This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/Vu-e1GygyQXjjracczxIzivdztw.roa
File:                     Vu-e1GygyQXjjracczxIzivdztw.roa (raw, json)
Hash identifier:          VKVRS5igE/oTY5xgq6v9aHjG9onlTSU6jTSymC7H728=
Subject key identifier:   56:EF:9E:D4:6C:A0:C9:05:E3:8E:B6:9C:73:3C:48:CE:2B:DD:CE:DC
Certificate issuer:       /CN=6e15a4336d2f5e1bd60737de957968992a7470e9
Certificate serial:       019B7DCB55A006198C408490634DF30BF987
Authority key identifier: 6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/Vu-e1GygyQXjjracczxIzivdztw.roa
Signing time:             Fri 02 Jan 2026 08:20:36 +0000
ROA not before:           Fri 02 Jan 2026 08:20:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34944
IP address blocks:        91.201.84.0/23 maxlen: 23
                          2001:678:9d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:55:a0:06:19:8c:40:84:90:63:4d:f3:0b:f9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e15a4336d2f5e1bd60737de957968992a7470e9
        Validity
            Not Before: Jan  2 08:20:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56ef9ed46ca0c905e38eb69c733c48ce2bddcedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:0f:c8:12:e2:89:71:b6:ce:71:04:b0:c2:
                    47:da:f0:a1:68:ba:26:6a:8f:65:88:ea:17:54:00:
                    77:12:09:08:57:d8:2c:9f:c7:68:fd:e2:19:88:24:
                    3e:ae:4f:e0:af:31:9d:f0:80:6a:7e:65:2c:cb:78:
                    ee:13:f6:7c:c6:51:68:6b:62:bf:c4:7d:f6:2e:0c:
                    a4:d8:e3:13:2c:30:da:0e:7b:97:7e:45:85:3a:1a:
                    79:97:c4:90:21:9f:46:7a:67:10:75:7e:d3:cc:e7:
                    99:16:65:5c:cc:59:73:ea:7c:05:c8:4e:d1:30:2c:
                    62:49:3d:24:4f:77:bb:73:09:29:5f:6b:25:92:07:
                    db:42:fb:06:0c:6c:52:cf:8d:b9:8b:a3:4e:1d:dc:
                    18:00:67:ee:e2:1d:b6:4e:a1:fd:4a:11:80:a4:24:
                    cf:7f:02:72:7f:e9:0d:66:48:e3:03:17:49:ae:8a:
                    5b:d0:dd:62:bd:fb:ae:6f:50:a8:4c:49:c2:34:49:
                    af:89:7b:8f:1c:ec:f3:a6:1f:89:67:7f:83:64:51:
                    fc:a4:70:94:aa:4d:f1:d7:39:75:19:b8:93:db:7d:
                    94:73:15:f2:78:40:14:e6:fd:b5:99:93:9b:74:66:
                    39:cb:5b:b7:86:9f:80:0a:a4:26:10:5a:5b:5e:e5:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EF:9E:D4:6C:A0:C9:05:E3:8E:B6:9C:73:3C:48:CE:2B:DD:CE:DC
            X509v3 Authority Key Identifier:
                keyid:6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/Vu-e1GygyQXjjracczxIzivdztw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.201.84.0/23
                IPv6:
                  2001:678:9d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:a3:65:e0:f8:22:f2:88:25:92:70:4e:cb:01:26:b5:e4:
         07:20:c9:f3:ed:ef:12:a0:00:60:d2:06:48:fd:37:b7:97:b8:
         77:ed:29:be:ea:a5:f4:5e:49:7d:ee:19:1a:1c:4b:c4:9c:2a:
         36:ed:4a:b2:a5:19:6e:5a:07:4a:77:d4:01:53:e0:a9:79:22:
         17:54:9f:f1:b9:56:a5:70:ae:ec:f8:07:71:3f:50:ce:c0:be:
         8e:c9:8f:90:bc:3e:fc:30:a2:91:a0:f5:0b:03:c2:d7:3f:94:
         7a:5e:5b:98:72:33:33:73:fc:d1:1e:9c:7f:4d:98:57:3e:a5:
         e8:53:43:54:cb:d8:bc:03:54:20:4c:73:d1:3b:a3:c9:59:72:
         83:a3:4a:39:8c:2b:97:36:32:6e:c7:f3:71:bc:6d:ee:d0:8a:
         f1:8c:e8:cc:7b:e6:39:3b:7c:84:49:45:f2:b5:3f:e6:3c:b9:
         dc:37:38:1a:56:fe:12:5b:bb:cb:67:20:8a:34:0b:c5:01:63:
         1e:d6:52:3d:d1:66:e9:1f:80:7c:f6:20:01:48:64:d3:18:56:
         bd:90:51:52:7e:05:d1:35:be:e7:0b:ad:9b:d8:90:94:df:65:
         78:6f:91:db:02:e4:03:d1:64:ab:ad:36:5b:7c:91:d8:02:69:
         d9:aa:33:94
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt9y1WgBhmMQISQY03zC/mHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMTVhNDMzNmQyZjVlMWJkNjA3MzdkZTk1Nzk2ODk5MmE3
NDcwZTkwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmVmOWVkNDZjYTBjOTA1ZTM4ZWI2OWM3MzNjNDhjZTJiZGRjZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqagPyBLiiXG2znEEsMJH2vChaLom
ao9liOoXVAB3EgkIV9gsn8do/eIZiCQ+rk/grzGd8IBqfmUsy3juE/Z8xlFoa2K/
xH32Lgyk2OMTLDDaDnuXfkWFOhp5l8SQIZ9GemcQdX7TzOeZFmVczFlz6nwFyE7R
MCxiST0kT3e7cwkpX2slkgfbQvsGDGxSz425i6NOHdwYAGfu4h22TqH9ShGApCTP
fwJyf+kNZkjjAxdJropb0N1ivfuub1CoTEnCNEmviXuPHOzzph+JZ3+DZFH8pHCU
qk3x1zl1GbiT232UcxXyeEAU5v21mZObdGY5y1u3hp+ACqQmEFpbXuXAAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFbvntRsoMkF4462nHM8SM4r3c7cMB8GA1UdIwQY
MBaAFG4VpDNtL14b1gc33pV5aJkqdHDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmhXa00yMHZYaHZXQnpmZWxYbG9tU3AwY09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84OTM4NTAtYTg1NS00YTU0LWI1ZDAt
OGQ1MjQ2YTIwMjQ1LzEvVnUtZTFHeWd5UVhqanJhY2N6eEl6aXZkenR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84OTM4NTAtYTg1NS00YTU0LWI1ZDAtOGQ1MjQ2YTIwMjQ1
LzEvYmhXa00yMHZYaHZXQnpmZWxYbG9tU3AwY09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW8lUMA8E
AgACMAkDBwAgAQZ4CdAwDQYJKoZIhvcNAQELBQADggEBAFyBo2Xg+CLyiCWScE7L
ASa15AcgyfPt7xKgAGDSBkj9N7eXuHftKb7qpfReSX3uGRocS8ScKjbtSrKlGW5a
B0p31AFT4Kl5IhdUn/G5VqVwruz4B3E/UM7Avo7Jj5C8PvwwopGg9QsDwtc/lHpe
W5hyMzNz/NEenH9NmFc+pehTQ1TL2LwDVCBMc9E7o8lZcoOjSjmMK5c2Mm7H83G8
be7QivGM6Mx75jk7fIRJRfK1P+Y8udw3OBpW/hJbu8tnIIo0C8UBYx7WUj3RZukf
gHz2IAFIZNMYVr2QUVJ+BdE1vucLrZvYkJTfZXhvkdsC5APRZKutNlt8kdgCadmq
M5Q=
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:20 2026 by rpki-client