This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/VwLAIV5D66a6FPS07LFDWIQS-_0.roa
File:                     VwLAIV5D66a6FPS07LFDWIQS-_0.roa (raw, json)
Hash identifier:          T9H++z3WO1CHzgCbp0BP6ZLUx+OwVcmGlNY7g9M8Uf4=
Subject key identifier:   57:02:C0:21:5E:43:EB:A6:BA:14:F4:B4:EC:B1:43:58:84:12:FB:FD
Certificate issuer:       /CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Certificate serial:       019C0F9DDF4799140F304E5634812592FDCD
Authority key identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/VwLAIV5D66a6FPS07LFDWIQS-_0.roa
Signing time:             Fri 30 Jan 2026 15:55:30 +0000
ROA not before:           Fri 30 Jan 2026 15:55:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        185.70.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:9d:df:47:99:14:0f:30:4e:56:34:81:25:92:fd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5115b5c1245dc30e12304079ec94a35ed527c66
        Validity
            Not Before: Jan 30 15:55:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5702c0215e43eba6ba14f4b4ecb143588412fbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:79:66:bc:3b:f5:5e:ee:18:79:de:cd:fd:
                    b0:18:b9:e4:c4:08:03:47:a7:59:af:9b:01:f4:82:
                    46:57:57:27:ec:fc:5f:28:40:84:9d:a5:d9:4c:6c:
                    79:72:6d:95:7c:b8:7d:1a:38:1a:8a:f3:8a:02:b4:
                    97:31:d4:73:3b:96:f5:c1:86:4f:7c:e1:05:86:84:
                    c2:07:ec:cc:d2:04:7a:41:35:02:f3:be:73:50:ae:
                    7a:41:c8:83:fd:ca:21:4c:c0:61:f8:cb:56:e8:2f:
                    99:87:e2:0a:4b:cd:dd:dc:e5:a5:fd:bf:f5:a8:7c:
                    e6:36:f7:65:37:f2:47:50:0a:32:bc:d6:ca:c2:a2:
                    ed:da:bf:80:ea:72:65:55:47:94:48:d8:4c:db:63:
                    11:67:27:44:4f:3a:49:03:ff:c4:41:fb:c6:f2:7a:
                    89:69:6f:90:4e:3c:9a:4f:49:04:40:a4:c8:05:48:
                    da:76:5b:d3:bb:72:19:e7:83:57:7e:a7:03:cc:ff:
                    b9:3f:ad:ca:34:87:3b:87:f2:93:75:8d:6c:1f:7e:
                    ee:b3:1d:ce:d5:3d:35:41:69:f2:79:20:9b:92:79:
                    65:e2:3a:7f:b5:98:48:5c:e1:8e:f8:92:b8:d2:73:
                    34:5c:da:8f:bf:fe:f9:cd:ae:1e:ae:e1:d8:84:2c:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:02:C0:21:5E:43:EB:A6:BA:14:F4:B4:EC:B1:43:58:84:12:FB:FD
            X509v3 Authority Key Identifier:
                keyid:B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/VwLAIV5D66a6FPS07LFDWIQS-_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.70.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:ac:d6:aa:e5:34:69:4e:82:76:fb:e5:ad:eb:8e:52:97:97:
         49:39:40:53:34:0e:d9:62:67:e7:e7:b4:31:91:9e:9a:05:41:
         6c:98:91:86:16:02:17:4c:81:b6:2f:10:64:5c:81:a3:02:54:
         1a:63:d2:3c:f5:5e:d7:2e:c8:ca:94:0b:34:99:04:68:e0:73:
         df:3f:01:8d:c6:67:2d:d5:8c:45:47:a1:9f:da:95:2d:c4:49:
         eb:7f:7b:b6:cb:e4:bd:7e:b8:d2:27:17:ef:7c:9c:7f:2b:44:
         6b:7a:26:2a:02:ba:2e:61:ff:dd:85:53:ec:6b:dc:29:88:6a:
         65:5b:2d:4e:05:37:8b:0d:b5:01:4d:d0:1c:61:e9:20:5e:14:
         85:f7:f1:3a:22:57:1e:1f:cd:3a:9d:57:08:de:ad:cd:c1:98:
         9f:3a:5b:58:91:01:5f:79:72:9b:14:5b:ee:9e:c2:01:4c:2f:
         8d:bf:c7:d5:1a:4e:b7:f4:ba:eb:5f:a5:d8:04:01:e2:71:4a:
         97:28:44:b0:ad:b3:31:ba:95:fe:5a:6e:ec:8b:52:56:02:27:
         a8:b7:52:b6:cc:5f:1b:a8:fe:88:b1:18:da:b4:65:9d:73:20:
         1b:c4:8b:2f:e2:35:ec:45:b7:32:36:40:b7:9a:96:44:e3:ae:
         e1:32:45:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwPnd9HmRQPME5WNIElkv3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTE1YjVjMTI0NWRjMzBlMTIzMDQwNzllYzk0YTM1ZWQ1
MjdjNjYwHhcNMjYwMTMwMTU1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzAyYzAyMTVlNDNlYmE2YmExNGY0YjRlY2IxNDM1ODg0MTJmYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGx5Zrw79V7uGHnezf2wGLnkxAgD
R6dZr5sB9IJGV1cn7PxfKECEnaXZTGx5cm2VfLh9GjgaivOKArSXMdRzO5b1wYZP
fOEFhoTCB+zM0gR6QTUC875zUK56QciD/cohTMBh+MtW6C+Zh+IKS83d3OWl/b/1
qHzmNvdlN/JHUAoyvNbKwqLt2r+A6nJlVUeUSNhM22MRZydETzpJA//EQfvG8nqJ
aW+QTjyaT0kEQKTIBUjadlvTu3IZ54NXfqcDzP+5P63KNIc7h/KTdY1sH37usx3O
1T01QWnyeSCbknll4jp/tZhIXOGO+JK40nM0XNqPv/75za4eruHYhCweOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFcCwCFeQ+umuhT0tOyxQ1iEEvv9MB8GA1UdIwQY
MBaAFLURW1wSRdww4SMEB57JSjXtUnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJGYlhCSkYzRERoSXdRSG5zbEtOZTFTZkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9hMzZhNjctNTQyYi00ZjhlLTgxZjAt
NmUyZGE2MGUyODM0LzEvVndMQUlWNUQ2NmE2RlBTMDdMRkRXSVFTLV8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9hMzZhNjctNTQyYi00ZjhlLTgxZjAtNmUyZGE2MGUyODM0
LzEvdFJGYlhCSkYzRERoSXdRSG5zbEtOZTFTZkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUagMA0G
CSqGSIb3DQEBCwUAA4IBAQBGrNaq5TRpToJ2++Wt645Sl5dJOUBTNA7ZYmfn57Qx
kZ6aBUFsmJGGFgIXTIG2LxBkXIGjAlQaY9I89V7XLsjKlAs0mQRo4HPfPwGNxmct
1YxFR6Gf2pUtxEnrf3u2y+S9frjSJxfvfJx/K0RreiYqArouYf/dhVPsa9wpiGpl
Wy1OBTeLDbUBTdAcYekgXhSF9/E6IlceH806nVcI3q3NwZifOltYkQFfeXKbFFvu
nsIBTC+Nv8fVGk639LrrX6XYBAHicUqXKESwrbMxupX+Wm7si1JWAieot1K2zF8b
qP6IsRjatGWdcyAbxIsv4jXsRbcyNkC3mpZE467hMkWF
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:02:06 2026 by rpki-client