This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/VUBqDVSTc9X33Ru22fhohdoill4.roa
File:                     VUBqDVSTc9X33Ru22fhohdoill4.roa (raw, json)
Hash identifier:          xLZ5Laa/gOttFf8mokrurIU7caX1O/u8RDHEevdtn0M=
Subject key identifier:   55:40:6A:0D:54:93:73:D5:F7:DD:1B:B6:D9:F8:68:85:DA:22:96:5E
Certificate issuer:       /CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Certificate serial:       019B7C7FE746A3DBC07D691F59847EF5EDEE
Authority key identifier: 1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/VUBqDVSTc9X33Ru22fhohdoill4.roa
Signing time:             Fri 02 Jan 2026 02:18:35 +0000
ROA not before:           Fri 02 Jan 2026 02:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15692
IP address blocks:        86.105.0.0/24 maxlen: 24
                          86.105.225.0/24 maxlen: 24
                          89.37.68.0/23 maxlen: 23
                          89.37.68.0/24 maxlen: 24
                          89.37.69.0/24 maxlen: 24
                          89.40.44.0/23 maxlen: 23
                          93.115.8.0/24 maxlen: 24
                          94.177.130.0/24 maxlen: 24
                          185.13.244.0/22 maxlen: 22
                          188.215.28.0/23 maxlen: 23
                          188.215.28.0/24 maxlen: 24
                          188.215.29.0/24 maxlen: 24
                          193.169.192.0/23 maxlen: 23
                          2a02:f540::/30 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:e7:46:a3:db:c0:7d:69:1f:59:84:7e:f5:ed:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
        Validity
            Not Before: Jan  2 02:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55406a0d549373d5f7dd1bb6d9f86885da22965e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:65:6c:07:9b:0a:09:21:87:58:2b:21:18:
                    b8:a0:ab:36:33:d8:30:45:03:85:e3:a5:88:d8:bc:
                    d2:52:b0:b7:b6:2d:c1:19:1f:44:e3:30:5e:a0:a1:
                    db:bf:d5:8e:41:b0:55:ec:76:73:b9:26:32:7f:f8:
                    20:e4:b9:ae:9b:05:c6:d0:04:08:ca:dd:fd:a5:b8:
                    56:7d:e0:32:13:0d:8e:ce:18:0b:7f:9f:20:87:b8:
                    74:ec:34:77:a7:c0:43:60:8b:44:e6:04:0f:c1:17:
                    12:5d:d2:06:66:2c:b2:fe:9d:2d:1d:5e:f0:e3:ae:
                    41:bf:2b:90:b0:33:8f:01:64:8a:3f:1c:d0:bf:e1:
                    4d:fb:58:82:69:74:29:a8:88:3b:db:ba:15:02:fd:
                    75:33:1a:11:9f:bd:97:ff:9e:1c:bb:c2:7b:b7:6c:
                    ac:3b:c7:c9:c2:75:ba:9e:6c:e3:b7:b9:ad:c3:aa:
                    27:8d:76:04:a8:73:c0:77:bb:74:ba:c3:58:d0:af:
                    22:88:19:fb:25:2e:5a:9a:8f:15:f5:98:65:3d:e5:
                    5c:74:0d:51:f3:bf:d9:9d:31:f9:3a:10:fc:99:22:
                    72:24:c8:53:1e:ef:82:98:c0:63:2e:4b:9a:6a:9b:
                    94:7e:39:e2:23:1a:03:67:b7:53:85:60:7b:4b:a9:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:40:6A:0D:54:93:73:D5:F7:DD:1B:B6:D9:F8:68:85:DA:22:96:5E
            X509v3 Authority Key Identifier:
                keyid:1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/VUBqDVSTc9X33Ru22fhohdoill4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.105.0.0/24
                  86.105.225.0/24
                  89.37.68.0/23
                  89.40.44.0/23
                  93.115.8.0/24
                  94.177.130.0/24
                  185.13.244.0/22
                  188.215.28.0/23
                  193.169.192.0/23
                IPv6:
                  2a02:f540::/30

    Signature Algorithm: sha256WithRSAEncryption
         70:19:b1:fa:a5:62:7d:cb:20:66:6e:48:74:b6:d2:5c:89:fd:
         c9:a7:11:3e:21:53:8f:49:66:fb:3c:7e:41:a2:a7:7f:c9:30:
         06:15:c4:82:f1:ed:cb:f6:46:fe:f7:e5:de:d6:22:a6:47:c4:
         f6:73:8c:b9:81:d0:10:c1:c4:ee:28:d2:ee:02:5a:44:72:9e:
         86:82:9a:24:f1:2d:55:f2:18:be:2a:f8:d1:cd:76:bb:28:6b:
         8e:ba:8c:2a:99:6a:b5:5e:ce:df:13:9d:4a:18:f4:fa:ec:9a:
         9b:c2:22:d7:72:53:65:e3:a7:9c:2d:88:04:45:d6:c3:3b:18:
         6b:52:de:a7:c0:12:3f:89:bd:24:fe:f6:b7:b6:11:bc:6d:99:
         5c:d7:dd:e3:75:3c:bc:21:21:b6:07:4a:57:58:46:e5:0f:77:
         61:73:13:54:a9:8d:b1:1e:e8:8c:fb:27:3b:88:27:9f:02:40:
         e9:63:f8:0b:6f:40:ba:27:ef:68:91:19:5e:8f:ea:93:a9:ca:
         f9:7f:cf:6e:79:a1:5f:05:36:09:b5:2e:5d:48:1c:4f:3c:90:
         91:3a:b7:e6:e5:6e:88:1f:33:36:2b:ce:92:0f:dd:7f:c1:c4:
         65:27:dc:dc:7d:2e:79:2a:da:2e:f7:88:fa:5e:69:eb:b8:dc:
         6d:69:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:07 2026 by rpki-client