This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/vSC49Dl4-4OfoXPunObiuHUP7mM.roa
File:                     vSC49Dl4-4OfoXPunObiuHUP7mM.roa (raw, json)
Hash identifier:          ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=
Subject key identifier:   BD:20:B8:F4:39:78:FB:83:9F:A1:73:EE:9C:E6:E2:B8:75:0F:EE:63
Certificate issuer:       /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial:       019BD2C13D0028CA86B776AE15C586CBA2C4
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/vSC49Dl4-4OfoXPunObiuHUP7mM.roa
Signing time:             Sun 18 Jan 2026 20:17:17 +0000
ROA not before:           Sun 18 Jan 2026 20:17:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51852
IP address blocks:        94.26.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d2:c1:3d:00:28:ca:86:b7:76:ae:15:c5:86:cb:a2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
        Validity
            Not Before: Jan 18 20:17:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd20b8f43978fb839fa173ee9ce6e2b8750fee63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:e1:b6:30:3e:db:da:b1:32:45:4a:99:b5:
                    61:cf:f9:57:66:7d:db:b6:56:cb:6d:87:43:71:62:
                    81:45:7b:77:18:46:55:11:40:72:22:5b:d0:ba:2f:
                    94:2c:08:35:64:13:10:48:47:bf:b8:fc:c7:90:01:
                    ab:71:a4:ef:d4:0c:2b:c6:d0:37:89:ee:b7:a9:d5:
                    46:b1:c0:e8:b9:14:11:72:95:27:3d:ae:21:1e:76:
                    e6:2e:2b:36:f3:d7:71:39:94:2d:df:ee:62:98:73:
                    14:5c:59:3b:ae:5c:5f:46:06:da:c7:68:4d:09:da:
                    97:00:3f:2c:47:a6:bc:36:55:d0:24:ea:ff:2c:3c:
                    3d:d0:29:ba:be:24:94:62:1c:4d:28:b0:d9:65:5a:
                    1e:5a:fc:16:82:7b:41:17:53:db:74:0e:fe:f6:1f:
                    31:80:d5:2a:d7:92:aa:51:32:ca:ba:a9:a5:b9:fe:
                    2e:d8:c1:95:90:86:e3:10:fa:be:87:47:f2:35:7e:
                    5d:58:8a:02:83:33:7c:b3:6b:e9:fe:b2:82:43:a1:
                    85:0b:5d:c1:e3:81:d7:49:95:ec:fa:1a:1e:1a:d3:
                    71:bf:92:8d:22:d2:cc:0a:e0:30:9c:7e:81:9a:11:
                    58:f4:e8:2c:d2:57:51:13:b4:22:71:9e:b5:c8:1e:
                    05:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:20:B8:F4:39:78:FB:83:9F:A1:73:EE:9C:E6:E2:B8:75:0F:EE:63
            X509v3 Authority Key Identifier:
                keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/vSC49Dl4-4OfoXPunObiuHUP7mM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.26.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:e4:29:29:49:d2:38:f5:4a:5e:68:d9:96:f2:f0:fd:39:
         91:5c:dd:b6:f7:04:5f:8f:0a:ac:45:fc:c4:08:f9:62:a2:30:
         3e:16:3a:47:74:be:75:1d:3a:5c:cb:6f:c8:fd:df:6c:d1:f6:
         65:92:fb:21:90:10:4a:f5:e4:05:40:93:81:76:8e:2c:37:37:
         fe:82:66:e5:98:b4:d9:10:bc:5f:1f:26:18:e1:22:5d:94:ac:
         20:58:7a:ee:57:62:2c:0e:01:c1:a9:85:b5:11:82:62:af:a9:
         98:a8:7e:41:08:c0:45:13:64:e4:01:26:6c:10:7b:8e:56:75:
         29:bd:a7:8f:93:f2:38:89:18:47:3b:35:cf:9f:44:64:3f:32:
         20:26:3e:f2:bb:fe:6a:b9:45:1b:8c:f5:7f:4b:fe:f7:e3:e2:
         eb:1e:84:2e:62:18:3b:e9:50:1d:1e:b8:05:9a:43:c0:cc:ef:
         80:e0:fc:f4:5d:5b:e5:b3:41:03:82:8c:1b:92:4f:21:6b:0f:
         ce:96:df:48:cb:09:74:9a:0f:23:0a:20:d9:2f:e3:03:7f:8c:
         14:e3:d3:f7:8d:d5:e1:c6:c4:97:fa:fc:02:e8:42:d4:39:38:
         29:48:71:92:06:9a:fa:ad:0b:6f:30:79:01:2b:80:89:23:f5:
         72:19:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:12:15 2026 by rpki-client