This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/V-iqtypPqxyXIimSwNSMICX4_yc.roa
File:                     V-iqtypPqxyXIimSwNSMICX4_yc.roa (raw, json)
Hash identifier:          9qP4GMfzWZry9x0Ww/FVfCGvc27G3M28cDlCP2F//ws=
Subject key identifier:   57:E8:AA:B7:2A:4F:AB:1C:97:22:29:92:C0:D4:8C:20:25:F8:FF:27
Certificate issuer:       /CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Certificate serial:       019B7EA72C4EA40324BA290A7070B3650D3B
Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/V-iqtypPqxyXIimSwNSMICX4_yc.roa
Signing time:             Fri 02 Jan 2026 12:20:43 +0000
ROA not before:           Fri 02 Jan 2026 12:20:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        185.77.98.0/24 maxlen: 24
                          185.77.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:2c:4e:a4:03:24:ba:29:0a:70:70:b3:65:0d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
        Validity
            Not Before: Jan  2 12:20:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57e8aab72a4fab1c97222992c0d48c2025f8ff27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:87:4e:ce:56:27:db:22:c3:ee:ae:08:ce:
                    dc:66:77:36:50:34:fd:84:fc:a3:fe:cb:4e:86:5d:
                    31:c8:8f:53:a4:b4:b8:84:75:4a:24:5d:db:e9:b0:
                    b8:8e:32:68:7b:23:73:16:1e:03:ed:8d:a5:31:f2:
                    d4:38:b8:24:02:77:fa:94:74:70:33:60:45:d6:c4:
                    69:f2:ea:15:2e:f1:9b:f5:49:73:55:0e:21:7e:04:
                    f1:64:08:c3:30:a3:9a:b4:eb:03:8c:1f:1a:0c:a7:
                    ef:b7:ab:3c:2c:67:d3:18:64:83:67:67:bd:8b:cb:
                    31:00:95:5e:25:4e:6f:74:8e:79:f8:fb:5f:e6:0c:
                    15:03:33:fc:07:36:a2:f2:6f:aa:3c:e9:18:75:35:
                    10:f5:06:ae:f5:4a:16:30:d1:23:80:37:71:f2:b0:
                    38:7a:19:7b:18:82:ca:b8:ce:a7:b1:af:c2:8e:14:
                    de:d5:be:aa:25:af:9d:39:c1:78:bd:1a:e0:c1:2c:
                    32:68:5b:67:07:78:1c:81:83:32:16:3d:6b:5e:61:
                    0e:20:41:ef:6a:60:8e:86:a1:13:cb:34:57:f0:e9:
                    2f:f0:26:5a:14:50:41:a5:18:a6:65:79:39:18:ef:
                    db:35:87:00:ee:55:52:cd:72:ec:89:fb:62:40:cf:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E8:AA:B7:2A:4F:AB:1C:97:22:29:92:C0:D4:8C:20:25:F8:FF:27
            X509v3 Authority Key Identifier:
                keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/V-iqtypPqxyXIimSwNSMICX4_yc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:7c:b3:f5:a8:a4:36:91:9e:ed:d9:cc:f7:8c:84:9e:b3:
         23:9a:62:18:3a:07:2e:01:7e:4e:de:00:df:1b:5c:50:5d:40:
         46:e1:f3:d4:e9:f5:df:e4:49:17:3f:91:dd:75:f9:2b:a6:18:
         66:c9:48:6e:6c:23:35:70:e3:e5:7e:da:60:5c:27:4b:42:47:
         60:95:ad:5c:dd:ac:ec:f2:cc:52:c9:65:59:24:27:24:21:c7:
         b1:dc:ad:2f:86:bf:13:5f:33:2a:87:d2:11:df:4f:14:1a:8c:
         33:04:72:9d:8f:7e:cb:9e:1d:24:6c:95:6e:6a:e0:4b:73:bb:
         5b:df:b2:ef:1f:64:8b:2a:af:7b:f1:6f:62:db:c5:ac:22:e9:
         12:13:96:0f:bd:df:0b:39:02:75:2e:c2:a5:85:7f:ce:c6:9b:
         6a:aa:06:f3:ff:67:18:c6:3b:92:8c:10:71:39:41:59:bc:c1:
         a7:2b:42:1d:0e:b4:77:a0:c4:9a:c4:f2:b6:a7:cb:b0:94:0a:
         bc:24:04:bc:b5:7c:bb:0a:2a:97:e2:9d:51:25:7e:fe:d6:d4:
         2d:1d:df:54:bd:3b:8a:7e:31:b0:ff:f9:47:ed:56:90:56:14:
         8f:2e:5d:dd:d8:b1:6a:c8:32:b8:da:86:a5:44:7f:3f:bb:16:
         3c:84:c2:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pyxOpAMkuikKcHCzZQ07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NmZkNTY4Njc0ODU2NDE1ZWIxZTIxMzQyYWFmMzIzYjM3
YjdhMmUwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2U4YWFiNzJhNGZhYjFjOTcyMjI5OTJjMGQ0OGMyMDI1ZjhmZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTmHTs5WJ9siw+6uCM7cZnc2UDT9
hPyj/stOhl0xyI9TpLS4hHVKJF3b6bC4jjJoeyNzFh4D7Y2lMfLUOLgkAnf6lHRw
M2BF1sRp8uoVLvGb9UlzVQ4hfgTxZAjDMKOatOsDjB8aDKfvt6s8LGfTGGSDZ2e9
i8sxAJVeJU5vdI55+Ptf5gwVAzP8Bzai8m+qPOkYdTUQ9Qau9UoWMNEjgDdx8rA4
ehl7GILKuM6nsa/CjhTe1b6qJa+dOcF4vRrgwSwyaFtnB3gcgYMyFj1rXmEOIEHv
amCOhqETyzRX8Okv8CZaFFBBpRimZXk5GO/bNYcA7lVSzXLsiftiQM/phwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFfoqrcqT6sclyIpksDUjCAl+P8nMB8GA1UdIwQY
MBaAFPdv1WhnSFZBXrHiE0Kq8yOze3ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTJfVmFHZElWa0Zlc2VJVFFxcnpJN043ZWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81NDBkYTUtMjdmYi00NmU2LWExMzIt
YjU0ZDgyZDhiZTdiLzEvVi1pcXR5cFBxeHlYSWltU3dOU01JQ1g0X3ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi81NDBkYTUtMjdmYi00NmU2LWExMzItYjU0ZDgyZDhiZTdi
LzEvOTJfVmFHZElWa0Zlc2VJVFFxcnpJN043ZWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuU1iMA0G
CSqGSIb3DQEBCwUAA4IBAQA8kHyz9aikNpGe7dnM94yEnrMjmmIYOgcuAX5O3gDf
G1xQXUBG4fPU6fXf5EkXP5HddfkrphhmyUhubCM1cOPlftpgXCdLQkdgla1c3azs
8sxSyWVZJCckIcex3K0vhr8TXzMqh9IR308UGowzBHKdj37Lnh0kbJVuauBLc7tb
37LvH2SLKq978W9i28WsIukSE5YPvd8LOQJ1LsKlhX/Oxptqqgbz/2cYxjuSjBBx
OUFZvMGnK0IdDrR3oMSaxPK2p8uwlAq8JAS8tXy7CiqX4p1RJX7+1tQtHd9UvTuK
fjGw//lH7VaQVhSPLl3d2LFqyDK42oalRH8/uxY8hMIU
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:20:50 2026 by rpki-client