This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/VJVJZRel1h4bnfOJmIjq-p-a_g4.roa
File:                     VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (raw, json)
Hash identifier:          j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=
Subject key identifier:   54:95:49:65:17:A5:D6:1E:1B:9D:F3:89:98:88:EA:FA:9F:9A:FE:0E
Certificate issuer:       /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial:       019B7C12ABAB9B7638A562D3B6B99873D30A
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/VJVJZRel1h4bnfOJmIjq-p-a_g4.roa
Signing time:             Fri 02 Jan 2026 00:19:16 +0000
ROA not before:           Fri 02 Jan 2026 00:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210649
IP address blocks:        37.140.249.0/24 maxlen: 24
                          193.38.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:ab:ab:9b:76:38:a5:62:d3:b6:b9:98:73:d3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
        Validity
            Not Before: Jan  2 00:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5495496517a5d61e1b9df3899888eafa9f9afe0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:e2:9e:7a:b4:90:1f:75:97:14:96:11:21:
                    c4:dc:f7:f9:50:93:bc:4b:09:ab:a3:32:14:72:28:
                    c0:4a:cf:c1:fe:8c:80:1a:5b:7b:71:5e:aa:78:84:
                    b6:c4:ea:12:3c:9c:da:e5:64:39:02:20:d3:bc:54:
                    a7:e9:74:b6:ed:b9:39:ad:99:c5:26:68:fd:d7:42:
                    df:10:d2:bd:65:a4:df:0c:45:e3:65:ae:0d:d8:03:
                    15:25:1a:01:fb:a6:57:53:c2:f0:8c:29:01:d7:5d:
                    74:c5:a1:01:f7:7c:22:21:d6:92:41:38:4e:e3:02:
                    bd:ac:02:71:4c:2e:ca:f6:02:d6:81:15:1f:5b:f0:
                    d8:de:8e:60:2d:10:0e:33:7c:15:2e:db:98:60:c6:
                    8e:0a:bd:e1:5c:d8:d5:a4:2f:cd:25:65:e1:8d:ad:
                    54:08:ad:9f:2d:49:a2:a1:c0:0c:5d:aa:2d:ab:c2:
                    8e:23:77:26:56:3f:ce:04:4c:75:03:80:e1:cc:7c:
                    92:b3:6b:61:54:ee:35:ae:65:b0:2c:fa:68:b8:e8:
                    0c:9c:eb:87:74:2f:ff:05:7e:96:db:1e:13:48:79:
                    ef:a3:5b:f5:80:47:8d:1f:3e:c0:82:46:03:18:5e:
                    94:06:26:29:a0:24:4d:03:ad:65:43:dd:d2:f8:2d:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:95:49:65:17:A5:D6:1E:1B:9D:F3:89:98:88:EA:FA:9F:9A:FE:0E
            X509v3 Authority Key Identifier:
                keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/VJVJZRel1h4bnfOJmIjq-p-a_g4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.249.0/24
                  193.38.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:53:ce:05:ac:9a:3e:07:11:00:4e:c1:3a:bc:83:43:0e:04:
         16:50:95:4d:ea:a7:bf:18:f2:2c:7e:8d:67:d2:63:92:7b:db:
         2e:63:46:c2:66:51:61:82:71:d6:69:ef:eb:dd:10:09:26:14:
         a3:a6:fa:84:08:62:5d:3d:ef:51:60:71:a1:60:69:fc:83:f3:
         3d:fe:73:15:52:ae:7b:29:ad:5a:2b:4c:3c:dc:5b:5a:79:fb:
         a1:bf:b0:f1:d3:ae:ff:fb:ae:12:aa:18:01:ac:b6:51:89:db:
         55:3f:28:db:ac:c5:94:1c:dc:08:7a:07:4e:42:7c:e1:62:04:
         fd:39:4b:7b:d3:d5:2d:c2:48:65:66:28:c0:7b:5d:26:59:6f:
         de:da:61:98:8f:43:89:8d:f6:2f:97:00:46:fa:95:ae:4a:73:
         8a:54:a2:36:de:80:11:0d:d8:47:b3:b8:b3:58:21:8e:be:63:
         5f:64:aa:5a:53:f0:9d:28:6b:6b:d0:99:8e:73:72:76:da:46:
         e2:fa:d6:c8:69:f1:7f:01:f6:2f:5f:37:cd:b2:42:a0:53:64:
         c8:f1:3c:fe:f7:01:c1:fd:b2:43:da:84:0d:a4:d8:3a:0d:6d:
         7a:27:4d:f7:94:86:0a:df:69:dd:83:98:98:e0:3f:a6:2e:00:
         29:40:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:08:17 2026 by rpki-client