This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/t5WEk0DoNUrft3Zy3UfvtCTsEgA.roa
File:                     t5WEk0DoNUrft3Zy3UfvtCTsEgA.roa (raw, json)
Hash identifier:          y8z5xcdOoisg3/Lhw/UJq/FRgFg1letqfgFD0/0tbNI=
Subject key identifier:   B7:95:84:93:40:E8:35:4A:DF:B7:76:72:DD:47:EF:B4:24:EC:12:00
Certificate issuer:       /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial:       019B7C80B0C25E251823E6C362031DA68562
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/t5WEk0DoNUrft3Zy3UfvtCTsEgA.roa
Signing time:             Fri 02 Jan 2026 02:19:27 +0000
ROA not before:           Fri 02 Jan 2026 02:19:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50943
IP address blocks:        194.169.216.0/24 maxlen: 24
                          2001:678:1070::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:b0:c2:5e:25:18:23:e6:c3:62:03:1d:a6:85:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Validity
            Not Before: Jan  2 02:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b795849340e8354adfb77672dd47efb424ec1200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:ec:de:e8:21:0e:46:4f:a0:a1:7d:43:73:
                    db:48:51:8e:56:a5:bc:94:0d:3e:28:48:a8:5a:35:
                    15:4f:a9:26:18:29:e7:84:6a:2e:55:dc:b2:a9:0a:
                    08:71:ce:2a:2f:40:0d:89:6d:12:94:15:6f:f1:94:
                    ff:66:52:0a:08:3d:a8:01:d1:8b:4e:54:b5:a8:8c:
                    64:a8:fb:4d:97:b9:8f:d6:a1:6f:a3:29:1b:b5:e8:
                    1d:b9:60:9f:07:3c:ff:0a:8d:d2:65:3e:58:06:d4:
                    ae:58:2f:1f:f3:df:f6:82:18:3c:a7:6e:e3:b1:7d:
                    1b:ab:8e:4f:d9:dd:4c:dd:22:a6:3f:f2:ce:e4:6f:
                    1c:01:8c:6e:a3:f9:d7:b6:44:28:30:25:a4:29:ea:
                    25:9b:39:d5:fc:ad:9b:e1:4d:b5:72:37:cf:9d:77:
                    db:7a:86:a2:23:82:86:2d:98:90:1b:2c:09:9f:cf:
                    7a:a7:9c:95:54:eb:5c:1f:2d:0e:92:db:03:a5:db:
                    29:15:6b:d9:fe:19:82:1a:5a:ad:54:31:9f:9a:a2:
                    15:52:da:1e:32:10:01:78:08:5b:78:15:19:1a:39:
                    0d:25:4a:54:81:f4:7a:4d:24:08:b4:f3:b1:c3:1d:
                    12:00:d5:f3:0d:32:e7:f9:2f:16:f1:54:c8:98:fd:
                    c6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:95:84:93:40:E8:35:4A:DF:B7:76:72:DD:47:EF:B4:24:EC:12:00
            X509v3 Authority Key Identifier:
                keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/t5WEk0DoNUrft3Zy3UfvtCTsEgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.169.216.0/24
                IPv6:
                  2001:678:1070::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:7b:e2:b6:e9:13:20:cc:c4:fb:f7:4c:26:05:98:64:37:
         0a:73:e6:54:e0:16:40:00:d8:f9:bb:05:e0:9d:a8:5a:44:39:
         80:a2:cd:2c:53:7a:93:c6:a3:20:4b:77:b5:c0:cf:e7:65:76:
         3b:74:2a:1b:60:3f:16:64:ba:ec:aa:c6:6b:e3:e5:c6:13:a9:
         bc:fd:ea:1f:ea:e9:d1:52:0b:fd:b1:bc:9d:6b:8c:c7:31:81:
         e0:55:a8:11:44:df:a1:e3:ee:a8:f2:21:c8:8f:b2:0c:43:1f:
         5c:8d:0d:c2:ee:26:73:d1:97:0b:83:38:5d:70:42:8e:9a:c6:
         7c:62:d8:f4:fb:5b:85:cc:7a:47:b3:b3:c3:fa:5c:85:bc:4c:
         8e:dd:9e:7a:25:0f:f9:25:12:64:a6:6a:7d:dd:aa:10:25:2f:
         6e:17:c5:77:8a:72:7d:80:bc:5a:e7:d4:99:23:8a:8c:f9:e0:
         64:a8:9d:4b:99:74:b5:74:ca:1d:e1:0c:ab:91:35:a9:4a:e9:
         bf:36:f1:17:0d:35:f2:3a:7c:ac:99:5e:25:61:c9:f0:10:bd:
         96:1f:8b:dc:59:10:33:d6:38:70:94:9c:a4:7f:52:d1:55:f4:
         61:c7:d1:03:76:62:f2:73:8e:ee:2d:7c:ff:d9:ca:e1:fb:4a:
         e7:a2:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:53 2026 by rpki-client