This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa
File:                     Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa (raw, json)
Hash identifier:          4UTBj4Zh6vSwwX6L/YeCbJsNnwD0s0UfjFqN/ZdD3NU=
Subject key identifier:   55:DE:32:9C:1E:BA:B0:21:2D:11:73:EE:57:F3:B7:C7:83:E0:5B:80
Certificate issuer:       /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial:       019B7B35F2A102D5FE3DD94778ACA6995590
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa
Signing time:             Thu 01 Jan 2026 20:18:11 +0000
ROA not before:           Thu 01 Jan 2026 20:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5488
IP address blocks:        185.236.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:f2:a1:02:d5:fe:3d:d9:47:78:ac:a6:99:55:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
        Validity
            Not Before: Jan  1 20:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55de329c1ebab0212d1173ee57f3b7c783e05b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:bb:d2:be:fc:a6:d3:34:87:9c:e0:70:66:
                    e9:ef:37:0d:27:04:c9:28:b7:8c:e7:b9:a3:f3:77:
                    7e:be:d5:5e:49:13:9f:00:9e:86:08:61:4a:1c:6e:
                    c7:fc:b4:e8:5b:52:f1:9a:03:3f:3b:0f:d2:37:67:
                    71:90:8b:d7:ef:20:3d:57:6d:aa:4b:b7:2a:bc:9e:
                    00:89:b6:6d:8e:4f:5a:6f:af:2d:b4:7e:a0:dd:9d:
                    ea:92:58:ac:e4:f9:45:db:c3:48:46:c2:da:a6:9f:
                    30:fb:dc:62:b5:af:09:cc:b6:0c:f2:5e:46:bf:fa:
                    f8:f2:42:03:cc:e7:5c:63:7e:af:ac:20:d9:4f:38:
                    f9:ec:24:47:79:ff:a4:f6:bf:16:52:7e:51:96:c1:
                    88:df:3d:28:bd:d5:7e:c3:24:13:77:bf:14:62:50:
                    f5:12:7b:64:51:53:67:a1:93:a7:33:a1:58:58:96:
                    d9:72:3a:ce:61:9f:0e:ec:a8:69:e4:7e:fa:42:50:
                    6b:e4:64:82:94:be:72:b9:d9:1c:11:9c:83:fd:c1:
                    0d:e1:b0:6c:3d:ea:87:7f:7d:19:16:c0:00:97:6a:
                    89:55:22:eb:96:4d:d4:04:07:5c:c0:35:3d:67:f1:
                    2b:a4:c1:e6:20:af:d4:b2:69:f0:c9:2f:bd:73:99:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DE:32:9C:1E:BA:B0:21:2D:11:73:EE:57:F3:B7:C7:83:E0:5B:80
            X509v3 Authority Key Identifier:
                keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.236.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         fc:77:da:84:a5:6c:58:00:ac:46:08:f1:c6:22:d8:da:16:66:
         a6:a6:42:36:73:4c:bd:6d:e4:3b:be:86:41:af:bf:9e:c9:4a:
         54:09:c1:9e:cb:0c:4a:bd:ff:65:de:30:62:0e:b3:b9:77:0a:
         f4:d4:82:95:b4:b7:eb:e7:d4:a2:a6:70:4e:94:cd:01:41:d5:
         6d:e0:40:50:87:59:ab:71:0e:6c:40:c1:f7:4d:92:a1:a4:d9:
         7e:a2:10:31:59:6c:e5:7f:10:e0:33:32:ee:e8:d5:b8:ce:fe:
         b0:58:e9:4e:08:c6:d6:76:42:55:aa:f0:d8:f1:ed:ce:b5:f8:
         3b:cf:fe:eb:a6:f1:d0:f9:0b:da:b3:4e:d3:d3:36:56:26:eb:
         86:52:98:4b:8d:fd:f3:f6:dc:60:5d:c7:43:80:ca:ba:a4:93:
         0c:8c:5d:34:2e:ea:8b:fa:95:99:10:d0:cd:59:6f:9c:85:77:
         89:81:49:e0:28:67:af:79:0d:14:2c:4f:41:22:4c:a2:53:b8:
         83:24:62:9f:3b:bd:b0:e3:78:a7:e0:34:33:c3:69:4b:da:f8:
         cb:fd:8d:ee:2a:69:53:9c:ae:48:75:fc:ef:b3:7c:49:1b:15:
         d1:29:d5:1a:b1:b9:5c:6b:44:c5:3d:2f:73:9b:10:72:18:97:
         48:98:c8:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NfKhAtX+PdlHeKymmVWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWRiYmM1NmRhZjg1ZmEzZjM4N2M2MDUyZGM3MmQ1ZDcy
MTNiZjcwHhcNMjYwMTAxMjAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWRlMzI5YzFlYmFiMDIxMmQxMTczZWU1N2YzYjdjNzgzZTA1YjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKa70r78ptM0h5zgcGbp7zcNJwTJ
KLeM57mj83d+vtVeSROfAJ6GCGFKHG7H/LToW1LxmgM/Ow/SN2dxkIvX7yA9V22q
S7cqvJ4AibZtjk9ab68ttH6g3Z3qklis5PlF28NIRsLapp8w+9xita8JzLYM8l5G
v/r48kIDzOdcY36vrCDZTzj57CRHef+k9r8WUn5RlsGI3z0ovdV+wyQTd78UYlD1
EntkUVNnoZOnM6FYWJbZcjrOYZ8O7Khp5H76QlBr5GSClL5yudkcEZyD/cEN4bBs
PeqHf30ZFsAAl2qJVSLrlk3UBAdcwDU9Z/ErpMHmIK/UsmnwyS+9c5lgGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXeMpweurAhLRFz7lfzt8eD4FuAMB8GA1UdIwQY
MBaAFGrtu8Vtr4X6Pzh8YFLcctXXITv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNGI3OTEtZmZkNS00OWYwLTg3MTgt
NDliNzVjMTgzNDlhLzEvVmQ0eW5CNjZzQ0V0RVhQdVZfTzN4NFBnVzRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNGI3OTEtZmZkNS00OWYwLTg3MTgtNDliNzVjMTgzNDlh
LzEvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuew3MA0G
CSqGSIb3DQEBCwUAA4IBAQD8d9qEpWxYAKxGCPHGItjaFmampkI2c0y9beQ7voZB
r7+eyUpUCcGeywxKvf9l3jBiDrO5dwr01IKVtLfr59SipnBOlM0BQdVt4EBQh1mr
cQ5sQMH3TZKhpNl+ohAxWWzlfxDgMzLu6NW4zv6wWOlOCMbWdkJVqvDY8e3Otfg7
z/7rpvHQ+Qvas07T0zZWJuuGUphLjf3z9txgXcdDgMq6pJMMjF00LuqL+pWZENDN
WW+chXeJgUngKGeveQ0ULE9BIkyiU7iDJGKfO72w43in4DQzw2lL2vjL/Y3uKmlT
nK5Idfzvs3xJGxXRKdUasblca0TFPS9zmxByGJdImMhC
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:25:23 2026 by rpki-client