This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/VjNXjC-0wab16uqPCuhxskDPjCA.roa
File:                     VjNXjC-0wab16uqPCuhxskDPjCA.roa (raw, json)
Hash identifier:          NM6EunarFLybHJwbwp3+FCoMQV5bhN/V+aR1Sck6SRs=
Subject key identifier:   56:33:57:8C:2F:B4:C1:A6:F5:EA:EA:8F:0A:E8:71:B2:40:CF:8C:20
Certificate issuer:       /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial:       019B78A2698684DB7E09B8B744265D05CE2A
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/VjNXjC-0wab16uqPCuhxskDPjCA.roa
Signing time:             Thu 01 Jan 2026 08:17:48 +0000
ROA not before:           Thu 01 Jan 2026 08:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60690
IP address blocks:        93.95.72.0/21 maxlen: 21
                          178.248.16.0/21 maxlen: 21
                          185.27.36.0/22 maxlen: 22
                          185.67.84.0/22 maxlen: 22
                          185.109.100.0/22 maxlen: 22
                          185.123.196.0/22 maxlen: 22
                          185.219.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:69:86:84:db:7e:09:b8:b7:44:26:5d:05:ce:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
        Validity
            Not Before: Jan  1 08:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5633578c2fb4c1a6f5eaea8f0ae871b240cf8c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:e9:2b:fc:73:d7:98:0f:ee:7e:6b:93:ea:
                    5b:b1:1d:86:37:94:c9:1e:f9:a8:99:3c:d0:36:ca:
                    61:53:73:8e:14:ed:76:b1:07:7c:b8:ba:b5:8a:a7:
                    ee:1f:5e:39:c7:25:8b:8b:f6:83:7e:01:e8:8c:e4:
                    fe:3e:f3:47:81:9d:41:ed:56:67:a7:05:9c:c1:cb:
                    cb:c5:f0:5f:71:f9:db:ab:15:cf:33:d9:72:57:e9:
                    5f:84:6e:6a:01:81:9d:2d:5f:b0:73:88:97:ca:6b:
                    f6:e0:20:57:6d:f4:17:4d:95:b3:6e:09:6e:5e:bb:
                    9b:6b:c1:ee:93:8c:4b:e6:eb:79:52:53:4d:b8:85:
                    96:e1:7d:5b:dc:02:59:4c:53:4d:f1:82:e5:7c:70:
                    d6:21:e1:07:e2:e1:a2:7e:12:52:3e:f1:e8:92:de:
                    95:a2:45:e8:b7:79:d5:47:9d:9d:7c:b3:a8:a9:3e:
                    2f:c3:37:87:54:80:51:6d:5f:89:65:db:51:36:50:
                    55:d0:1a:78:78:71:fd:2d:2e:21:e3:3c:34:b4:65:
                    fa:29:dc:da:37:05:ca:56:43:6f:89:94:21:81:11:
                    41:1d:01:88:98:02:cf:d2:cd:95:42:24:61:58:49:
                    6c:8d:a4:94:48:3a:84:8a:24:4f:47:e6:f3:0c:79:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:33:57:8C:2F:B4:C1:A6:F5:EA:EA:8F:0A:E8:71:B2:40:CF:8C:20
            X509v3 Authority Key Identifier:
                keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/VjNXjC-0wab16uqPCuhxskDPjCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.72.0/21
                  178.248.16.0/21
                  185.27.36.0/22
                  185.67.84.0/22
                  185.109.100.0/22
                  185.123.196.0/22
                  185.219.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:da:17:d9:65:8d:55:7f:70:33:b9:71:64:cd:09:4f:a3:
         b0:d1:c9:9d:a1:97:4c:58:d4:10:7c:92:81:b6:db:90:11:d9:
         7f:78:2e:36:53:c2:a9:81:bb:d6:78:73:72:20:9b:ad:e0:e6:
         f2:30:2a:ef:c1:9a:61:24:e6:7e:f8:33:ee:2a:cd:2e:4a:e2:
         69:a0:c0:b7:ee:0a:95:e1:29:04:f9:72:c9:62:e7:ef:35:0a:
         94:39:4f:bf:fb:61:3e:be:ae:ea:92:0e:54:be:81:cc:bb:59:
         cc:c1:49:22:28:f9:30:44:0e:51:b2:72:0c:fd:e4:4e:0e:45:
         36:0a:f3:10:22:11:a9:17:95:3b:45:6b:06:93:35:0b:44:43:
         a1:c4:ee:4c:0d:fb:da:90:9d:32:c9:94:51:a8:07:d7:16:78:
         1d:e3:75:51:e9:78:15:a1:9e:43:b3:71:c4:84:e4:68:94:a9:
         13:13:9c:4f:0d:38:7e:79:e7:a8:86:3f:96:90:1c:f8:6e:4b:
         4b:c1:8f:77:52:69:63:08:e5:e0:e2:6b:d8:1e:b9:a7:2b:60:
         3c:e5:a9:76:82:41:81:f7:1d:e0:0d:52:3a:f4:74:d0:df:eb:
         ed:bc:99:96:0f:ec:63:64:3d:30:98:f6:bf:cc:c5:0f:e7:70:
         4d:4e:c0:34
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZt4ommGhNt+Cbi3RCZdBc4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY2NmNiMGU1NDk2MTE2ZWI3YWU2NzE0ZDkwNTUzMDli
YTY5YWMwHhcNMjYwMTAxMDgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjMzNTc4YzJmYjRjMWE2ZjVlYWVhOGYwYWU4NzFiMjQwY2Y4YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSPpK/xz15gP7n5rk+pbsR2GN5TJ
HvmomTzQNsphU3OOFO12sQd8uLq1iqfuH145xyWLi/aDfgHojOT+PvNHgZ1B7VZn
pwWcwcvLxfBfcfnbqxXPM9lyV+lfhG5qAYGdLV+wc4iXymv24CBXbfQXTZWzbglu
Xruba8Huk4xL5ut5UlNNuIWW4X1b3AJZTFNN8YLlfHDWIeEH4uGifhJSPvHokt6V
okXot3nVR52dfLOoqT4vwzeHVIBRbV+JZdtRNlBV0Bp4eHH9LS4h4zw0tGX6Kdza
NwXKVkNviZQhgRFBHQGImALP0s2VQiRhWElsjaSUSDqEiiRPR+bzDHl5vwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFFYzV4wvtMGm9erqjwrocbJAz4wgMB8GA1UdIwQY
MBaAFKS2ZssOVJYRbreuZxTZBVMJummsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExabXl3NVVsaEZ1dDY1bkZOa0ZVd202YWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mNzQyODAtY2M2ZC00MWMxLTg1OGEt
YjUzNjgzMzBiYWYyLzEvVmpOWGpDLTB3YWIxNnVxUEN1aHhza0RQakNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mNzQyODAtY2M2ZC00MWMxLTg1OGEtYjUzNjgzMzBiYWYy
LzEvcExabXl3NVVsaEZ1dDY1bkZOa0ZVd202YWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDXV9IAwQD
svgQAwQCuRskAwQCuUNUAwQCuW1kAwQCuXvEAwQCuduUMA0GCSqGSIb3DQEBCwUA
A4IBAQABq9oX2WWNVX9wM7lxZM0JT6Ow0cmdoZdMWNQQfJKBttuQEdl/eC42U8Kp
gbvWeHNyIJut4ObyMCrvwZphJOZ++DPuKs0uSuJpoMC37gqV4SkE+XLJYufvNQqU
OU+/+2E+vq7qkg5UvoHMu1nMwUkiKPkwRA5RsnIM/eRODkU2CvMQIhGpF5U7RWsG
kzULREOhxO5MDfvakJ0yyZRRqAfXFngd43VR6XgVoZ5Ds3HEhORolKkTE5xPDTh+
eeeohj+WkBz4bktLwY93UmljCOXg4mvYHrmnK2A85al2gkGB9x3gDVI69HTQ3+vt
vJmWD+xjZD0wmPa/zMUP53BNTsA0
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:22 2026 by rpki-client