This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/vcurezLdovhZEJ_5__NOTZxZX0U.roa
File:                     vcurezLdovhZEJ_5__NOTZxZX0U.roa (raw, json)
Hash identifier:          Ve+Xn7DMb8Yh8TeJ9TkE0GiZkvH6kTEGpcyw7nrpcMk=
Subject key identifier:   BD:CB:AB:7B:32:DD:A2:F8:59:10:9F:F9:FF:F3:4E:4D:9C:59:5F:45
Certificate issuer:       /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial:       019B7B35C7E10471E2727959E2964B73AD5E
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/vcurezLdovhZEJ_5__NOTZxZX0U.roa
Signing time:             Thu 01 Jan 2026 20:18:00 +0000
ROA not before:           Thu 01 Jan 2026 20:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21495
IP address blocks:        195.242.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:c7:e1:04:71:e2:72:79:59:e2:96:4b:73:ad:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
        Validity
            Not Before: Jan  1 20:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bdcbab7b32dda2f859109ff9fff34e4d9c595f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:42:48:86:9e:03:ff:a7:13:2b:c1:72:ed:
                    bb:67:96:1f:ca:f6:38:e2:6d:33:5e:2c:10:45:69:
                    a1:eb:7e:14:d4:f8:df:42:01:35:eb:93:ec:2b:04:
                    d3:68:22:5d:da:69:5e:8b:c9:27:34:26:76:0a:f6:
                    ba:41:72:b8:65:60:93:79:51:5a:7d:66:bc:fb:e0:
                    38:63:e7:17:86:b8:f3:b8:84:1f:cd:e0:74:46:e6:
                    e1:60:32:23:3d:ec:29:0c:cb:ad:47:5c:4d:04:39:
                    0b:0b:48:04:ca:3f:7a:ea:52:82:3d:9b:70:aa:7c:
                    25:c1:72:81:13:b1:b2:d3:ca:20:61:a2:7f:c6:0d:
                    6e:3d:65:02:b9:b7:ab:34:33:0f:b1:01:62:4c:bf:
                    cc:86:5f:b7:50:d7:31:b7:26:c7:b5:7a:db:32:f3:
                    37:7b:f2:05:94:f8:2f:d1:68:35:90:d7:68:88:f3:
                    f7:ef:b9:b1:93:8b:0e:05:b4:ce:81:ed:d3:db:a6:
                    52:8b:6d:e3:cc:df:de:8f:54:96:cb:f8:08:53:66:
                    0a:1b:9d:0b:dd:57:ba:3c:04:d2:dd:56:86:14:c8:
                    2e:47:20:69:9d:51:c4:e4:38:3d:75:df:4c:30:66:
                    5b:05:ed:7a:dd:74:9b:39:eb:10:7b:48:e4:dc:8b:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CB:AB:7B:32:DD:A2:F8:59:10:9F:F9:FF:F3:4E:4D:9C:59:5F:45
            X509v3 Authority Key Identifier:
                keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/vcurezLdovhZEJ_5__NOTZxZX0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.242.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:be:de:b0:c0:93:cb:9c:1a:71:6f:76:3f:0d:fb:e5:d6:
         07:38:f1:72:dc:3f:2a:c1:48:96:c0:77:3b:01:2d:0d:69:61:
         87:75:8d:83:84:77:85:6c:fb:1c:84:f5:05:c4:5a:38:47:da:
         54:1a:cb:34:00:eb:62:3b:dd:16:6a:ea:b9:d6:5e:55:33:03:
         e2:93:c4:23:2c:58:8a:7a:77:6f:f4:18:40:23:3e:40:fe:fb:
         ac:5a:fc:3f:50:80:17:71:c8:38:32:c5:2a:43:ad:81:67:08:
         27:bf:6b:e2:12:c1:bb:d3:13:ce:76:d2:1c:27:62:85:4d:e3:
         01:d6:b1:1f:74:0d:65:9b:bd:e8:69:a4:07:94:e5:d5:b1:14:
         b3:ed:6a:60:2f:6c:af:41:24:f7:99:de:f5:42:d7:a0:9b:9f:
         fb:1b:c0:94:ae:c7:cd:ec:ff:13:c0:de:03:7a:24:e7:44:c0:
         f9:cf:76:dc:44:79:78:c6:d5:79:09:a9:fd:00:15:5a:df:8b:
         81:ca:3a:25:33:f5:31:4c:62:64:5a:81:fd:f4:6d:51:12:91:
         72:06:27:8a:d5:1e:90:ec:b6:9f:6e:2b:ab:fb:44:c2:5a:8c:
         9a:13:ab:6d:62:c6:65:3c:1f:99:51:77:df:6c:c3:70:c7:50:
         76:ae:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:55:02 2026 by rpki-client