This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/VPRKJwLhM6wFak3hCjlk9djzH5k.roa
File:                     VPRKJwLhM6wFak3hCjlk9djzH5k.roa (raw, json)
Hash identifier:          tH+AfV2CLPYS64epB/DiVz/hoPPj/j4JOarUZisDq2E=
Subject key identifier:   54:F4:4A:27:02:E1:33:AC:05:6A:4D:E1:0A:39:64:F5:D8:F3:1F:99
Certificate issuer:       /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial:       019B7CECBFF0B14452E091E41598B4B30F25
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/VPRKJwLhM6wFak3hCjlk9djzH5k.roa
Signing time:             Fri 02 Jan 2026 04:17:28 +0000
ROA not before:           Fri 02 Jan 2026 04:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56644
IP address blocks:        91.226.24.0/24 maxlen: 24
                          91.226.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:bf:f0:b1:44:52:e0:91:e4:15:98:b4:b3:0f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
        Validity
            Not Before: Jan  2 04:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54f44a2702e133ac056a4de10a3964f5d8f31f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:15:4d:88:57:53:5d:cb:d1:37:2e:06:52:6d:
                    a4:a9:e9:6e:2d:66:e6:fe:d1:3a:e3:6f:82:ad:e8:
                    29:fe:77:ca:42:de:53:ab:0f:4b:1d:06:46:fd:0e:
                    b9:8f:b7:fc:2e:e5:79:90:33:e8:0c:83:fd:8d:4f:
                    5c:36:ee:2b:a8:c5:d5:7a:b9:1d:14:04:99:9a:28:
                    c3:69:ea:17:fb:bd:57:25:9b:92:70:3b:4e:26:f9:
                    d2:77:38:7c:c6:0b:1c:d6:60:4d:0c:d5:91:3d:b3:
                    0f:ee:20:b4:22:de:cd:ae:64:67:b1:8c:ba:f9:69:
                    30:06:a2:58:bb:15:2a:cc:ea:ae:48:ba:fb:96:0d:
                    1a:1a:07:39:19:34:7d:a1:6c:8b:de:8f:58:17:bd:
                    2a:3c:21:eb:d7:f9:96:c8:31:31:bf:c9:8c:53:8c:
                    d0:9d:5b:d8:ed:59:90:13:11:65:2c:49:17:ed:f9:
                    9f:d9:0c:a5:77:19:43:e2:07:10:5f:5d:e4:62:d6:
                    0a:fd:83:05:89:b3:46:41:eb:3c:71:e3:c9:bd:ca:
                    b4:d4:d5:f0:bc:ec:13:e3:f4:52:1e:7c:3c:07:bc:
                    bf:8d:9c:ef:19:f9:76:7b:df:5e:9d:1e:cc:d7:83:
                    aa:bc:b3:fa:92:b5:a6:12:68:b9:b6:b9:04:05:c5:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:4A:27:02:E1:33:AC:05:6A:4D:E1:0A:39:64:F5:D8:F3:1F:99
            X509v3 Authority Key Identifier:
                keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/VPRKJwLhM6wFak3hCjlk9djzH5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:ce:63:78:ab:de:6a:0d:dc:cd:54:ec:55:bc:7c:31:7d:
         51:45:04:40:be:a5:92:a9:a2:ca:84:5e:0d:e6:8e:5c:91:3c:
         18:12:a9:9b:6a:df:a8:6a:34:fe:94:96:1c:60:fd:de:7a:d9:
         06:a6:e8:54:00:9f:eb:cc:f6:40:60:3a:ac:41:61:c2:fb:38:
         4f:9f:a6:23:39:2b:74:d3:fe:91:b5:47:d0:c0:cf:f5:34:39:
         c9:2b:1f:82:0f:a2:ea:1c:96:b2:84:6c:d1:79:f6:33:40:ad:
         d5:41:39:0a:71:70:d1:29:ba:8c:88:5a:d3:8f:25:38:83:e8:
         41:fd:c2:4c:79:84:d6:17:44:de:62:31:32:af:c5:6c:57:36:
         d2:4f:6e:f1:dc:ec:0b:fd:55:f1:02:6f:8b:40:1d:e4:7a:f5:
         96:4e:0b:4c:95:1d:98:af:d3:fe:68:eb:73:47:9f:27:0b:3d:
         7d:c2:52:e4:40:11:48:e1:0d:eb:3e:9a:1a:e3:3c:70:b0:54:
         92:46:43:d3:90:17:07:d2:fa:3d:ea:4c:46:fd:49:ea:c5:36:
         6d:c3:74:4d:76:c4:a3:60:ce:4d:07:06:94:a3:0e:53:2b:50:
         42:d9:b9:7d:07:f0:46:7f:1d:f1:f6:22:1f:2d:aa:09:48:a3:
         57:31:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:47:20 2026 by rpki-client