This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ve-jf9EP-jZkCjaun2Gx06psfDo.roa
File:                     ve-jf9EP-jZkCjaun2Gx06psfDo.roa (raw, json)
Hash identifier:          5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=
Subject key identifier:   BD:EF:A3:7F:D1:0F:FA:36:64:0A:36:AE:9F:61:B1:D3:AA:6C:7C:3A
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       019B7F145877020C7EFD721423C899AC75FE
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ve-jf9EP-jZkCjaun2Gx06psfDo.roa
Signing time:             Fri 02 Jan 2026 14:19:58 +0000
ROA not before:           Fri 02 Jan 2026 14:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51964
IP address blocks:        185.84.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:58:77:02:0c:7e:fd:72:14:23:c8:99:ac:75:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: Jan  2 14:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bdefa37fd10ffa36640a36ae9f61b1d3aa6c7c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:23:a7:b1:ab:19:b9:cc:31:bb:00:40:ca:
                    47:af:61:4a:a0:f8:fc:58:5c:45:17:68:5d:af:56:
                    9e:b0:e9:f3:ae:41:ea:4d:b9:e7:21:89:33:11:39:
                    bb:0d:80:3a:5b:db:ad:2b:d3:4c:31:a0:ed:c8:7a:
                    e0:41:a2:31:49:ef:c7:99:af:48:0e:f8:30:8d:6a:
                    53:69:90:ef:84:3a:fb:92:f4:6b:5e:3a:fb:ea:b0:
                    a7:be:4d:9d:9b:53:bd:6d:cd:88:43:9b:0c:95:06:
                    b3:40:cb:d7:bb:65:05:12:74:3f:38:70:23:d8:00:
                    e0:e7:c5:2c:b9:c8:ed:7e:60:b2:e6:4a:91:84:c4:
                    8b:01:0e:b5:8f:4f:ac:ee:8e:3e:d4:82:97:c5:82:
                    fb:42:04:ee:0f:bf:79:3b:45:b3:19:e9:a3:76:6b:
                    e6:4a:09:3f:8b:c0:59:40:64:c4:83:74:09:a8:da:
                    4e:33:6c:30:80:37:63:04:11:da:bc:6e:13:c1:46:
                    71:60:6b:fa:23:6e:a6:6b:5d:28:5d:6b:e6:ed:c9:
                    97:1c:9e:3a:30:c3:8a:9a:73:0c:50:b3:9e:5b:60:
                    30:95:70:b5:89:30:3c:b9:7d:12:d4:aa:92:64:07:
                    62:13:d0:19:70:a9:2d:76:46:f4:19:e1:09:4d:59:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EF:A3:7F:D1:0F:FA:36:64:0A:36:AE:9F:61:B1:D3:AA:6C:7C:3A
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ve-jf9EP-jZkCjaun2Gx06psfDo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c4:d2:c2:74:c4:b8:e0:ca:02:69:eb:64:00:77:1c:82:11:
         94:d2:af:2a:61:dd:0d:05:b4:7f:bb:02:8e:dd:77:51:e1:ef:
         19:b2:80:fb:08:92:05:80:4f:a4:f1:b3:76:98:29:cf:14:44:
         82:80:d8:11:c6:72:33:0a:4a:af:d9:e1:4d:24:52:88:be:8f:
         eb:b9:c6:69:38:16:e7:fa:71:83:e4:cc:1b:98:e4:6c:ba:2d:
         cf:09:7f:27:77:bb:6b:ea:1c:cd:91:cc:53:bf:53:e7:43:56:
         b6:32:a1:3c:ea:78:1c:8e:c7:50:d0:6c:ef:67:26:2a:95:96:
         77:5b:18:14:35:4d:ad:53:a5:d5:03:29:79:a3:4d:ad:07:f6:
         c0:8f:5f:78:2a:f6:a0:a9:e2:0e:51:5e:0b:4c:6a:05:05:9c:
         1d:2c:a4:63:91:38:6f:9e:8b:96:aa:6b:8d:7e:2f:f0:28:94:
         e0:98:f1:5f:0a:dc:ec:26:17:99:ae:48:35:e9:9e:98:5a:34:
         b5:d4:d3:aa:b8:ad:67:50:fc:dd:25:8d:0f:95:22:85:24:10:
         67:bf:3b:3b:16:49:f2:32:be:04:05:30:f9:99:7c:6c:53:37:
         44:99:74:cb:6f:94:c3:4b:25:71:a4:2f:63:be:2b:c4:81:0f:
         f4:82:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:08:35 2026 by rpki-client