This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pVFCcDo0VIJgcPHLXx6FH3E3Xow.roa
File:                     pVFCcDo0VIJgcPHLXx6FH3E3Xow.roa (raw, json)
Hash identifier:          Ae7I6dZy54cujkBvaOF3BEbZDsPrknNHeiv4GCYy8Eg=
Subject key identifier:   A5:51:42:70:3A:34:54:82:60:70:F1:CB:5F:1E:85:1F:71:37:5E:8C
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A24F8518B2C8206A012DA21377ED65
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pVFCcDo0VIJgcPHLXx6FH3E3Xow.roa
Signing time:             Thu 01 Jan 2026 08:17:41 +0000
ROA not before:           Thu 01 Jan 2026 08:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51809
IP address blocks:        195.40.32.0/24 maxlen: 24
                          195.40.33.0/24 maxlen: 24
                          195.40.34.0/24 maxlen: 24
                          195.40.35.0/24 maxlen: 24
                          195.40.36.0/24 maxlen: 24
                          195.40.37.0/24 maxlen: 24
                          195.40.38.0/24 maxlen: 24
                          195.40.39.0/24 maxlen: 24
                          195.40.40.0/24 maxlen: 24
                          195.40.41.0/24 maxlen: 24
                          195.40.42.0/24 maxlen: 24
                          195.40.43.0/24 maxlen: 24
                          195.40.44.0/24 maxlen: 24
                          195.40.45.0/24 maxlen: 24
                          195.40.46.0/24 maxlen: 24
                          195.40.47.0/24 maxlen: 24
                          195.40.48.0/24 maxlen: 24
                          195.40.49.0/24 maxlen: 24
                          195.40.50.0/24 maxlen: 24
                          195.40.51.0/24 maxlen: 24
                          195.40.52.0/24 maxlen: 24
                          195.40.53.0/24 maxlen: 24
                          195.40.54.0/24 maxlen: 24
                          195.40.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:4f:85:18:b2:c8:20:6a:01:2d:a2:13:77:ed:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a55142703a3454826070f1cb5f1e851f71375e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7b:56:b1:77:43:93:54:5c:f7:1f:b5:3b:43:
                    60:fa:a0:47:ed:be:93:61:c3:b0:02:3c:b2:0e:5c:
                    03:11:8b:4e:b1:b0:01:0d:8e:2f:f2:3c:f5:47:c1:
                    6b:cf:70:01:a9:04:ef:9a:fa:5e:f2:4e:b3:7d:98:
                    52:43:06:44:5b:c0:15:98:c9:41:f8:e7:f1:af:4f:
                    12:6d:6c:ab:c7:00:65:a8:97:1f:05:64:d3:2b:d6:
                    cc:1e:f7:a4:2d:8f:da:fb:46:aa:4b:75:f8:b7:0e:
                    5a:1d:c0:47:9e:76:10:cc:a1:af:11:52:2e:c7:9d:
                    ae:d9:5f:0c:91:24:90:aa:89:2e:dd:e6:c9:ee:f7:
                    dd:17:fd:49:5e:5b:fb:3c:94:16:80:a2:5f:24:2a:
                    31:cd:78:6c:69:3a:8b:f5:42:ba:de:f7:69:39:26:
                    c5:f2:d6:21:35:77:2e:a5:d9:02:20:da:cd:78:66:
                    14:08:b6:5b:0a:37:15:ed:05:82:ee:9e:4f:4b:8b:
                    ee:7e:a6:4a:09:fa:88:b2:cb:d0:15:bf:82:07:67:
                    86:45:15:e7:98:46:7b:21:f4:ae:e5:f9:01:a4:41:
                    d0:9b:b5:61:de:f9:93:38:9b:f2:c8:60:5d:a4:77:
                    b3:5e:b4:3d:06:94:07:00:61:a4:cd:e4:84:67:a0:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:51:42:70:3A:34:54:82:60:70:F1:CB:5F:1E:85:1F:71:37:5E:8C
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pVFCcDo0VIJgcPHLXx6FH3E3Xow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.40.32.0-195.40.55.255

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:31:8f:8c:17:ff:00:8f:e5:02:9d:33:f0:80:67:dd:1e:
         9e:78:53:7c:ab:b8:5e:f8:03:7c:5f:8f:ff:44:9b:20:0e:2e:
         b1:d2:9b:fd:15:6b:ad:88:3c:13:ab:10:b0:dd:75:0e:e6:54:
         ea:5d:69:0b:33:c3:13:5d:2a:70:b0:da:5e:8e:57:b1:3e:c2:
         ec:7b:17:84:f3:f0:b7:85:b5:e0:c7:e1:62:83:18:57:f3:17:
         dd:bd:5d:57:f6:0f:0f:7a:36:88:60:ba:81:8f:06:e0:74:60:
         34:cd:50:35:5c:cc:0e:a4:d0:3d:b0:6a:d1:53:98:4b:1e:4c:
         55:3a:b1:37:9e:77:f4:3c:5a:75:bb:43:5b:d4:82:9a:36:28:
         79:9f:47:74:d8:c3:38:45:c8:55:e0:72:26:e5:32:b3:11:4b:
         3b:51:65:5d:de:42:e0:89:55:c3:90:04:1e:e0:7e:61:0f:5d:
         04:c5:ca:ca:d8:a7:8d:cc:44:1c:48:b6:2a:da:83:f3:ea:80:
         dd:99:02:ce:75:d5:66:93:8d:0e:ab:41:67:55:58:6b:8c:d1:
         41:bf:c0:dc:1b:85:4a:58:86:14:4b:9c:7a:0a:73:63:18:a0:
         49:65:06:6f:0b:a0:ed:63:e8:ac:95:37:c3:3e:81:70:e7:44:
         65:a8:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:15:15 2026 by rpki-client