This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2vMfWBCDNyBnJWOLOJJI3BGuIE4.roa
File:                     2vMfWBCDNyBnJWOLOJJI3BGuIE4.roa (raw, json)
Hash identifier:          0UbDre+6vgcd4/K186dwsmwxSm+NQUwHJVAuoc0EPk8=
Subject key identifier:   DA:F3:1F:58:10:83:37:20:67:25:63:8B:38:92:48:DC:11:AE:20:4E
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019B7CEE4C119F9B127B8AF6AF5931BA7B3E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2vMfWBCDNyBnJWOLOJJI3BGuIE4.roa
Signing time:             Fri 02 Jan 2026 04:19:10 +0000
ROA not before:           Fri 02 Jan 2026 04:19:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        87.229.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:4c:11:9f:9b:12:7b:8a:f6:af:59:31:ba:7b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jan  2 04:19:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=daf31f58108337206725638b389248dc11ae204e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:18:5a:b1:94:ff:da:3c:dc:88:75:ed:b3:
                    54:8e:e2:14:6d:fc:c4:77:d3:32:48:d4:21:38:f5:
                    81:0a:13:70:67:3c:00:51:87:37:7f:be:44:b4:e2:
                    18:9b:8e:20:2b:b3:4a:79:7c:06:3f:e8:00:5d:5e:
                    e3:4c:48:6a:4a:82:ad:24:0e:c9:5f:35:de:d3:2c:
                    9d:aa:f7:3c:14:e4:09:70:21:41:61:b7:ea:77:f5:
                    20:82:20:f7:c5:97:f5:79:8c:99:5a:87:b9:df:33:
                    b6:b1:69:fc:9f:bc:1b:d4:3d:2c:b5:72:17:6c:76:
                    a8:c7:af:b0:39:56:0d:df:5c:4d:03:89:48:4f:bf:
                    d4:35:50:3d:9b:66:61:06:46:68:51:5c:e0:c8:04:
                    f7:8a:3d:8a:bb:b2:67:93:b9:d8:25:40:79:5d:38:
                    98:c6:41:3c:fd:c5:93:17:5e:89:e2:0e:92:9b:d1:
                    57:42:c4:e6:ef:8c:f9:f0:80:4c:14:3f:0a:42:c8:
                    3d:bf:aa:bb:e5:6d:34:7e:a5:b5:71:14:a5:7e:2c:
                    3a:15:d1:fe:14:91:0f:63:93:4a:71:b0:66:41:77:
                    c9:92:55:94:ba:38:85:35:46:42:a7:a4:52:63:0a:
                    51:8b:4c:79:8c:b0:08:05:fe:5c:f6:58:6f:7c:d3:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F3:1F:58:10:83:37:20:67:25:63:8B:38:92:48:DC:11:AE:20:4E
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2vMfWBCDNyBnJWOLOJJI3BGuIE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:31:e2:f6:96:47:e2:63:b7:6a:05:74:28:29:38:e2:28:46:
         f9:94:81:78:17:bf:9f:b2:91:90:9e:6a:3e:33:06:da:3a:c7:
         20:76:76:88:c9:77:f1:f1:36:e2:e9:9e:5e:27:01:1f:ec:6e:
         be:da:bf:40:90:c2:8c:04:54:8b:d3:91:48:7b:9e:85:92:78:
         74:c0:de:89:c7:5b:b1:dd:d9:4c:66:c6:9f:22:e0:fc:f1:91:
         05:9d:75:f6:07:99:37:6d:1c:0a:14:62:70:17:dc:42:fe:4f:
         6d:e5:3e:99:de:51:e1:6c:18:ab:15:01:a1:ed:9f:14:e9:8b:
         1a:4d:5a:8a:6b:fd:cd:ef:27:e1:d8:65:8e:91:f1:51:92:2e:
         94:13:4d:4b:e5:e8:4f:72:47:9d:f4:3e:f3:b4:e7:58:f8:76:
         25:25:83:9d:11:3f:aa:b0:9e:25:1d:d2:2d:e6:c6:b0:6f:9d:
         68:fe:e2:c3:ce:a6:fc:31:aa:e8:a7:be:c8:70:98:1c:d8:86:
         07:fb:74:fe:ac:8b:83:9c:7a:64:a2:2e:8e:c6:78:08:a5:8d:
         1d:8e:6e:b7:a6:e0:fd:55:12:6b:b3:01:bc:8d:94:4b:01:8c:
         45:7a:2e:e5:a6:81:14:ed:57:27:5a:75:54:17:26:b3:d4:a2:
         39:70:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:39 2026 by rpki-client