This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/VJWESkMlWl3gytGlSZWLBLk9iyY.roa
File:                     VJWESkMlWl3gytGlSZWLBLk9iyY.roa (raw, json)
Hash identifier:          Dxz4YKjZcstFpZU9oV/h8y93NMjQO9M36oI0p+U3Fco=
Subject key identifier:   54:95:84:4A:43:25:5A:5D:E0:CA:D1:A5:49:95:8B:04:B9:3D:8B:26
Certificate issuer:       /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial:       019B78A2E52A3CA5DEDCE3FDEA0E2E4C4C67
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/VJWESkMlWl3gytGlSZWLBLk9iyY.roa
Signing time:             Thu 01 Jan 2026 08:18:19 +0000
ROA not before:           Thu 01 Jan 2026 08:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39626
IP address blocks:        195.246.227.0/24 maxlen: 24
                          2001:7f8:16::/48 maxlen: 64
                          2001:7f8:16::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:e5:2a:3c:a5:de:dc:e3:fd:ea:0e:2e:4c:4c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
        Validity
            Not Before: Jan  1 08:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5495844a43255a5de0cad1a549958b04b93d8b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:01:ae:ea:26:df:fa:14:bf:9d:de:6f:ff:
                    85:5f:72:e6:85:c2:8a:0e:77:1c:5f:b3:60:4c:c8:
                    cb:2f:ed:dd:a7:75:08:22:b7:07:9b:24:71:26:f8:
                    c7:89:9e:02:70:42:8e:4c:d6:b8:8f:cc:19:f9:cd:
                    24:58:5d:0c:88:aa:ed:1e:25:80:15:d4:29:c3:6c:
                    5f:94:26:c0:48:0e:a0:f6:fa:f2:b1:c6:71:67:c8:
                    1f:57:74:a6:f4:41:3b:3e:01:ed:c9:b6:a6:3e:9c:
                    df:6f:f0:d4:99:5e:a1:7f:b5:5c:4e:cf:26:6d:55:
                    e8:0e:16:3f:b7:f5:67:0d:32:d8:e4:5a:34:eb:3c:
                    5c:a2:53:1d:03:c8:93:dc:02:d5:ae:f5:e4:bf:c9:
                    44:53:41:82:fe:e9:36:6f:92:de:cb:18:8b:ba:67:
                    40:e1:42:2c:33:8a:1d:d2:74:a3:e5:5e:36:a6:c1:
                    e2:25:55:05:59:e1:1a:61:98:0c:19:4a:b7:89:70:
                    04:aa:0c:f7:72:2f:39:20:6f:57:92:46:cf:41:25:
                    a0:1c:27:e9:60:20:5f:70:61:7d:ca:e2:55:73:21:
                    b1:46:93:12:08:7b:80:59:9d:35:0c:bf:1f:c8:a4:
                    d3:d2:f8:d8:79:36:8b:f0:dc:30:4f:16:ca:f8:45:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:95:84:4A:43:25:5A:5D:E0:CA:D1:A5:49:95:8B:04:B9:3D:8B:26
            X509v3 Authority Key Identifier:
                keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/VJWESkMlWl3gytGlSZWLBLk9iyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.246.227.0/24
                IPv6:
                  2001:7f8:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:c9:74:a6:43:a5:69:9e:a9:4c:3f:5e:a6:2c:a1:0e:ae:f1:
         ae:b2:d0:d5:4f:b4:22:0a:51:52:29:89:27:0f:83:f7:93:49:
         58:1f:54:71:c9:94:05:f8:f2:8d:b7:d0:9b:a2:f7:c5:55:7e:
         13:54:57:cb:88:3e:53:2a:01:bf:ce:50:1e:d6:84:ba:47:ee:
         77:2c:25:f9:d4:61:ee:de:ad:42:ca:05:3a:a4:2f:8d:bb:94:
         f5:e2:26:c7:79:3a:01:d7:b9:fd:f8:b2:5c:88:51:7e:18:62:
         65:69:14:85:6d:47:de:7c:cd:13:5c:6c:34:b7:7c:9c:f4:3f:
         7d:28:80:55:38:4b:b3:2e:77:ff:20:39:16:e9:92:e3:e5:9c:
         62:e4:37:b8:b7:d5:98:bf:a4:74:e5:cb:18:cf:9e:72:58:24:
         f3:ea:51:88:c5:59:fd:38:15:95:b5:91:fa:6d:76:a7:4b:dd:
         77:fb:44:e1:f7:c4:bc:5b:69:3a:ef:df:97:11:1b:f6:87:15:
         2e:df:0a:df:d2:4e:6c:2d:3f:8d:18:da:6d:ed:8b:75:00:7e:
         4c:8c:9a:af:b3:c8:46:7b:56:a5:e7:d1:3d:63:2b:8f:15:68:
         fe:22:48:77:d8:be:fa:fa:f7:ed:17:d1:56:7a:0c:9e:3c:2d:
         19:32:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:49:00 2026 by rpki-client