:f6:df:0b:36:
         a2:c7:88:0d:e6:60:ec:fb:ce:12:b6:94:be:f6:8f:f1:82:d2:
         b0:cf:49:a4:06:a9:ca:2a:8b:26:9c:21:d6:49:37:14:09:ea:
         40:4d:1e:57:0b:9c:e4:b5:7b:58:3e:f9:8f:ff:ce:3f:6e:38:
         e9:37:22:89:50:5c:e7:1f:fa:57:cf:93:3a:07:20:b9:0f:27:
         a6:22:37:67:f3:6f:bd:e4:06:1d:41:9e:1a:6e:ce:76:95:66:
         72:47:fa:48:cc:9d:a0:7e:e0:48:f5:c1:fa:0f:49:01:c4:54:
         97:1a:23:38:01:03:d8:07:c4:e1:ca:d5:da:49:d8:2c:2b:a9:
         58:15:f5:25:90:d7:e6:3b:ca:42:00:3d:91:e1:df:1f:74:4e:
         47:ee:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:37 2026 by rpki-client