This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/vGdkJ6Jb40kb6ca3kH2doTZU7TE.roa
File:                     vGdkJ6Jb40kb6ca3kH2doTZU7TE.roa (raw, json)
Hash identifier:          UykJLaQYM3VV0YrvsPUyq9lvEDRKSCLvZQW9aSP0Cvk=
Subject key identifier:   BC:67:64:27:A2:5B:E3:49:1B:E9:C6:B7:90:7D:9D:A1:36:54:ED:31
Certificate issuer:       /CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
Certificate serial:       019B7B36F4BA4224F9B4790C686CBAFACC50
Authority key identifier: E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/vGdkJ6Jb40kb6ca3kH2doTZU7TE.roa
Signing time:             Thu 01 Jan 2026 20:19:17 +0000
ROA not before:           Thu 01 Jan 2026 20:19:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62154
IP address blocks:        185.34.203.0/24 maxlen: 24
                          2a04:5ec7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:f4:ba:42:24:f9:b4:79:0c:68:6c:ba:fa:cc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74c290b5bccdb7de5383ee45ba615d2f306761f
        Validity
            Not Before: Jan  1 20:19:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc676427a25be3491be9c6b7907d9da13654ed31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:e5:ce:9b:0b:0e:8b:69:9a:e2:24:a7:f9:
                    b2:7e:f8:4a:0f:ff:9f:48:d3:41:c8:de:53:c9:3f:
                    f3:ed:57:d0:89:b5:d8:00:2a:23:96:ac:7a:66:a5:
                    ec:5a:d6:87:ee:96:00:43:24:16:4c:88:56:2b:99:
                    6a:6e:c0:ff:d4:80:05:e9:3e:16:b5:ea:b1:4a:85:
                    f2:34:19:87:0c:84:9e:61:e6:3f:3c:b0:2c:af:33:
                    42:a5:2d:46:d1:60:c0:fc:aa:ef:2d:3e:c6:e6:ec:
                    40:4b:7a:9a:b1:ef:3a:98:99:44:b8:9f:a9:4c:f1:
                    d5:3b:03:a0:4e:70:fd:dd:21:96:dd:0a:26:d4:75:
                    9a:3a:79:24:bf:7b:4b:a5:e6:5a:7b:ac:3b:1f:8f:
                    78:e8:9f:3a:ac:ee:95:28:bc:8d:1f:0b:18:89:d3:
                    2c:b0:a0:ae:4b:4b:85:a6:25:12:c4:d7:72:4e:e4:
                    39:31:6c:e9:85:66:cd:96:b4:d1:aa:8b:d3:33:ad:
                    4c:ae:d2:a2:22:4b:17:a0:12:da:78:f0:db:a2:99:
                    cb:bc:0d:ee:08:da:1a:9d:b2:06:be:0b:43:39:cf:
                    b5:c5:6d:89:81:e1:43:31:34:29:bf:98:2d:53:60:
                    0b:8c:ca:51:9b:34:cf:37:ad:bf:61:a7:2b:56:f8:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:64:27:A2:5B:E3:49:1B:E9:C6:B7:90:7D:9D:A1:36:54:ED:31
            X509v3 Authority Key Identifier:
                keyid:E7:4C:29:0B:5B:CC:DB:7D:E5:38:3E:E4:5B:A6:15:D2:F3:06:76:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50wpC1vM233lOD7kW6YV0vMGdh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/vGdkJ6Jb40kb6ca3kH2doTZU7TE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/222376-5cf6-4978-a8a3-d741fb273116/1/50wpC1vM233lOD7kW6YV0vMGdh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.203.0/24
                IPv6:
                  2a04:5ec7::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:84:6e:70:19:32:62:e8:4d:73:85:6b:c2:51:6a:f9:70:dd:
         78:bb:d3:2b:d6:8b:86:f9:f1:80:e9:00:aa:9c:af:71:ec:89:
         9a:50:ce:aa:20:f3:e4:db:26:e4:d0:05:57:c1:a3:84:c9:dc:
         6f:27:76:30:8e:b1:5c:b5:81:64:9e:27:1b:97:6d:58:fd:4f:
         63:14:fd:c9:2c:b1:e6:51:bb:cb:89:81:ef:c3:6c:37:20:21:
         c1:4c:2b:0f:53:a2:b5:fb:85:56:f1:31:a3:b5:36:1c:c5:a3:
         6f:90:54:f2:65:04:10:58:e4:a3:ce:a2:38:e8:fb:2b:81:54:
         b2:10:c0:eb:c3:8c:aa:a1:4f:34:65:18:ce:49:eb:61:3e:5e:
         53:69:3c:3e:a0:ff:70:41:c1:e7:50:0f:1d:b2:9f:45:79:f2:
         72:97:b5:20:8e:17:f6:36:98:81:28:f2:79:24:a5:68:a5:e5:
         14:e0:e4:d0:66:ff:6b:3f:3b:8b:d0:c1:ca:71:fd:21:78:d4:
         f9:2a:0f:fb:67:3b:0a:10:0f:a8:cb:f1:b4:60:52:12:23:88:
         09:dd:5d:8d:3b:d3:bb:4a:0b:cd:18:2a:2a:b5:b5:53:41:bd:
         5b:98:75:43:e9:8b:db:7f:e1:bb:11:ee:0a:cb:15:44:f9:be:
         40:68:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:14 2026 by rpki-client