This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/vNvu3CipEQ22NPrTCm5toxcdUV4.roa
File:                     vNvu3CipEQ22NPrTCm5toxcdUV4.roa (raw, json)
Hash identifier:          js4t+SXfMQKXRL4QtWfYNg6zeuXvSb2Q6gaWblLMLx0=
Subject key identifier:   BC:DB:EE:DC:28:A9:11:0D:B6:34:FA:D3:0A:6E:6D:A3:17:1D:51:5E
Certificate issuer:       /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial:       019B79EC4804D0B7F0A5EC760AD0A95BCA75
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/vNvu3CipEQ22NPrTCm5toxcdUV4.roa
Signing time:             Thu 01 Jan 2026 14:18:06 +0000
ROA not before:           Thu 01 Jan 2026 14:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35048
IP address blocks:        77.83.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:48:04:d0:b7:f0:a5:ec:76:0a:d0:a9:5b:ca:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
        Validity
            Not Before: Jan  1 14:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bcdbeedc28a9110db634fad30a6e6da3171d515e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:6d:d4:0f:ed:01:f2:f9:95:c9:c6:11:63:
                    81:48:9d:c4:3a:91:a3:c3:28:4c:97:74:f8:fa:b4:
                    aa:8c:f8:b9:31:a8:b0:6b:99:58:3a:ef:49:48:5d:
                    2e:8b:d3:f2:e5:5c:16:c1:1e:eb:b5:35:2e:d5:ce:
                    43:13:63:48:7c:46:80:08:4f:ff:7c:73:8c:6a:42:
                    0a:c7:17:11:bc:9e:ac:22:21:6e:27:95:ff:99:8e:
                    10:79:08:f3:97:38:41:17:27:26:2d:88:24:6b:51:
                    b6:93:ed:79:35:f6:86:e2:1a:6c:7e:55:f7:d1:32:
                    b6:4e:dc:48:d9:2d:dd:53:85:60:fc:51:1d:8d:62:
                    7a:3f:5d:6c:05:d6:57:89:0e:57:f0:1e:01:9b:39:
                    56:c9:14:1f:95:f7:86:b1:d5:5b:f5:c0:bb:ba:75:
                    eb:de:fc:74:90:b5:d5:60:48:09:de:dd:d6:f2:69:
                    97:56:c7:b8:3c:3f:ca:d3:20:b7:9d:f4:7b:10:5d:
                    ce:82:89:24:9b:e7:d1:5b:f0:cc:7f:3b:95:6a:cb:
                    16:e5:a5:2a:07:dd:07:fc:42:58:c5:65:56:d9:57:
                    53:10:9c:9a:91:ea:59:76:d1:45:a3:7e:94:79:06:
                    54:c8:5e:4c:39:d3:f5:e0:7b:f8:99:e8:31:f0:47:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DB:EE:DC:28:A9:11:0D:B6:34:FA:D3:0A:6E:6D:A3:17:1D:51:5E
            X509v3 Authority Key Identifier:
                keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/vNvu3CipEQ22NPrTCm5toxcdUV4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a2:f4:f9:45:62:9e:04:58:3c:03:c3:be:08:92:23:79:1b:
         fe:c6:25:35:32:57:a8:a0:51:39:f8:a1:47:e6:c2:3d:34:8a:
         74:85:fc:13:db:98:27:e8:60:1f:39:6b:39:bc:c3:84:b3:98:
         ac:3b:c0:e1:7e:91:db:e2:60:e1:c0:7b:ee:e0:a0:24:90:8d:
         48:36:96:c2:09:32:39:a9:37:f3:b3:79:cf:0a:45:cf:23:dc:
         c8:a0:9e:ad:a0:28:0b:3b:64:74:f6:f8:05:36:3b:90:4d:2f:
         bc:d5:ec:e5:ff:1d:87:53:ed:4f:17:7e:e9:5e:7c:5b:65:95:
         86:0f:99:dd:ca:f0:a8:ed:5b:80:31:c0:14:86:ab:e8:62:2a:
         62:e6:27:14:0d:e3:21:22:f3:63:86:6f:6f:84:6a:1b:93:fe:
         ab:aa:23:56:c0:3d:2d:b1:10:69:3c:e4:c6:46:39:48:e9:45:
         df:d3:08:12:48:01:16:62:f3:b4:e7:c5:8c:4b:8c:a5:f4:11:
         1b:0d:1c:46:f0:f6:53:bd:fe:16:3f:fa:83:01:b7:d2:18:11:
         7d:59:ac:1a:30:64:2d:3b:21:b6:11:f7:8f:b9:8a:12:57:02:
         ca:e3:48:5c:bd:19:21:23:eb:03:13:11:cb:ff:2d:80:1d:35:
         2f:a8:ae:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57EgE0Lfwpex2CtCpW8p1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3
YTkxODQwHhcNMjYwMTAxMTQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2RiZWVkYzI4YTkxMTBkYjYzNGZhZDMwYTZlNmRhMzE3MWQ1MTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWtt1A/tAfL5lcnGEWOBSJ3EOpGj
wyhMl3T4+rSqjPi5Maiwa5lYOu9JSF0ui9Py5VwWwR7rtTUu1c5DE2NIfEaACE//
fHOMakIKxxcRvJ6sIiFuJ5X/mY4QeQjzlzhBFycmLYgka1G2k+15NfaG4hpsflX3
0TK2TtxI2S3dU4Vg/FEdjWJ6P11sBdZXiQ5X8B4BmzlWyRQflfeGsdVb9cC7unXr
3vx0kLXVYEgJ3t3W8mmXVse4PD/K0yC3nfR7EF3Ogokkm+fRW/DMfzuVassW5aUq
B90H/EJYxWVW2VdTEJyakepZdtFFo36UeQZUyF5MOdP14Hv4megx8Ed07QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLzb7twoqRENtjT60wpubaMXHVFeMB8GA1UdIwQY
MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt
MzZiYWM4ZDkxZTJlLzEvdk52dTNDaXBFUTIyTlByVENtNXRveGNkVVY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl
LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVNUMA0G
CSqGSIb3DQEBCwUAA4IBAQAnovT5RWKeBFg8A8O+CJIjeRv+xiU1MleooFE5+KFH
5sI9NIp0hfwT25gn6GAfOWs5vMOEs5isO8DhfpHb4mDhwHvu4KAkkI1INpbCCTI5
qTfzs3nPCkXPI9zIoJ6toCgLO2R09vgFNjuQTS+81ezl/x2HU+1PF37pXnxbZZWG
D5ndyvCo7VuAMcAUhqvoYipi5icUDeMhIvNjhm9vhGobk/6rqiNWwD0tsRBpPOTG
RjlI6UXf0wgSSAEWYvO058WMS4yl9BEbDRxG8PZTvf4WP/qDAbfSGBF9WawaMGQt
OyG2EfePuYoSVwLK40hcvRkhI+sDExHL/y2AHTUvqK50
-----END CERTIFICATE-----
Generated at Tue Jan 20 06:02:41 2026 by rpki-client