This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/HVNyPpshDup5-VV20Zvos0kqjfw.roa
File:                     HVNyPpshDup5-VV20Zvos0kqjfw.roa (raw, json)
Hash identifier:          feauyuxnsf6ozUYlBnDdKhJOIjOdxAMV8HCT2qzKw9w=
Subject key identifier:   1D:53:72:3E:9B:21:0E:EA:79:F9:55:76:D1:9B:E8:B3:49:2A:8D:FC
Certificate issuer:       /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial:       019B7E37EA4C8B8C44113BEF2680168A6BC2
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/HVNyPpshDup5-VV20Zvos0kqjfw.roa
Signing time:             Fri 02 Jan 2026 10:19:12 +0000
ROA not before:           Fri 02 Jan 2026 10:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44183
IP address blocks:        195.184.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:ea:4c:8b:8c:44:11:3b:ef:26:80:16:8a:6b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
        Validity
            Not Before: Jan  2 10:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1d53723e9b210eea79f95576d19be8b3492a8dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:b4:d1:1e:c8:8f:0f:97:dc:99:2c:40:79:
                    5a:74:b9:cd:9b:75:b8:74:fb:ca:f5:8f:a9:71:55:
                    1e:f8:17:29:23:94:2f:0c:e0:fb:65:95:7a:6a:b0:
                    45:d7:70:b6:04:e3:e1:a0:89:01:92:4b:1c:4d:4b:
                    d8:df:b6:94:62:44:95:ac:c6:9b:f1:40:9a:56:74:
                    08:87:d3:ad:9e:18:05:bf:21:5b:bf:84:66:06:63:
                    37:72:1b:ae:52:e1:59:b2:07:b1:9c:eb:94:03:51:
                    fe:03:9a:32:82:4b:50:dd:78:6e:fa:9b:28:f0:e3:
                    3a:6b:ed:f4:d7:d2:cd:1f:01:34:b5:05:f4:ad:91:
                    ec:a2:3c:aa:1b:ab:2c:6b:a1:20:e0:b6:ed:00:d5:
                    ab:43:d9:b1:6c:9b:da:c5:6a:52:8a:91:36:73:b6:
                    2e:8e:d4:0c:1e:99:81:ed:74:3b:a5:22:13:9f:33:
                    04:a9:44:ab:91:b3:05:d5:9a:e4:08:45:69:c3:e7:
                    cc:a7:8c:b4:f1:00:0e:62:ce:a5:cc:df:7d:bf:ed:
                    c0:4d:0b:29:35:46:2a:d8:48:4c:5d:d3:b3:06:de:
                    10:10:38:48:18:40:f0:ec:e5:f1:92:60:1f:76:ac:
                    1c:9c:b2:91:1c:56:14:01:02:c0:51:04:86:b1:a8:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:53:72:3E:9B:21:0E:EA:79:F9:55:76:D1:9B:E8:B3:49:2A:8D:FC
            X509v3 Authority Key Identifier:
                keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/HVNyPpshDup5-VV20Zvos0kqjfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.184.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:78:cc:56:76:b0:88:36:a2:b1:b1:39:ad:56:39:a1:a5:
         20:82:57:6a:81:95:8e:fd:3e:bd:24:84:d6:bb:81:38:45:2c:
         0b:bd:49:7e:3e:3a:3d:69:7d:fa:9a:b1:0e:7b:e7:74:ad:ae:
         bb:9a:5b:16:76:6d:ed:01:9b:9a:44:99:ac:62:4e:2a:ba:91:
         53:39:46:08:73:31:6a:b8:ad:64:0f:52:00:21:a8:ff:df:b5:
         d0:9e:7e:e8:24:7f:3c:6a:82:0e:75:5a:7c:7a:d9:00:66:18:
         db:30:57:1a:29:bd:9c:29:35:fb:a0:a3:46:4c:df:60:5e:9e:
         18:88:59:b8:bf:0f:8c:5d:7d:94:2b:fa:8b:b3:c3:2a:c1:09:
         d8:c3:fd:e1:25:dc:69:74:8b:c4:d9:50:59:ce:f7:2e:aa:dd:
         ea:cb:7b:74:52:4c:20:fb:df:2f:c7:f9:23:27:66:b9:3b:51:
         12:9d:f8:e0:91:4d:60:a1:e5:55:d9:4e:1e:ec:95:2a:46:9a:
         68:db:6d:dc:45:21:75:ed:c0:e5:92:0e:32:76:66:a4:10:de:
         50:7f:f8:7e:4d:34:47:29:a2:49:7b:7c:81:99:e2:2a:aa:5e:
         ca:9e:ec:a4:d0:a7:83:89:dc:2c:bb:02:0b:8b:b3:98:f8:0d:
         f7:0d:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:23:42 2026 by rpki-client