This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/VuWfYezMuwuKUhdrekzuq4vKzXw.roa
File:                     VuWfYezMuwuKUhdrekzuq4vKzXw.roa (raw, json)
Hash identifier:          9mN6oUykcmvDqkiR4AZJmp9qI5JmRegNOsGR4Bu/epo=
Subject key identifier:   56:E5:9F:61:EC:CC:BB:0B:8A:52:17:6B:7A:4C:EE:AB:8B:CA:CD:7C
Certificate issuer:       /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial:       019B7F15DC28B4C20FC6FA30225F987872A3
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/VuWfYezMuwuKUhdrekzuq4vKzXw.roa
Signing time:             Fri 02 Jan 2026 14:21:37 +0000
ROA not before:           Fri 02 Jan 2026 14:21:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42012
IP address blocks:        194.36.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:dc:28:b4:c2:0f:c6:fa:30:22:5f:98:78:72:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
        Validity
            Not Before: Jan  2 14:21:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56e59f61ecccbb0b8a52176b7a4ceeab8bcacd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:62:e7:a4:b1:a6:b9:9a:46:82:65:50:b8:
                    ee:20:2f:ad:7c:58:ad:e8:4d:3f:ed:35:47:52:c0:
                    6e:27:b1:34:0d:f8:45:20:0b:b0:8a:44:b6:40:49:
                    49:c9:69:d0:13:bd:42:ce:0e:70:0d:67:4f:fb:d6:
                    16:5f:c9:8a:9a:72:5d:bc:14:63:36:48:ea:11:d5:
                    7b:aa:82:1a:d4:59:64:f9:bb:03:ac:af:fe:a8:4d:
                    ae:c7:63:d4:a8:d6:3f:19:00:a6:47:09:3e:54:e9:
                    f5:4c:9b:a0:03:89:db:c6:f9:87:1e:93:c7:af:e2:
                    62:b2:39:83:53:a2:9e:bc:59:7a:d4:ba:70:8b:06:
                    32:5d:b0:93:8b:bf:b3:92:ae:a6:d2:2b:df:83:bd:
                    69:09:2a:ea:f2:21:fd:33:2d:27:dc:b8:76:c6:9a:
                    47:c0:e7:e2:ae:d8:b7:c6:7a:cd:c4:a0:cc:07:b8:
                    11:88:40:fc:90:ea:81:6d:7b:03:00:fa:34:21:88:
                    dd:a8:1f:f7:53:7b:4d:54:c1:57:dd:d3:8f:ef:c0:
                    bf:e6:3c:ad:a1:57:11:9a:e8:25:22:20:0a:d7:8e:
                    37:af:88:0d:79:67:11:2d:6b:f0:99:24:6b:77:56:
                    e5:93:17:4c:b5:a0:2b:88:6d:b5:2b:02:aa:42:a6:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E5:9F:61:EC:CC:BB:0B:8A:52:17:6B:7A:4C:EE:AB:8B:CA:CD:7C
            X509v3 Authority Key Identifier:
                keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/VuWfYezMuwuKUhdrekzuq4vKzXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.36.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:4d:72:9f:db:62:df:18:14:19:1b:6a:82:cd:27:be:1f:da:
         45:8e:1a:f9:66:d1:f2:61:45:e8:19:90:ad:5a:60:18:f8:b3:
         73:96:d8:6e:e7:3f:f2:cf:fb:a0:a4:43:b9:82:81:23:15:01:
         2b:1e:d4:3f:5e:18:cc:47:a2:f8:fa:69:fa:f4:be:be:4a:90:
         cd:1f:5e:d1:e2:8f:6b:f5:4f:bb:99:66:b6:e8:80:0c:ed:90:
         c7:2d:e8:db:c8:e2:d6:66:c2:22:d3:62:32:99:16:38:cf:ec:
         06:c3:fd:db:f9:58:00:a9:69:64:e1:d8:81:bc:b8:7f:7b:59:
         bd:cd:5e:ad:99:7d:41:72:b9:f4:f0:55:8d:64:54:ec:f7:cf:
         c6:fd:9f:1a:5d:66:70:1e:6c:55:45:80:89:2c:fe:17:f3:f1:
         12:4b:3d:fe:a4:17:60:96:84:bf:8a:16:44:0d:4b:99:a8:1d:
         b1:c9:49:f6:45:0a:47:60:e7:5f:c7:7e:dc:7a:ef:15:70:56:
         57:f8:df:81:03:af:16:ab:25:10:d0:7d:4a:ee:9f:d6:0a:ea:
         6b:f2:56:24:3b:8a:99:db:7b:2f:19:d6:0c:e2:06:6a:71:94:
         fb:e0:90:76:a7:c4:73:b6:af:b5:69:dc:6d:dd:17:41:f7:3f:
         64:d3:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:39 2026 by rpki-client