This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa
File:                     VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa (raw, json)
Hash identifier:          4yjY0Y/5nyei1ONwFqlQ/gYOuf/J9WjX6PHuI2NreOo=
Subject key identifier:   55:64:CE:27:68:DB:BD:1D:50:77:7F:E3:71:82:15:91:26:93:B5:A3
Certificate issuer:       /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial:       019B76EB140781ABDB6EADFBD39AA62ACED3
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa
Signing time:             Thu 01 Jan 2026 00:17:56 +0000
ROA not before:           Thu 01 Jan 2026 00:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57469
IP address blocks:        194.26.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:14:07:81:ab:db:6e:ad:fb:d3:9a:a6:2a:ce:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
        Validity
            Not Before: Jan  1 00:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5564ce2768dbbd1d50777fe3718215912693b5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:2e:20:09:24:ba:3f:18:df:9b:8f:4b:79:
                    38:18:d7:e6:2c:3c:cc:4c:68:54:c8:63:a9:78:0c:
                    6a:0f:cc:47:3d:3d:af:d0:e9:24:a7:20:73:1e:dc:
                    67:3f:65:5a:ba:3a:64:11:30:87:f3:a3:89:2d:67:
                    0d:06:8a:85:7b:23:0d:0d:e5:0c:fa:d1:60:4d:41:
                    23:25:3f:e8:2d:6b:bb:a1:3d:ef:1a:6e:c4:29:2f:
                    a8:3f:34:ae:0f:e4:a1:26:c0:e3:60:6f:54:f1:5a:
                    4d:51:73:ad:6d:d2:7d:fc:43:11:ee:eb:3c:84:00:
                    c5:e2:54:07:5f:59:6c:51:05:2d:6b:73:86:2f:12:
                    a6:a6:bd:0c:da:00:8d:d1:1a:75:59:4e:cb:2e:7d:
                    34:3b:a2:39:7b:7d:da:97:73:a3:3c:96:f8:7b:65:
                    dc:ac:56:b6:c7:2a:61:ee:c9:00:94:b1:ba:c2:c2:
                    13:33:2b:50:a0:d8:a3:b0:2c:70:c1:2b:c9:39:3e:
                    03:99:3d:1c:73:ce:f6:1b:89:0e:94:9a:b2:bb:b0:
                    fb:c9:22:48:f5:83:6d:78:fc:0a:13:f6:34:8d:95:
                    80:c0:0b:cf:f3:51:9e:5e:c6:c0:da:be:fb:e4:a9:
                    38:64:f3:ab:80:dd:e6:fe:d9:5e:4b:ce:a1:60:ab:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:64:CE:27:68:DB:BD:1D:50:77:7F:E3:71:82:15:91:26:93:B5:A3
            X509v3 Authority Key Identifier:
                keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/VWTOJ2jbvR1Qd3_jcYIVkSaTtaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:a3:36:71:ba:77:43:a7:ef:26:8e:f2:40:00:d0:b9:62:bb:
         e4:66:63:79:15:81:a8:52:2c:14:67:75:c0:7e:40:21:71:a2:
         5a:fb:8b:01:a6:f2:db:af:9a:86:66:21:e7:e1:db:d0:7f:c1:
         8a:2e:29:d5:d3:f0:25:2b:ec:00:e4:31:3b:ec:c4:b1:4a:1a:
         6e:fe:3b:c0:68:f1:a3:2d:56:74:b0:f9:e3:86:a2:45:83:d7:
         8d:98:0d:96:77:0d:1a:d0:ac:29:c0:65:86:8c:93:53:cc:60:
         31:51:f5:06:b0:e4:bc:b5:4e:d3:f4:0d:78:94:75:c6:3b:85:
         a1:b6:3e:ba:08:6f:d7:71:0b:90:b3:ea:92:56:2e:8d:cf:73:
         01:c4:de:44:78:6f:9d:bf:4f:ab:bb:47:70:0c:e9:fb:86:8c:
         19:cc:74:31:56:f5:e6:7e:c9:7d:99:c6:2d:88:69:2c:46:d3:
         40:dd:f3:bc:92:50:0d:69:63:f7:b4:b2:97:ab:06:be:e2:a0:
         80:1e:24:04:eb:88:ff:2b:aa:30:5c:8a:50:b1:c2:83:7c:41:
         59:3d:43:dd:f7:3d:01:b6:f2:0c:17:dd:54:98:f9:eb:d6:c1:
         f1:9c:ee:fe:f8:84:89:20:59:2e:3a:95:17:ff:e1:c8:d1:eb:
         02:5c:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:16 2026 by rpki-client