This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/dkSvsv3aojLPi3iHgFIjQm8NUN8.roa
File:                     dkSvsv3aojLPi3iHgFIjQm8NUN8.roa (raw, json)
Hash identifier:          y7+RJdVH8M1szX7d8xaeEgPlUbojCLktpQXvmxHwroM=
Subject key identifier:   76:44:AF:B2:FD:DA:A2:32:CF:8B:78:87:80:52:23:42:6F:0D:50:DF
Certificate issuer:       /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial:       019BFFE9CB320B0F83E66A2627CF2185F662
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/dkSvsv3aojLPi3iHgFIjQm8NUN8.roa
Signing time:             Tue 27 Jan 2026 14:44:30 +0000
ROA not before:           Tue 27 Jan 2026 14:44:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56911
IP address blocks:        195.18.11.0/24 maxlen: 24
                          195.234.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:e9:cb:32:0b:0f:83:e6:6a:26:27:cf:21:85:f6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
        Validity
            Not Before: Jan 27 14:44:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7644afb2fddaa232cf8b7887805223426f0d50df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:65:11:98:96:44:8a:e4:12:02:25:39:2a:d7:
                    35:eb:98:f5:28:b6:24:c4:a9:83:22:25:d8:14:58:
                    8d:af:dd:d9:ed:a7:9f:08:10:cf:0d:ec:9a:fa:d4:
                    12:19:bb:0e:af:83:18:8b:54:cd:3e:71:6f:45:b8:
                    49:96:80:6d:2f:23:6a:b6:af:23:50:81:90:e5:6b:
                    f7:c9:a1:df:2b:86:84:0c:ac:68:26:5d:7a:0f:7d:
                    28:b2:7d:a4:b4:c9:65:9c:1b:76:41:1f:3f:5a:34:
                    0d:b8:1a:43:05:c7:5a:ef:13:72:b3:70:44:2a:d5:
                    a8:21:d4:ad:df:b0:9a:4e:f7:fa:03:eb:0b:d2:7f:
                    bf:55:2a:99:e9:b8:e2:23:18:36:50:11:43:02:5d:
                    08:a9:21:97:ff:0c:78:3e:df:32:4c:b8:2e:ff:19:
                    13:12:e9:83:c5:19:8e:eb:52:fa:a3:83:81:dd:a8:
                    10:1c:ac:f8:ce:f5:a5:8c:f7:45:ca:e8:a7:37:86:
                    c5:98:5d:e4:6f:4c:9d:df:42:48:01:c9:1d:57:d6:
                    3b:99:99:38:b7:56:d6:42:fc:aa:89:52:b9:0e:c5:
                    9b:ae:74:d3:25:2f:78:e8:ca:41:6e:e7:8f:e7:9b:
                    90:ad:fe:81:66:3c:42:ff:19:94:6a:0a:ea:ea:51:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:44:AF:B2:FD:DA:A2:32:CF:8B:78:87:80:52:23:42:6F:0D:50:DF
            X509v3 Authority Key Identifier:
                keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/dkSvsv3aojLPi3iHgFIjQm8NUN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.18.11.0/24
                  195.234.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:8f:d5:8b:e3:f3:86:40:be:14:67:cf:5c:f8:e2:bc:49:f0:
         e2:c5:88:e9:5b:2c:1e:c5:f8:b7:ba:db:5b:0d:b3:64:90:48:
         b0:65:08:65:90:a7:06:55:2e:ca:3c:f4:22:1b:e9:47:4d:2e:
         cd:d2:5e:19:cd:b1:e9:6d:9f:1d:5e:1f:86:ef:5a:11:ab:0d:
         db:12:f4:16:6d:f3:17:34:51:8d:28:15:89:db:86:d4:49:1b:
         7a:86:a8:8b:4a:9e:3c:a6:0f:57:73:5b:f4:1f:21:c8:77:01:
         56:3b:9c:a4:03:53:fd:8c:2d:5f:20:3c:22:fc:9d:f0:cb:6d:
         ad:80:9c:27:c3:b7:03:21:d6:bc:ae:48:0d:cd:44:5d:f2:ab:
         b3:28:6c:b5:08:7c:9d:b0:7c:8b:88:42:4a:de:0e:68:97:16:
         76:2a:e1:9e:17:64:49:b2:99:a2:89:32:46:7c:68:8a:6b:e1:
         e8:f9:ab:2b:3e:e3:7d:34:55:2e:d1:70:23:0c:88:19:e1:ee:
         89:a4:45:36:c0:9c:39:7a:c0:13:a8:6b:95:36:5f:12:b7:c6:
         ca:1c:b8:c0:38:dd:81:4f:33:2f:5d:fe:82:a0:48:ba:85:8c:
         ad:f5:63:97:11:96:9e:70:a7:c8:e0:fc:34:49:e0:d5:d0:9b:
         9f:3d:51:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZv/6csyCw+D5momJ88hhfZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NjEwYTU5ZGRmZmJkMjRlZTRiMjk5ZTliMjRiMWJmMDM2
ZjhlNDMwHhcNMjYwMTI3MTQ0NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjQ0YWZiMmZkZGFhMjMyY2Y4Yjc4ODc4MDUyMjM0MjZmMGQ1MGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GURmJZEiuQSAiU5Ktc165j1KLYk
xKmDIiXYFFiNr93Z7aefCBDPDeya+tQSGbsOr4MYi1TNPnFvRbhJloBtLyNqtq8j
UIGQ5Wv3yaHfK4aEDKxoJl16D30osn2ktMllnBt2QR8/WjQNuBpDBcda7xNys3BE
KtWoIdSt37CaTvf6A+sL0n+/VSqZ6bjiIxg2UBFDAl0IqSGX/wx4Pt8yTLgu/xkT
EumDxRmO61L6o4OB3agQHKz4zvWljPdFyuinN4bFmF3kb0yd30JIAckdV9Y7mZk4
t1bWQvyqiVK5DsWbrnTTJS946MpBbueP55uQrf6BZjxC/xmUagrq6lFc8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHZEr7L92qIyz4t4h4BSI0JvDVDfMB8GA1UdIwQY
MBaAFFVhClnd/70k7kspnpsksb8Db45DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUt
OWZiNDE1YjA5YjVlLzEvZGtTdnN2M2FvakxQaTNpSGdGSWpRbThOVU44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xN2EzYmQtNzU0YS00NTkzLWI1MWUtOWZiNDE1YjA5YjVl
LzEvVldFS1dkM192U1R1U3ltZW15U3h2d052amtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwxILAwQA
w+pdMA0GCSqGSIb3DQEBCwUAA4IBAQCXj9WL4/OGQL4UZ89c+OK8SfDixYjpWywe
xfi3uttbDbNkkEiwZQhlkKcGVS7KPPQiG+lHTS7N0l4ZzbHpbZ8dXh+G71oRqw3b
EvQWbfMXNFGNKBWJ24bUSRt6hqiLSp48pg9Xc1v0HyHIdwFWO5ykA1P9jC1fIDwi
/J3wy22tgJwnw7cDIda8rkgNzURd8quzKGy1CHydsHyLiEJK3g5olxZ2KuGeF2RJ
spmiiTJGfGiKa+Ho+asrPuN9NFUu0XAjDIgZ4e6JpEU2wJw5esATqGuVNl8St8bK
HLjAON2BTzMvXf6CoEi6hYyt9WOXEZaecKfI4Pw0SeDV0JufPVHP
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:22 2026 by rpki-client