This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/2ISQYiF7smCTr8-VCoXc_EMuKQQ.roa
File:                     2ISQYiF7smCTr8-VCoXc_EMuKQQ.roa (raw, json)
Hash identifier:          AltQxVYqLSdxf5qwM/HvX4Wqiiyzki6fJVK29DSOpmw=
Subject key identifier:   D8:84:90:62:21:7B:B2:60:93:AF:CF:95:0A:85:DC:FC:43:2E:29:04
Certificate issuer:       /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial:       019BFD703F50D41316DC8E0A5BEE704391AA
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/2ISQYiF7smCTr8-VCoXc_EMuKQQ.roa
Signing time:             Tue 27 Jan 2026 03:12:30 +0000
ROA not before:           Tue 27 Jan 2026 03:12:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209693
IP address blocks:        95.85.224.0/24 maxlen: 24
                          95.85.225.0/24 maxlen: 24
                          95.85.226.0/24 maxlen: 24
                          95.85.227.0/24 maxlen: 24
                          95.85.228.0/24 maxlen: 24
                          95.85.229.0/24 maxlen: 24
                          95.85.241.0/24 maxlen: 24
                          95.85.242.0/24 maxlen: 24
                          95.85.243.0/24 maxlen: 24
                          95.85.245.0/24 maxlen: 24
                          95.85.246.0/24 maxlen: 24
                          95.85.247.0/24 maxlen: 24
                          95.85.248.0/24 maxlen: 24
                          95.85.249.0/24 maxlen: 24
                          95.85.250.0/24 maxlen: 24
                          95.85.251.0/24 maxlen: 24
                          95.85.252.0/24 maxlen: 24
                          95.85.253.0/24 maxlen: 24
                          95.85.254.0/24 maxlen: 24
                          95.85.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:70:3f:50:d4:13:16:dc:8e:0a:5b:ee:70:43:91:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
        Validity
            Not Before: Jan 27 03:12:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d8849062217bb26093afcf950a85dcfc432e2904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:b0:42:ba:3a:20:d1:af:23:1c:c9:70:61:
                    4b:52:fa:d5:16:27:ae:f3:bc:50:36:c8:38:c9:c0:
                    4e:e9:05:35:9d:82:43:5b:ab:f4:5f:34:f4:52:15:
                    77:2d:01:0b:e3:64:29:b9:5e:b5:62:1b:27:b2:cb:
                    64:21:bc:ae:b1:e8:92:5b:52:e9:53:df:6a:ab:8f:
                    22:d6:ab:0e:98:84:9d:07:f7:d0:ad:a3:e8:d5:70:
                    be:95:de:82:ab:75:c9:90:db:90:e7:79:87:7a:ce:
                    52:15:5a:36:6e:17:7c:04:19:58:1f:99:2a:9b:b2:
                    82:e9:44:4f:b4:8b:2d:52:15:fe:99:de:39:f2:ea:
                    e9:2c:ba:8f:09:56:98:9a:2d:be:88:fc:a3:b6:85:
                    6a:ca:e9:fe:9b:0a:b4:8c:79:9e:fb:2e:27:00:7d:
                    31:8a:99:a9:e7:2f:33:57:68:d3:98:98:5e:05:3e:
                    58:2b:64:12:b6:c0:f2:aa:51:d3:b2:17:31:25:1b:
                    af:41:cd:83:0c:ec:07:2b:f2:67:b8:1f:e2:3e:3e:
                    d3:42:79:44:bc:f3:6b:be:e4:56:a5:24:2f:44:a5:
                    0c:cc:5e:d3:80:f1:76:40:dc:0c:3b:c2:25:54:be:
                    db:c7:14:f6:74:3f:5e:fd:0b:62:bb:55:68:51:24:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:84:90:62:21:7B:B2:60:93:AF:CF:95:0A:85:DC:FC:43:2E:29:04
            X509v3 Authority Key Identifier:
                keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/2ISQYiF7smCTr8-VCoXc_EMuKQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.85.224.0-95.85.229.255
                  95.85.241.0-95.85.243.255
                  95.85.245.0-95.85.255.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:dc:89:bc:17:dc:7f:e0:d4:64:b1:4a:ed:ec:8f:f3:a3:14:
         e6:0b:b1:ad:43:5e:38:69:fc:c0:78:3a:3c:72:a1:d0:1a:7f:
         4a:55:de:3c:53:96:f2:f7:4e:2c:49:3b:9c:58:c5:e9:71:01:
         f9:f9:5d:ff:b8:5e:a9:fd:f5:2a:ca:82:bd:7c:67:cb:e4:f7:
         05:32:34:51:25:4a:2b:ba:81:5c:96:79:03:7c:53:0c:d7:c4:
         a2:80:76:3f:9c:eb:53:ff:79:1e:81:f7:ac:2b:38:10:5e:a2:
         3f:35:a5:16:e0:25:61:8b:e2:34:16:86:a2:0e:f3:2a:f7:2c:
         a1:d7:84:e2:a1:98:73:db:7f:cd:df:78:b5:f1:b3:ab:6b:32:
         88:59:5e:d5:2b:f0:90:ec:05:13:b2:51:66:b5:ce:ef:8f:f7:
         f2:39:f2:22:a5:45:3f:0c:91:88:24:bf:e6:ea:fb:49:7d:fc:
         f4:ac:dc:bf:84:46:1f:b9:5f:2c:8e:7f:17:a5:f6:64:ff:b3:
         36:96:f5:07:a7:9d:be:23:c0:6d:f1:f2:04:03:db:04:03:dd:
         e6:1c:60:d2:3b:41:91:06:b0:35:0c:02:0a:93:60:10:30:2f:
         c9:23:22:f4:16:18:36:7a:53:34:80:0a:0b:b8:99:58:34:62:
         4c:b8:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 07:56:14 2026 by rpki-client