This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/VFU37iQljI79t35JlR-w1IteaQw.roa
File:                     VFU37iQljI79t35JlR-w1IteaQw.roa (raw, json)
Hash identifier:          J5t9v+o/rmxrY3dLqpHoI3srOK2b8Gw8LuwtD186cUY=
Subject key identifier:   54:55:37:EE:24:25:8C:8E:FD:B7:7E:49:95:1F:B0:D4:8B:5E:69:0C
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       019B77C739A5419CC0FAC753C3EAFB573CFE
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/VFU37iQljI79t35JlR-w1IteaQw.roa
Signing time:             Thu 01 Jan 2026 04:18:23 +0000
ROA not before:           Thu 01 Jan 2026 04:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211439
IP address blocks:        45.94.237.0/24 maxlen: 24
                          45.133.56.0/22 maxlen: 22
                          185.180.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:39:a5:41:9c:c0:fa:c7:53:c3:ea:fb:57:3c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Jan  1 04:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=545537ee24258c8efdb77e49951fb0d48b5e690c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:65:51:c1:38:c1:55:08:2c:44:9e:55:21:
                    ab:17:90:f4:2a:2e:bf:97:c2:0f:48:5b:db:4c:5d:
                    16:fa:39:61:b4:d3:08:13:aa:8c:bc:dd:64:45:44:
                    c1:5b:43:f3:89:f4:5e:47:7b:06:de:10:32:74:ce:
                    4e:1b:d9:3e:02:e6:e7:c9:be:57:b1:01:90:10:aa:
                    0c:ed:de:60:9b:ff:9d:20:44:67:5f:4e:f7:83:e8:
                    63:91:c8:0e:e3:94:46:98:12:4c:9e:cb:b6:0a:7c:
                    3f:a0:1a:1e:0b:74:58:67:7e:c3:2a:1d:da:7e:2f:
                    40:3e:4b:d4:5c:6c:13:6e:1d:6b:ab:99:57:96:38:
                    b2:a0:67:c7:df:14:dc:c7:aa:ec:1b:31:cf:a0:21:
                    b1:37:12:a5:3d:f5:54:c7:62:9c:4d:4d:6f:d5:2f:
                    c0:b9:ad:f2:97:0f:32:61:92:3f:24:c8:e1:29:3e:
                    c0:84:26:0e:92:3a:d4:38:ff:93:e7:b5:88:5a:1f:
                    ac:a1:56:59:5d:5f:83:fb:2f:75:a5:89:6d:2a:a4:
                    0f:76:59:96:3d:b7:60:a5:80:86:61:db:45:0e:32:
                    7e:4a:39:82:4a:2f:1b:45:8c:45:38:6c:c4:d1:1d:
                    b3:da:8b:58:d5:cf:c9:1f:0b:0b:73:33:31:6b:21:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:55:37:EE:24:25:8C:8E:FD:B7:7E:49:95:1F:B0:D4:8B:5E:69:0C
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/VFU37iQljI79t35JlR-w1IteaQw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.237.0/24
                  45.133.56.0/22
                  185.180.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:61:91:3b:01:bf:ee:1a:22:cf:be:8b:8e:f4:35:af:1b:fe:
         fa:1c:cf:db:64:e3:f0:6c:a5:bd:cc:3e:88:ff:91:09:c8:c7:
         49:63:fa:5c:b7:67:45:f2:68:88:4d:59:6a:f8:f6:6b:72:ed:
         e6:5d:51:8c:af:32:c0:3c:65:5d:e9:d0:4e:10:51:84:ed:8c:
         d7:d3:0c:0a:18:a4:10:22:4b:68:3b:33:92:42:26:78:45:41:
         ee:92:d0:01:20:2d:4c:da:8c:bc:89:92:d2:04:54:f0:f4:08:
         4e:68:b1:b0:e2:54:ff:c7:0e:2b:28:ed:d1:37:4d:c2:a1:e9:
         62:31:96:ef:4f:9b:07:9b:b1:e0:2d:33:5a:da:57:f8:bd:b5:
         b2:ab:e3:7b:7f:e5:bf:32:9e:24:68:bd:94:b9:fa:80:80:fb:
         ef:76:3c:5b:06:dd:ee:06:3f:08:60:30:6f:8b:80:f6:86:68:
         c5:e3:bc:ae:1f:ef:a3:20:94:0b:cc:c4:37:80:1d:fa:49:7c:
         a3:61:6e:36:2c:42:21:69:15:61:13:86:57:d0:21:15:7a:27:
         a4:43:e0:c4:9a:bf:e1:68:0b:65:b7:eb:82:8d:ef:43:68:ba:
         b4:1f:43:cf:a8:52:7c:fb:2a:e3:66:51:fa:cd:f0:49:97:62:
         f5:b5:9f:91
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt3xzmlQZzA+sdTw+r7Vzz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh
NmY3NTkwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDU1MzdlZTI0MjU4YzhlZmRiNzdlNDk5NTFmYjBkNDhiNWU2OTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X5lUcE4wVUILESeVSGrF5D0Ki6/
l8IPSFvbTF0W+jlhtNMIE6qMvN1kRUTBW0PzifReR3sG3hAydM5OG9k+Aubnyb5X
sQGQEKoM7d5gm/+dIERnX073g+hjkcgO45RGmBJMnsu2Cnw/oBoeC3RYZ37DKh3a
fi9APkvUXGwTbh1rq5lXljiyoGfH3xTcx6rsGzHPoCGxNxKlPfVUx2KcTU1v1S/A
ua3ylw8yYZI/JMjhKT7AhCYOkjrUOP+T57WIWh+soVZZXV+D+y91pYltKqQPdlmW
PbdgpYCGYdtFDjJ+SjmCSi8bRYxFOGzE0R2z2otY1c/JHwsLczMxayHWzQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFRVN+4kJYyO/bd+SZUfsNSLXmkMMB8GA1UdIwQY
MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt
Y2VjODkzMWNlNjMxLzEvVkZVMzdpUWxqSTc5dDM1SmxSLXcxSXRlYVF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx
LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV7tAwQC
LYU4AwQAubSTMA0GCSqGSIb3DQEBCwUAA4IBAQBNYZE7Ab/uGiLPvouO9DWvG/76
HM/bZOPwbKW9zD6I/5EJyMdJY/pct2dF8miITVlq+PZrcu3mXVGMrzLAPGVd6dBO
EFGE7YzX0wwKGKQQIktoOzOSQiZ4RUHuktABIC1M2oy8iZLSBFTw9AhOaLGw4lT/
xw4rKO3RN03CoeliMZbvT5sHm7HgLTNa2lf4vbWyq+N7f+W/Mp4kaL2UufqAgPvv
djxbBt3uBj8IYDBvi4D2hmjF47yuH++jIJQLzMQ3gB36SXyjYW42LEIhaRVhE4ZX
0CEVeiekQ+DEmr/haAtlt+uCje9DaLq0H0PPqFJ8+yrjZlH6zfBJl2L1tZ+R
-----END CERTIFICATE-----
Generated at Mon Jan 19 17:10:32 2026 by rpki-client