This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/_LZZtfYM397iq54CuSn-XrB98SU.roa
File:                     _LZZtfYM397iq54CuSn-XrB98SU.roa (raw, json)
Hash identifier:          yzB8nwTuwvRch3W8Na06UhBPzH7DCWSzjy148fbSwQA=
Subject key identifier:   FC:B6:59:B5:F6:0C:DF:DE:E2:AB:9E:02:B9:29:FE:5E:B0:7D:F1:25
Certificate issuer:       /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial:       019B797E0B7ED40A5B9FEA6DD97C111E2CF2
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/_LZZtfYM397iq54CuSn-XrB98SU.roa
Signing time:             Thu 01 Jan 2026 12:17:42 +0000
ROA not before:           Thu 01 Jan 2026 12:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42831
IP address blocks:        95.85.196.0/22 maxlen: 22
                          95.85.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:0b:7e:d4:0a:5b:9f:ea:6d:d9:7c:11:1e:2c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
        Validity
            Not Before: Jan  1 12:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fcb659b5f60cdfdee2ab9e02b929fe5eb07df125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:d9:56:52:7e:21:c4:8a:50:fc:43:ca:24:
                    bf:af:41:2d:f7:36:f5:5f:f3:4f:80:1a:00:15:a4:
                    09:5b:27:eb:9f:c7:28:a1:c6:ca:c7:dd:30:29:d2:
                    a1:5a:aa:69:59:e4:6a:e7:2e:9d:fb:73:f2:a3:6a:
                    7e:c2:82:33:ef:bf:39:2e:98:e8:8f:09:21:ed:56:
                    ef:95:2c:8f:f0:03:e8:6a:f6:2b:a2:1e:bf:af:24:
                    a2:e0:dc:0a:db:b4:e8:ce:0b:8a:c7:44:66:78:e5:
                    50:98:ee:84:13:f0:e8:cb:db:68:6e:1f:d6:2d:9a:
                    b6:11:6f:ca:87:71:a8:9e:47:57:8a:bd:59:66:4c:
                    dc:a9:6f:a4:31:da:b9:43:c1:6a:68:65:0a:eb:69:
                    13:10:64:75:c2:77:50:fd:de:d5:1f:b3:3c:dc:d3:
                    bc:4c:b8:7f:a6:e5:e5:e9:84:1c:e4:1e:26:9e:43:
                    2f:c1:66:d8:4b:1d:b1:e2:01:16:ff:0a:cb:2d:8c:
                    a4:f7:10:4e:3f:fb:e8:73:05:3d:fa:d4:bf:19:3f:
                    7e:30:c0:38:d6:e9:f7:5b:77:a7:57:72:9f:40:12:
                    ad:5a:2c:17:36:1b:b4:46:10:11:2e:49:bb:6b:90:
                    84:e0:58:9b:d1:f3:d7:f6:85:e9:6d:7e:85:a3:d5:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B6:59:B5:F6:0C:DF:DE:E2:AB:9E:02:B9:29:FE:5E:B0:7D:F1:25
            X509v3 Authority Key Identifier:
                keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/_LZZtfYM397iq54CuSn-XrB98SU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.85.196.0/22
                  95.85.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:0b:83:e6:b7:6c:b6:3b:bc:2c:16:36:79:15:b7:40:84:a4:
         85:88:4a:69:37:62:ec:44:c0:de:38:0e:0d:67:9f:12:55:b2:
         e5:62:48:11:7e:cd:af:e9:81:e7:f5:43:11:f7:ff:57:10:cc:
         90:fd:24:11:ef:de:1d:6d:e0:0c:01:06:68:50:27:a5:f9:a2:
         ff:7d:d0:00:6b:52:29:ba:3a:f3:75:d2:2b:a3:5a:47:7a:2b:
         06:1a:a8:7d:bc:5c:22:da:1e:09:cb:05:f7:97:ff:85:51:85:
         d4:01:52:90:f6:1b:a0:48:72:c0:f8:43:26:d6:a4:e6:bf:4f:
         d1:5d:f4:d5:81:35:df:c3:26:4c:f2:1f:a9:de:d5:3c:a7:45:
         e4:d9:04:0f:5c:73:36:15:b9:da:fd:33:e1:49:9d:e8:36:c6:
         14:24:09:4d:af:98:24:41:ec:40:40:75:80:a5:eb:dd:6d:c9:
         80:28:7e:45:19:65:f1:f3:e5:16:50:2a:44:62:61:d2:e0:23:
         bb:e9:73:5b:5e:aa:b1:61:48:e7:53:04:e1:01:2c:a0:48:0c:
         0e:f8:f8:d4:46:8d:fc:11:59:be:c8:89:9a:61:40:9d:81:43:
         ed:f0:40:23:db:3c:1e:55:87:35:07:87:a9:80:07:b3:ac:ce:
         52:63:20:ec
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt5fgt+1Apbn+pt2XwRHizyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2I2NTliNWY2MGNkZmRlZTJhYjllMDJiOTI5ZmU1ZWIwN2RmMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZHZVlJ+IcSKUPxDyiS/r0Et9zb1
X/NPgBoAFaQJWyfrn8coocbKx90wKdKhWqppWeRq5y6d+3Pyo2p+woIz7785Lpjo
jwkh7VbvlSyP8APoavYroh6/rySi4NwK27TozguKx0RmeOVQmO6EE/Doy9tobh/W
LZq2EW/Kh3GonkdXir1ZZkzcqW+kMdq5Q8FqaGUK62kTEGR1wndQ/d7VH7M83NO8
TLh/puXl6YQc5B4mnkMvwWbYSx2x4gEW/wrLLYyk9xBOP/vocwU9+tS/GT9+MMA4
1un3W3enV3KfQBKtWiwXNhu0RhARLkm7a5CE4Fib0fPX9oXpbX6Fo9U54wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPy2WbX2DN/e4queArkp/l6wffElMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvX0xaWnRmWU0zOTdpcTU0Q3VTbi1YckI5OFNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX1XEAwQC
X1XQMA0GCSqGSIb3DQEBCwUAA4IBAQCTC4Pmt2y2O7wsFjZ5FbdAhKSFiEppN2Ls
RMDeOA4NZ58SVbLlYkgRfs2v6YHn9UMR9/9XEMyQ/SQR794dbeAMAQZoUCel+aL/
fdAAa1IpujrzddIro1pHeisGGqh9vFwi2h4JywX3l/+FUYXUAVKQ9hugSHLA+EMm
1qTmv0/RXfTVgTXfwyZM8h+p3tU8p0Xk2QQPXHM2Fbna/TPhSZ3oNsYUJAlNr5gk
QexAQHWApevdbcmAKH5FGWXx8+UWUCpEYmHS4CO76XNbXqqxYUjnUwThASygSAwO
+PjURo38EVm+yImaYUCdgUPt8EAj2zweVYc1B4epgAezrM5SYyDs
-----END CERTIFICATE-----
Generated at Mon Jan 19 23:22:07 2026 by rpki-client