This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/VqGEMx7_g1oCR5PMih3sF1ICV0I.roa
File:                     VqGEMx7_g1oCR5PMih3sF1ICV0I.roa (raw, json)
Hash identifier:          2XQimBCsGUGReAdNUI71pDg4FSroIYJhgCkB4L3gVZQ=
Subject key identifier:   56:A1:84:33:1E:FF:83:5A:02:47:93:CC:8A:1D:EC:17:52:02:57:42
Certificate issuer:       /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial:       019B76EB8E827E168FADE71EC7E95EBA66C5
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/VqGEMx7_g1oCR5PMih3sF1ICV0I.roa
Signing time:             Thu 01 Jan 2026 00:18:27 +0000
ROA not before:           Thu 01 Jan 2026 00:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198482
IP address blocks:        85.187.208.0/24 maxlen: 24
                          85.187.209.0/24 maxlen: 24
                          85.187.210.0/24 maxlen: 24
                          85.187.211.0/24 maxlen: 24
                          85.187.212.0/24 maxlen: 24
                          85.187.220.0/24 maxlen: 24
                          85.187.221.0/24 maxlen: 24
                          91.92.61.0/24 maxlen: 24
                          151.237.0.0/24 maxlen: 24
                          151.237.1.0/24 maxlen: 24
                          151.237.2.0/24 maxlen: 24
                          151.237.3.0/24 maxlen: 24
                          151.237.4.0/24 maxlen: 24
                          151.237.5.0/24 maxlen: 24
                          151.237.6.0/24 maxlen: 24
                          151.237.10.0/24 maxlen: 24
                          151.237.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:8e:82:7e:16:8f:ad:e7:1e:c7:e9:5e:ba:66:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
        Validity
            Not Before: Jan  1 00:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56a184331eff835a024793cc8a1dec1752025742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:3a:bc:e4:e8:5d:64:ad:18:ac:cc:6f:cc:
                    4e:8e:d6:8b:e4:4c:9f:9b:f6:57:6f:29:ab:91:06:
                    62:46:91:10:0d:97:72:c9:f1:c0:d5:25:47:b1:26:
                    17:c7:c7:05:17:36:5d:2f:f0:a4:7a:17:82:49:c5:
                    d9:fc:21:7d:90:77:b5:72:ae:07:93:f1:65:3c:97:
                    16:62:c1:0e:dc:0e:46:ab:5a:b0:e7:19:a2:38:5d:
                    5d:94:b0:8f:67:fb:86:0a:b2:6a:2f:ff:fb:cf:ec:
                    f6:01:7a:7b:f1:ae:31:e4:a6:88:a6:7d:62:e4:9d:
                    a2:78:3b:ef:28:06:f9:c0:2b:2b:cf:03:81:b5:9a:
                    11:c0:aa:43:35:50:4d:37:da:54:36:0a:da:d7:a4:
                    52:7a:33:0e:0c:32:cc:75:43:8c:39:ad:50:1a:e3:
                    a0:bb:69:10:7b:4b:16:17:55:72:ae:f9:ff:f0:94:
                    14:01:0e:f7:c4:41:fa:db:24:7f:96:bd:a9:bd:1d:
                    8b:a6:a9:6d:41:f9:a6:0c:54:99:fd:4f:fa:d3:21:
                    60:87:e6:b8:a9:81:10:ed:5f:10:77:79:3e:2e:5e:
                    ad:27:5a:4c:bc:72:52:33:8a:41:9a:d2:cd:b1:37:
                    ef:82:7f:ac:63:42:33:51:0b:75:17:5e:b9:b6:26:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A1:84:33:1E:FF:83:5A:02:47:93:CC:8A:1D:EC:17:52:02:57:42
            X509v3 Authority Key Identifier:
                keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/VqGEMx7_g1oCR5PMih3sF1ICV0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.187.208.0-85.187.212.255
                  85.187.220.0/23
                  91.92.61.0/24
                  151.237.0.0-151.237.6.255
                  151.237.10.0/24
                  151.237.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:86:e9:0d:b4:d6:f4:88:ce:83:ae:77:ca:50:e5:0c:a4:f4:
         7f:77:64:e0:a2:fa:52:2f:1e:50:ba:48:a8:e7:f0:2d:09:25:
         08:3e:4f:f5:85:b8:2c:f7:46:bd:8c:4b:65:27:63:99:9d:5e:
         2c:d8:a9:60:1d:2c:17:f3:f7:37:a6:31:2f:0b:6d:c9:06:c2:
         b9:a2:f6:c8:f7:ca:35:20:e9:52:46:42:1f:7c:5c:ad:4d:20:
         2f:80:2f:fb:1a:1d:d4:99:e8:cb:b4:1a:ff:c7:ad:8a:33:44:
         f7:da:82:cb:69:20:97:4b:96:6c:a7:48:a8:d9:0b:7a:e6:b0:
         f5:21:ba:84:c7:96:e2:4c:c1:02:ab:b0:9d:2b:d3:a0:c2:13:
         73:aa:4e:8c:ba:26:e6:14:8b:ba:41:9f:7f:23:6d:4f:a0:ab:
         b9:46:d3:49:79:77:b7:0c:f1:3b:c1:d7:32:bd:ec:03:8a:79:
         ac:eb:49:78:84:61:83:8a:50:0d:30:6d:59:7c:bb:34:f4:f1:
         25:5e:d5:71:59:d3:c7:81:10:e8:ac:be:eb:b3:c5:57:7b:d6:
         05:86:df:89:22:7a:c3:de:43:2b:07:e1:8d:36:05:23:52:2e:
         d3:f9:48:d5:d1:64:57:07:ac:77:8b:c1:f4:6f:83:23:f4:a1:
         20:8f:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:38 2026 by rpki-client