This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa
File:                     V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa (raw, json)
Hash identifier:          tm/NB5wzRW6Hwa1rWNFA/fkC7eMyH/xDfSrejkXoTro=
Subject key identifier:   57:E2:83:DA:5E:57:07:D4:C9:E1:66:EE:88:F4:9B:88:77:00:DB:AB
Certificate issuer:       /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial:       019B797EF3EEE3017F89050C7BA82BB213E7
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa
Signing time:             Thu 01 Jan 2026 12:18:41 +0000
ROA not before:           Thu 01 Jan 2026 12:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35273
IP address blocks:        91.235.196.0/22 maxlen: 22
                          193.142.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:f3:ee:e3:01:7f:89:05:0c:7b:a8:2b:b2:13:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
        Validity
            Not Before: Jan  1 12:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57e283da5e5707d4c9e166ee88f49b887700dbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:37:d2:96:0f:1b:fa:e8:6a:c3:ef:45:3d:
                    96:a0:dd:8a:4a:de:6f:96:58:55:04:d5:cc:dc:6c:
                    a6:66:2a:dd:c2:52:82:34:34:f8:f7:97:2b:9c:51:
                    a7:6b:ae:b7:e2:72:91:ed:4b:86:3f:2f:af:a9:6d:
                    47:32:c7:ac:0b:9c:0b:8e:37:60:69:7e:92:85:d2:
                    04:f1:34:e9:30:1f:4d:38:26:45:e2:d8:bd:cd:3b:
                    41:bb:17:3b:73:47:51:c0:ea:95:06:ab:08:d9:d8:
                    62:78:d0:80:7d:ca:0c:07:55:95:ed:ed:a0:0a:e1:
                    c1:45:65:1b:3e:33:9b:26:ae:ff:e0:0f:39:25:94:
                    b7:bc:88:71:7f:18:a7:3e:56:5e:cf:7c:1b:57:ba:
                    3d:a2:5d:a7:59:c1:ec:64:eb:8b:97:29:e0:a9:09:
                    f2:d2:35:fb:96:7f:64:42:be:a0:25:f4:55:d1:c3:
                    56:6f:17:36:68:e5:31:19:2c:a1:b0:2e:3f:d4:34:
                    07:aa:59:54:00:91:d4:55:73:d2:49:65:b2:97:9b:
                    4e:19:95:31:a7:eb:04:07:c6:94:0b:c8:c5:48:b4:
                    0b:66:73:27:e3:0b:d6:6f:ff:b4:98:77:93:ca:94:
                    04:a0:b9:34:dd:c8:eb:cf:5a:1c:3e:18:c3:cc:88:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E2:83:DA:5E:57:07:D4:C9:E1:66:EE:88:F4:9B:88:77:00:DB:AB
            X509v3 Authority Key Identifier:
                keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.235.196.0/22
                  193.142.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:0f:b0:3e:28:87:5b:c5:f7:0b:0f:b6:c8:c2:18:74:5f:1b:
         72:4b:e0:d9:8f:4a:99:0c:63:7e:ef:7c:7d:23:77:10:63:bc:
         1f:d6:b7:8c:6f:b0:89:cf:db:c8:bb:7d:f7:35:f1:43:39:36:
         cf:ac:02:8e:a9:49:db:b3:b9:6e:d2:8a:50:81:4a:c1:c1:d1:
         74:f5:ce:cf:b7:e4:b6:5e:cf:7c:5c:f9:7c:68:01:d3:f5:2a:
         e9:88:a6:f4:e1:c4:f0:b2:f0:97:a1:ed:81:57:71:d9:13:b6:
         bf:07:bc:ba:4d:21:03:49:7a:46:93:d8:ea:2f:f8:8c:ba:9b:
         f6:d8:de:99:75:1f:66:72:34:57:e8:84:fd:b2:e0:f3:e3:6e:
         81:96:48:38:f7:56:42:d3:22:86:1f:df:06:30:77:8b:b3:5f:
         e1:35:d6:f3:cf:0f:5d:e0:7e:1f:44:72:6c:52:07:c0:03:a9:
         97:60:90:ca:48:f7:46:ec:e9:a8:30:fe:8f:d6:f1:61:09:63:
         49:71:ca:8a:ae:a9:2e:f2:67:6c:59:46:f6:65:52:f1:e0:3b:
         94:2d:64:87:89:c8:4a:01:50:8d:5f:c8:ab:68:4c:36:4c:57:
         29:fd:d9:81:cd:de:ba:86:a5:23:ae:5a:88:b1:1d:f8:02:08:
         13:05:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:36 2026 by rpki-client