This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa
File:                     VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa (raw, json)
Hash identifier:          nZT5dviNLBhgGj5zg6mzO60GRglFXHbvUdAHc/xzhdo=
Subject key identifier:   54:4F:CB:67:93:84:57:2E:CE:B6:2C:27:6A:43:5B:42:55:CE:53:1F
Certificate issuer:       /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial:       019B7F15D48480CFD223943D6EACF7B58822
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa
Signing time:             Fri 02 Jan 2026 14:21:35 +0000
ROA not before:           Fri 02 Jan 2026 14:21:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41291
IP address blocks:        37.157.56.0/23 maxlen: 23
                          62.244.78.0/24 maxlen: 24
                          62.244.79.0/24 maxlen: 24
                          62.244.108.0/23 maxlen: 23
                          62.244.110.0/24 maxlen: 24
                          62.244.116.0/24 maxlen: 24
                          62.244.118.0/24 maxlen: 24
                          62.244.124.0/22 maxlen: 24
                          93.190.208.0/21 maxlen: 24
                          185.102.176.0/23 maxlen: 23
                          185.102.176.0/24 maxlen: 24
                          185.102.177.0/24 maxlen: 24
                          185.102.178.0/23 maxlen: 23
                          185.102.178.0/24 maxlen: 24
                          185.102.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:d4:84:80:cf:d2:23:94:3d:6e:ac:f7:b5:88:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
        Validity
            Not Before: Jan  2 14:21:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=544fcb679384572eceb62c276a435b4255ce531f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:19:a6:1e:c4:29:74:43:5d:90:c2:4c:0f:
                    a4:17:06:32:84:f3:0c:db:d5:32:9b:2a:58:b7:2e:
                    ff:cb:75:7d:15:d0:fe:09:4f:ea:a2:23:f6:70:c2:
                    42:3e:67:d4:c7:26:0a:0f:47:0b:42:85:f4:28:de:
                    b8:79:d7:73:20:88:22:70:91:0b:a4:0c:9e:e1:1c:
                    41:2d:2b:a4:38:fa:72:7f:e2:16:ae:d1:26:53:e2:
                    1a:3b:35:7a:3a:a2:c9:d2:e5:08:c0:ed:8f:f2:31:
                    b7:73:84:27:16:2b:c5:b6:db:66:44:f7:7a:a6:b4:
                    18:3b:04:ce:03:64:67:29:4c:12:b3:82:71:a5:5a:
                    9c:5d:4f:9d:b1:59:16:3f:ad:f7:d1:96:bf:90:1c:
                    de:52:63:67:71:67:2f:43:be:9a:63:93:de:5f:c0:
                    3b:93:c1:dd:6f:97:c1:92:20:a1:8f:17:f7:2d:71:
                    cb:5f:fc:5b:d6:2f:13:67:b6:76:89:80:51:25:0a:
                    e7:99:8c:43:76:cf:67:9a:c4:1d:fe:ce:47:36:00:
                    76:34:6f:b8:45:3a:70:0b:22:e4:f2:07:75:b4:0c:
                    43:ff:f3:1a:30:95:e9:92:75:db:c1:75:10:65:af:
                    8b:9d:c3:e3:bd:6c:bc:55:d2:00:b5:09:c2:8b:de:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4F:CB:67:93:84:57:2E:CE:B6:2C:27:6A:43:5B:42:55:CE:53:1F
            X509v3 Authority Key Identifier:
                keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.157.56.0/23
                  62.244.78.0/23
                  62.244.108.0-62.244.110.255
                  62.244.116.0/24
                  62.244.118.0/24
                  62.244.124.0/22
                  93.190.208.0/21
                  185.102.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f0:85:84:24:c3:47:54:64:21:60:fe:24:d9:f7:e8:cf:83:
         63:1c:f3:e2:03:12:3e:fa:f0:b2:c4:59:b7:af:0b:ec:e5:2f:
         f6:b7:40:61:ef:d6:bc:a2:4d:d6:23:b4:b2:51:0e:59:21:a8:
         0f:db:e2:20:9a:29:02:23:53:29:04:89:c8:70:77:b7:ab:fa:
         3c:83:36:53:70:80:5d:2a:77:44:c3:5e:bb:1f:35:6e:9d:9b:
         e6:4b:ea:f3:08:00:59:b4:17:84:ab:43:74:71:02:ca:0b:fd:
         af:1c:73:ec:23:0e:0a:ba:74:1b:6b:fe:31:21:70:6e:2c:27:
         f4:41:2c:c7:64:83:45:19:28:8d:03:39:88:89:95:51:36:df:
         37:bb:b6:a4:1d:75:4e:42:2e:29:b2:5e:61:0a:36:23:f1:a5:
         49:33:e0:df:37:47:d1:d8:31:3e:f0:4e:32:0d:4b:4d:7b:9d:
         8a:48:88:73:74:6d:2a:69:75:f7:3c:27:46:13:18:99:c2:2c:
         a0:f5:e8:1d:13:fd:3f:df:c0:2d:97:d2:35:e8:a0:f0:0b:43:
         78:f8:f6:69:00:de:99:52:0c:e9:30:c0:c9:41:0e:de:2f:42:
         5d:df:f9:a4:78:b1:0e:ee:73:06:e8:c0:52:34:d8:c5:c5:68:
         1f:bc:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:45 2026 by rpki-client