This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/Vchu28hFiP2g2wl5siwgeV6-0Mo.roa
File:                     Vchu28hFiP2g2wl5siwgeV6-0Mo.roa (raw, json)
Hash identifier:          nzslrPM5r0/2SJpIcbCIN9cB87EfRDEPS3VmNNiKSEM=
Subject key identifier:   55:C8:6E:DB:C8:45:88:FD:A0:DB:09:79:B2:2C:20:79:5E:BE:D0:CA
Certificate issuer:       /CN=545ab2a3712e2556a4434b8badd6c407a5673121
Certificate serial:       019B7BA35D434940C8705375B2AA5C5B8E6B
Authority key identifier: 54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/Vchu28hFiP2g2wl5siwgeV6-0Mo.roa
Signing time:             Thu 01 Jan 2026 22:17:42 +0000
ROA not before:           Thu 01 Jan 2026 22:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56727
IP address blocks:        178.237.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:5d:43:49:40:c8:70:53:75:b2:aa:5c:5b:8e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=545ab2a3712e2556a4434b8badd6c407a5673121
        Validity
            Not Before: Jan  1 22:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55c86edbc84588fda0db0979b22c20795ebed0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:72:5a:ee:5a:ae:94:92:26:8d:64:78:22:
                    18:e6:d7:3e:75:ba:09:fa:eb:60:e2:f6:3a:49:70:
                    3b:ed:1a:a0:0a:5e:de:dd:e5:a8:25:0e:46:b2:15:
                    f4:d1:90:f7:10:cb:35:0a:6e:65:f4:ee:ef:d5:a2:
                    50:d8:40:44:5d:0c:2a:50:e6:5a:76:ab:3e:03:74:
                    e8:42:26:8c:15:0e:96:24:77:fa:be:69:5f:11:01:
                    d5:c2:2f:63:a9:76:b8:71:ba:b3:45:65:71:d7:19:
                    c8:b6:97:f6:be:0a:ec:6b:73:74:6c:93:bc:16:1c:
                    f6:1f:6f:27:2d:cb:e5:ca:19:60:34:5b:79:b2:55:
                    ec:a4:63:0d:8d:56:b1:b9:c0:0d:0f:fc:58:1d:c8:
                    5d:60:89:d6:ed:1b:3a:ed:22:6b:9e:d1:e2:d0:ac:
                    48:b2:b5:20:92:91:a2:1f:4b:e6:54:47:73:e7:75:
                    53:25:a9:33:09:6c:e1:de:9a:56:8e:5a:30:bb:66:
                    12:6e:5e:7e:14:d5:b1:7a:76:e6:56:26:e6:93:5d:
                    aa:aa:ac:58:04:4a:47:50:b2:c0:e8:44:63:76:19:
                    fc:8c:f3:bc:f6:89:a7:1e:e1:ac:4c:8e:56:10:20:
                    c6:ab:e7:27:80:14:f9:7c:ad:75:30:15:37:41:fc:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:6E:DB:C8:45:88:FD:A0:DB:09:79:B2:2C:20:79:5E:BE:D0:CA
            X509v3 Authority Key Identifier:
                keyid:54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/Vchu28hFiP2g2wl5siwgeV6-0Mo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.237.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:51:f4:a5:6e:9e:23:a7:03:b3:0d:29:47:5d:85:e0:10:b8:
         18:76:08:f8:8e:93:f5:64:ec:e5:0d:32:62:a3:10:c9:10:5b:
         7e:ba:8e:94:48:cc:ed:05:3b:49:21:18:5f:c0:17:19:b3:9c:
         18:a0:3b:34:57:e2:b5:21:79:55:14:ff:2d:4d:64:0f:07:62:
         b0:27:92:43:4a:5d:4b:c4:dd:47:00:a1:42:46:c9:e1:14:cf:
         bd:8d:7e:9f:e7:bb:61:a6:8c:ae:0a:69:50:34:76:cd:9d:b3:
         94:77:2c:61:2a:e3:56:b2:47:20:a3:c6:74:e9:35:0c:29:4b:
         e2:c8:8a:d1:dd:8b:38:7e:94:1d:4c:32:87:f9:3b:44:3e:b9:
         ad:86:5d:ba:ab:a2:c5:2b:4f:c9:dd:ac:69:4b:17:ae:d1:0f:
         69:16:fc:08:bd:39:53:74:de:16:45:7c:01:fd:b8:54:de:6e:
         77:26:08:48:de:6c:9f:54:6a:f6:ca:31:6b:46:92:57:0c:1f:
         b4:ee:b9:77:d9:21:3f:c0:a6:60:41:ed:2d:8a:0a:06:0d:d7:
         d9:ef:5a:1d:2d:47:a5:37:48:57:10:3a:5a:26:c2:10:d8:20:
         4b:37:23:5e:59:59:4f:ee:22:6d:f2:10:89:92:63:dd:3c:b3:
         bf:62:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:08:43 2026 by rpki-client