This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/SuAeAzCUrsJ-HIRjFuJd36D9tUI.roa
File:                     SuAeAzCUrsJ-HIRjFuJd36D9tUI.roa (raw, json)
Hash identifier:          UITiTYpcMC+smMCD8xlNQgnLRHlKvSaoNbhmItj5J1c=
Subject key identifier:   4A:E0:1E:03:30:94:AE:C2:7E:1C:84:63:16:E2:5D:DF:A0:FD:B5:42
Certificate issuer:       /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial:       019B797E0AD1531323623A7D6BCEC59F7391
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/SuAeAzCUrsJ-HIRjFuJd36D9tUI.roa
Signing time:             Thu 01 Jan 2026 12:17:41 +0000
ROA not before:           Thu 01 Jan 2026 12:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6830
IP address blocks:        95.85.204.0/22 maxlen: 22
                          95.85.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:0a:d1:53:13:23:62:3a:7d:6b:ce:c5:9f:73:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
        Validity
            Not Before: Jan  1 12:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4ae01e033094aec27e1c846316e25ddfa0fdb542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:87:0c:6f:4d:72:1d:f5:d6:44:78:86:f4:
                    92:62:64:6e:6e:fc:c0:5f:52:32:a3:92:db:fb:04:
                    4f:b6:bd:8b:63:af:97:90:87:1c:f3:b8:f3:26:03:
                    12:5f:60:04:48:56:9b:e5:6a:a7:31:55:d5:79:e3:
                    2a:35:5f:5b:63:88:04:d7:56:da:b8:94:a2:a2:66:
                    15:69:7e:fd:be:ac:4c:71:74:44:8e:ac:1c:59:57:
                    93:63:8a:e7:02:b2:9d:a1:c3:68:5b:d9:54:b9:c0:
                    96:de:29:1b:6c:d7:7c:f7:be:f8:3e:55:71:63:0d:
                    44:7b:00:a2:41:91:35:df:a1:ea:29:ca:18:4e:39:
                    2f:2b:f8:32:15:8a:85:86:20:43:4b:99:56:38:48:
                    bc:19:fd:60:b2:80:39:e9:8f:8a:8d:64:3d:b3:53:
                    5a:02:f2:44:1e:6c:58:63:e0:28:af:84:cc:7d:6a:
                    0a:7e:a2:9e:40:81:7f:fd:84:c0:99:c1:6d:8b:54:
                    98:f4:e0:18:7c:0f:0d:31:e2:62:05:47:9e:4f:23:
                    80:02:c7:64:5c:72:6d:d9:0b:1a:98:56:49:1d:c4:
                    28:e6:1e:ea:b7:a3:ed:0a:ff:de:db:f4:5f:8b:9e:
                    39:f0:5f:31:6b:85:3b:2e:11:a1:15:bc:1a:37:e4:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:1E:03:30:94:AE:C2:7E:1C:84:63:16:E2:5D:DF:A0:FD:B5:42
            X509v3 Authority Key Identifier:
                keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/SuAeAzCUrsJ-HIRjFuJd36D9tUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.85.204.0/22
                  95.85.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:62:c2:8c:5c:b9:ac:85:4f:23:63:be:1d:18:71:ac:a7:18:
         fe:72:16:80:c4:8c:a2:47:78:70:77:06:28:89:c0:3d:c2:f5:
         80:6e:8f:54:f9:70:ff:55:a8:b3:97:ed:b8:87:fa:ac:dc:73:
         6a:c7:cd:43:fb:1a:ef:6d:ba:de:81:a6:12:1b:1e:29:85:39:
         3d:ab:d0:9a:08:90:a2:42:f4:f6:8b:67:1b:92:01:d7:05:3d:
         a5:13:0d:6a:a0:d7:de:c3:8a:29:dc:52:50:05:97:74:f1:ac:
         f1:0a:15:0f:09:f8:e2:9e:49:0d:92:28:85:d6:6d:e1:24:4d:
         c9:c1:1b:5f:83:7d:b3:4e:aa:67:87:7b:24:67:08:3c:82:b0:
         da:13:05:82:66:9c:11:bc:f6:94:8a:3a:7d:d4:fd:01:f6:b1:
         51:51:99:b6:e3:29:11:81:66:fd:6a:4a:f8:5e:1a:88:75:c9:
         66:6c:05:51:86:10:7a:8c:16:b0:89:9f:3a:84:0c:f8:77:1c:
         48:4a:ec:22:13:cb:2b:35:9e:82:57:2f:23:bd:0a:e0:92:2e:
         61:fa:f6:e9:60:d3:4b:62:0d:73:84:dc:bb:1b:08:ae:5e:79:
         5d:9a:7c:3d:41:e0:2e:75:87:4f:b0:7c:7c:41:89:a5:fd:de:
         c0:98:46:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt5fgrRUxMjYjp9a87Fn3ORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWUwMWUwMzMwOTRhZWMyN2UxYzg0NjMxNmUyNWRkZmEwZmRiNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD+HDG9Nch311kR4hvSSYmRubvzA
X1Iyo5Lb+wRPtr2LY6+XkIcc87jzJgMSX2AESFab5WqnMVXVeeMqNV9bY4gE11ba
uJSiomYVaX79vqxMcXREjqwcWVeTY4rnArKdocNoW9lUucCW3ikbbNd89774PlVx
Yw1EewCiQZE136HqKcoYTjkvK/gyFYqFhiBDS5lWOEi8Gf1gsoA56Y+KjWQ9s1Na
AvJEHmxYY+Aor4TMfWoKfqKeQIF//YTAmcFti1SY9OAYfA8NMeJiBUeeTyOAAsdk
XHJt2QsamFZJHcQo5h7qt6PtCv/e2/Rfi5458F8xa4U7LhGhFbwaN+SmmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFErgHgMwlK7CfhyEYxbiXd+g/bVCMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvU3VBZUF6Q1Vyc0otSElSakZ1SmQzNkQ5dFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX1XMAwQC
X1XUMA0GCSqGSIb3DQEBCwUAA4IBAQBAYsKMXLmshU8jY74dGHGspxj+chaAxIyi
R3hwdwYoicA9wvWAbo9U+XD/Vaizl+24h/qs3HNqx81D+xrvbbregaYSGx4phTk9
q9CaCJCiQvT2i2cbkgHXBT2lEw1qoNfew4op3FJQBZd08azxChUPCfjinkkNkiiF
1m3hJE3JwRtfg32zTqpnh3skZwg8grDaEwWCZpwRvPaUijp91P0B9rFRUZm24ykR
gWb9akr4XhqIdclmbAVRhhB6jBawiZ86hAz4dxxISuwiE8srNZ6CVy8jvQrgki5h
+vbpYNNLYg1zhNy7GwiuXnldmnw9QeAudYdPsHx8QYml/d7AmEbv
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:57:30 2026 by rpki-client