This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa
File:                     vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa (raw, json)
Hash identifier:          CpHPotO66LaiTXBrpXnTFyDFuhRN5pLaJobhuRza6R4=
Subject key identifier:   BD:D5:08:B0:31:C6:0C:D6:CB:3B:12:F4:2F:2E:38:D3:A1:9E:62:F4
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       019B7A5B5B3C9433097270EE3765D354F9C3
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa
Signing time:             Thu 01 Jan 2026 16:19:25 +0000
ROA not before:           Thu 01 Jan 2026 16:19:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205136
IP address blocks:        185.81.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 13:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:5b:3c:94:33:09:72:70:ee:37:65:d3:54:f9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Jan  1 16:19:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bdd508b031c60cd6cb3b12f42f2e38d3a19e62f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:a8:b9:e8:7f:fd:69:aa:de:0f:5a:d6:e1:
                    0a:57:e0:ab:ec:da:19:27:57:f2:f6:56:e9:f7:32:
                    3b:4a:aa:f8:68:0a:1a:cd:44:97:38:27:0a:1d:ac:
                    4d:59:e1:6f:0f:a5:02:12:47:09:ce:71:b1:29:18:
                    f0:fd:f1:7d:30:5c:d5:2b:ea:53:cb:88:45:30:ed:
                    de:be:d3:07:4f:14:c4:8c:cd:89:83:04:71:00:fb:
                    68:ae:38:42:bc:78:8a:e5:38:f0:c0:8b:e3:ed:d9:
                    fd:17:e6:fc:fe:01:a7:3f:d8:e6:7b:71:be:67:5b:
                    ca:13:9a:3c:cf:f8:79:80:6d:9e:73:09:2c:f1:51:
                    c7:c4:5b:ec:81:c4:2d:bc:40:84:ab:ca:94:a8:64:
                    f6:c0:e5:ec:de:46:90:89:3d:25:bb:ac:f5:5c:fc:
                    6b:31:3b:a6:30:49:a7:3f:2e:15:39:3e:af:8b:9c:
                    e6:1c:21:48:e8:63:0a:04:0b:de:79:20:e8:6b:8a:
                    70:3e:3a:8c:d2:b3:82:a3:8b:69:e3:c8:e1:02:54:
                    b0:dd:83:6f:ee:91:bc:cf:8b:9a:f4:b3:29:18:90:
                    6a:1e:82:f3:9e:5b:81:d7:b8:c2:ff:fe:96:29:ed:
                    41:9b:0e:74:eb:bb:a8:53:9d:0e:0e:e3:6b:41:ee:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D5:08:B0:31:C6:0C:D6:CB:3B:12:F4:2F:2E:38:D3:A1:9E:62:F4
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c8:1b:7e:18:4d:cc:16:88:91:2b:93:19:59:82:f9:11:7f:
         67:84:92:04:d5:eb:4d:34:2e:54:a5:8d:0b:11:2e:c1:5b:07:
         01:e7:bd:73:fe:f6:69:4d:a9:56:76:7d:cf:46:36:a1:b1:c4:
         f6:fe:28:e4:06:a3:cd:31:ea:6e:48:43:92:1c:55:f9:c1:76:
         58:bb:7b:5a:72:9e:2c:81:84:51:04:d6:61:54:66:e5:8f:51:
         19:f1:7b:a7:87:46:2b:6e:d3:71:e5:ca:d8:9f:62:4f:65:15:
         fc:8f:a6:77:8d:dc:b3:cb:15:53:a7:1f:85:47:69:ab:36:52:
         55:53:92:34:a3:c3:06:b5:3c:25:a0:a0:e9:ac:4a:7a:d2:fb:
         30:a9:36:92:31:9c:20:c0:62:a8:9a:cb:96:fe:8a:7b:d4:18:
         78:1c:dd:2c:ce:48:e7:e3:b5:c9:bc:4c:46:9c:88:c4:2d:23:
         57:39:79:fe:0a:fa:89:be:59:9d:bc:a0:c9:9e:96:25:83:f1:
         ac:5a:bb:1f:8b:2d:c3:e2:85:bc:bb:ec:b0:cd:3c:61:83:b4:
         3f:36:3e:d7:26:16:d4:e0:52:83:5a:85:6e:4b:3c:7a:71:01:
         a8:c3:86:1a:08:a5:30:ed:7f:01:cc:9c:ef:d1:21:ff:ac:59:
         27:6f:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:58:30 2026 by rpki-client