This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/VSeiA30DTHd0bJ0y1tRYzj5Mt1o.roa
File:                     VSeiA30DTHd0bJ0y1tRYzj5Mt1o.roa (raw, json)
Hash identifier:          E9YlBD3LSznk1ncytSRiAb3WU0SWHEm+bFl0B0p1e8Y=
Subject key identifier:   55:27:A2:03:7D:03:4C:77:74:6C:9D:32:D6:D4:58:CE:3E:4C:B7:5A
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       019B7A5B5BF94D3C7C7C4D4C020228879765
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/VSeiA30DTHd0bJ0y1tRYzj5Mt1o.roa
Signing time:             Thu 01 Jan 2026 16:19:26 +0000
ROA not before:           Thu 01 Jan 2026 16:19:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205594
IP address blocks:        185.81.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 13:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:5b:f9:4d:3c:7c:7c:4d:4c:02:02:28:87:97:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Jan  1 16:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5527a2037d034c77746c9d32d6d458ce3e4cb75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:4b:77:76:3a:97:b6:90:77:83:fd:57:5e:
                    20:95:d2:3b:d0:4f:8b:9a:8b:2e:5b:64:d8:f1:63:
                    0a:f7:22:36:91:76:f7:25:4e:6d:04:2d:00:76:36:
                    8f:65:4b:df:2f:71:09:b3:dd:de:07:14:30:94:a4:
                    fc:7e:62:74:d9:99:bb:60:30:27:8b:d2:61:cf:60:
                    50:84:25:01:d9:be:29:a3:b5:5b:51:ae:53:7c:6c:
                    e3:d9:bb:20:48:5f:d7:a8:7e:25:53:a5:39:b9:ca:
                    5f:41:c3:21:3b:b6:ce:19:f0:4a:9e:a6:0e:66:cc:
                    d8:0f:af:03:f0:d5:29:3b:1f:43:7c:22:de:c7:9e:
                    c3:01:81:21:1b:a1:0c:11:1b:e8:4d:49:eb:94:ef:
                    15:62:f4:f0:2d:10:3f:6c:58:e6:84:05:e2:e0:53:
                    b2:f8:7e:b8:5e:84:02:5a:fd:58:02:27:70:f9:8f:
                    6b:93:1c:49:2a:bf:4d:cc:58:f3:a4:f5:ee:37:8f:
                    e3:b9:c5:c7:9c:d8:b4:10:4c:94:38:70:e8:91:4d:
                    b3:bc:bd:31:44:a6:0d:b3:30:46:8b:46:47:30:e4:
                    13:ce:09:ed:9a:6e:7b:10:00:98:55:c7:9a:32:26:
                    1d:b4:67:f5:1c:f0:6c:ec:08:b1:cc:9f:3f:6d:8f:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:27:A2:03:7D:03:4C:77:74:6C:9D:32:D6:D4:58:CE:3E:4C:B7:5A
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/VSeiA30DTHd0bJ0y1tRYzj5Mt1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:b5:aa:09:07:09:bd:be:63:7e:11:c9:94:2e:93:bc:d7:
         1f:cf:a9:d6:a6:ed:4d:9b:30:32:56:75:b7:8f:fe:8e:f5:df:
         8b:44:52:a2:cb:e8:18:83:a6:79:4a:7b:2e:a7:3e:c1:22:d5:
         c4:58:91:b1:5e:28:bc:e4:b0:f1:22:7f:d4:9f:54:80:10:0c:
         fc:76:78:b1:64:20:48:16:69:8b:3c:4c:eb:04:53:0c:61:89:
         c6:4c:ee:4f:9f:6a:fb:11:a2:d1:0f:92:b5:01:c7:49:7c:7b:
         28:10:2d:f9:de:48:8f:83:12:59:f5:cc:21:7a:37:fa:d1:fa:
         f6:fc:3f:0c:51:0d:c7:5e:ac:77:92:0b:c2:cb:6e:e6:ea:3e:
         77:33:4c:a2:9b:8b:62:ae:30:52:97:ca:70:05:7c:c6:d3:13:
         06:10:d0:6b:fc:83:69:e9:02:9e:bc:bb:51:16:53:db:02:b6:
         e5:83:07:c5:9d:51:a2:9e:0b:14:11:28:5a:ea:ac:b9:00:d0:
         9a:00:a2:2f:1c:0b:29:3f:ed:29:ab:75:38:13:8d:8b:16:60:
         31:38:23:b7:c0:13:dc:33:fe:9e:0c:9b:aa:08:d3:dc:27:05:
         f7:f9:a0:80:8c:dd:f9:76:e7:5f:85:f1:b1:66:d5:27:ab:7b:
         26:ba:c5:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6W1v5TTx8fE1MAgIoh5dlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYzRhMWJiYmE1NmNjNDM0ODYxYTRjNzY5ZmY5Y2Uy
ZDE1ZWMwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTI3YTIwMzdkMDM0Yzc3NzQ2YzlkMzJkNmQ0NThjZTNlNGNiNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4NLd3Y6l7aQd4P9V14gldI70E+L
mosuW2TY8WMK9yI2kXb3JU5tBC0AdjaPZUvfL3EJs93eBxQwlKT8fmJ02Zm7YDAn
i9Jhz2BQhCUB2b4po7VbUa5TfGzj2bsgSF/XqH4lU6U5ucpfQcMhO7bOGfBKnqYO
ZszYD68D8NUpOx9DfCLex57DAYEhG6EMERvoTUnrlO8VYvTwLRA/bFjmhAXi4FOy
+H64XoQCWv1YAidw+Y9rkxxJKr9NzFjzpPXuN4/jucXHnNi0EEyUOHDokU2zvL0x
RKYNszBGi0ZHMOQTzgntmm57EACYVceaMiYdtGf1HPBs7AixzJ8/bY9keQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFUnogN9A0x3dGydMtbUWM4+TLdaMB8GA1UdIwQY
MBaAFOQ7rEobu6VsxDSGGkx2n/nOLRXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmFiMGYtYmU0My00NjY1LWJiYWEt
MWNkM2NiMDdlZjVkLzEvVlNlaUEzMERUSGQwYkoweTF0Ull6ajVNdDFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMmFiMGYtYmU0My00NjY1LWJiYWEtMWNkM2NiMDdlZjVk
LzEvNUR1c1NodTdwV3pFTklZYVRIYWYtYzR0RmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVFpMA0G
CSqGSIb3DQEBCwUAA4IBAQBYn7WqCQcJvb5jfhHJlC6TvNcfz6nWpu1NmzAyVnW3
j/6O9d+LRFKiy+gYg6Z5Snsupz7BItXEWJGxXii85LDxIn/Un1SAEAz8dnixZCBI
FmmLPEzrBFMMYYnGTO5Pn2r7EaLRD5K1AcdJfHsoEC353kiPgxJZ9cwhejf60fr2
/D8MUQ3HXqx3kgvCy27m6j53M0yim4tirjBSl8pwBXzG0xMGENBr/INp6QKevLtR
FlPbArblgwfFnVGingsUESha6qy5ANCaAKIvHAspP+0pq3U4E42LFmAxOCO3wBPc
M/6eDJuqCNPcJwX3+aCAjN35dudfhfGxZtUnq3smusWP
-----END CERTIFICATE-----
Generated at Mon Feb 2 19:00:18 2026 by rpki-client