This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/V1Zt7dOkRQJN8fVzbXfX6mLnU_Y.roa
File:                     V1Zt7dOkRQJN8fVzbXfX6mLnU_Y.roa (raw, json)
Hash identifier:          x7DcWnCYkgI3fchvUXufEb7jxl82DTdbTgzjrV24NZA=
Subject key identifier:   57:56:6D:ED:D3:A4:45:02:4D:F1:F5:73:6D:77:D7:EA:62:E7:53:F6
Certificate issuer:       /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial:       019B7F140AEC89D9BD502F2C8695A2BF6CAE
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/V1Zt7dOkRQJN8fVzbXfX6mLnU_Y.roa
Signing time:             Fri 02 Jan 2026 14:19:38 +0000
ROA not before:           Fri 02 Jan 2026 14:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4766
IP address blocks:        84.37.2.0/24 maxlen: 24
                          84.37.17.0/24 maxlen: 24
                          84.37.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 02:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:0a:ec:89:d9:bd:50:2f:2c:86:95:a2:bf:6c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
        Validity
            Not Before: Jan  2 14:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57566dedd3a445024df1f5736d77d7ea62e753f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2d:ac:95:46:be:40:20:10:f9:37:b8:c2:f8:
                    19:30:47:9c:e3:d8:18:38:80:e1:da:1e:16:af:d4:
                    2a:d8:0f:91:f5:03:1e:76:c1:43:15:bf:1a:1f:d4:
                    ce:a2:55:e9:67:6d:2a:bb:70:77:d8:63:5e:a5:53:
                    a3:7c:c1:48:b0:9b:59:7b:35:c4:5a:e7:5d:85:56:
                    b4:91:4e:02:e0:9e:d0:b8:fc:9a:88:a1:60:15:57:
                    55:d1:41:be:e2:27:e9:2c:57:f2:7a:12:1f:83:d6:
                    ea:2c:d1:d5:1e:57:c9:82:39:4f:88:65:b6:8c:53:
                    ee:df:4a:5e:7c:fd:0e:5f:0c:1f:3e:22:90:e1:87:
                    59:9b:5e:49:75:0c:2c:a5:23:0a:0f:34:ea:76:3d:
                    9f:f9:d7:2d:94:a8:e3:2f:0e:71:75:d9:4a:c0:60:
                    75:b8:64:a8:04:a6:04:58:ea:bc:f2:64:e8:e6:a0:
                    2f:1a:71:82:6e:ca:23:21:ae:a9:36:4a:9e:45:bb:
                    f0:41:a2:0b:e3:93:69:06:de:5b:f7:be:d6:61:c1:
                    37:5e:d5:a1:53:e0:69:f3:83:14:32:4a:c2:ba:25:
                    cb:e1:77:8a:7b:df:32:6f:e2:5f:9a:6b:cc:07:3c:
                    b0:5d:9a:43:15:05:ac:73:b3:06:d3:b8:c3:53:b7:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:56:6D:ED:D3:A4:45:02:4D:F1:F5:73:6D:77:D7:EA:62:E7:53:F6
            X509v3 Authority Key Identifier:
                keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/V1Zt7dOkRQJN8fVzbXfX6mLnU_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.37.2.0/24
                  84.37.17.0/24
                  84.37.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:1e:60:3a:1c:0e:95:d9:a6:76:64:af:2e:aa:fb:a0:3f:74:
         46:cc:1f:51:46:a5:6d:09:a0:e6:7a:8e:c6:dc:91:89:53:33:
         fd:83:f3:2a:e9:ac:27:bd:a7:84:0e:d2:45:38:9e:79:b1:15:
         e1:e0:df:e3:1c:65:a7:3a:0f:a4:b4:25:8c:7a:b0:28:4a:ea:
         7d:fa:45:5e:10:e7:d0:6b:d8:9c:d7:59:8f:99:94:27:ba:a7:
         63:4c:5b:b0:6f:0a:9a:86:fa:19:ac:3e:3d:3d:aa:67:a8:16:
         ee:76:2e:9a:17:54:0a:d5:1e:af:04:20:df:ad:7e:28:8c:9d:
         77:42:f9:93:e1:33:20:69:d4:dc:9f:aa:2c:47:94:2b:9f:bd:
         88:bf:25:f3:8f:68:be:9c:27:27:7a:83:87:af:79:20:7f:63:
         05:1c:9e:57:c2:ce:03:68:33:6a:fb:eb:47:2c:70:3d:27:80:
         b7:b2:11:df:75:f4:cd:2a:d1:f8:56:b4:bb:35:7f:64:60:f5:
         30:91:9a:b9:67:52:22:fb:f2:bc:8c:49:34:96:33:d8:9c:9e:
         00:09:e9:9c:26:68:54:8d:70:5d:96:f7:0b:ea:2d:ed:b3:eb:
         8f:0b:46:16:c9:f8:1f:c8:41:07:11:93:93:53:c2:82:80:d5:
         c3:08:15:26
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt/FArsidm9UC8shpWiv2yuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjYwMTAyMTQxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzU2NmRlZGQzYTQ0NTAyNGRmMWY1NzM2ZDc3ZDdlYTYyZTc1M2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i2slUa+QCAQ+Te4wvgZMEec49gY
OIDh2h4Wr9Qq2A+R9QMedsFDFb8aH9TOolXpZ20qu3B32GNepVOjfMFIsJtZezXE
WuddhVa0kU4C4J7QuPyaiKFgFVdV0UG+4ifpLFfyehIfg9bqLNHVHlfJgjlPiGW2
jFPu30pefP0OXwwfPiKQ4YdZm15JdQwspSMKDzTqdj2f+dctlKjjLw5xddlKwGB1
uGSoBKYEWOq88mTo5qAvGnGCbsojIa6pNkqeRbvwQaIL45NpBt5b977WYcE3XtWh
U+Bp84MUMkrCuiXL4XeKe98yb+JfmmvMBzywXZpDFQWsc7MG07jDU7fXjQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFdWbe3TpEUCTfH1c2131+pi51P2MB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvVjFadDdkT2tSUUpOOGZWemJYZlg2bUxuVV9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCUCAwQA
VCURAwQAVCUXMA0GCSqGSIb3DQEBCwUAA4IBAQCTHmA6HA6V2aZ2ZK8uqvugP3RG
zB9RRqVtCaDmeo7G3JGJUzP9g/Mq6awnvaeEDtJFOJ55sRXh4N/jHGWnOg+ktCWM
erAoSup9+kVeEOfQa9ic11mPmZQnuqdjTFuwbwqahvoZrD49PapnqBbudi6aF1QK
1R6vBCDfrX4ojJ13QvmT4TMgadTcn6osR5Qrn72IvyXzj2i+nCcneoOHr3kgf2MF
HJ5Xws4DaDNq++tHLHA9J4C3shHfdfTNKtH4VrS7NX9kYPUwkZq5Z1Ii+/K8jEk0
ljPYnJ4ACemcJmhUjXBdlvcL6i3ts+uPC0YWyfgfyEEHEZOTU8KCgNXDCBUm
-----END CERTIFICATE-----
Generated at Mon Jan 19 11:22:34 2026 by rpki-client