This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/vrV8KB95q2_fxuLiil-ALWVgbaA.roa
File:                     vrV8KB95q2_fxuLiil-ALWVgbaA.roa (raw, json)
Hash identifier:          v1waj9FATfrwz5lLbL9USP8KlqV0JVnfBS+y9CnLHbA=
Subject key identifier:   BE:B5:7C:28:1F:79:AB:6F:DF:C6:E2:E2:8A:5F:80:2D:65:60:6D:A0
Certificate issuer:       /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial:       019B7758C893CB7E57D4A3DB85780500666C
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/vrV8KB95q2_fxuLiil-ALWVgbaA.roa
Signing time:             Thu 01 Jan 2026 02:17:45 +0000
ROA not before:           Thu 01 Jan 2026 02:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        176.105.236.0/24 maxlen: 24
                          176.105.237.0/24 maxlen: 24
                          176.105.238.0/24 maxlen: 24
                          176.105.239.0/24 maxlen: 24
                          193.219.112.0/24 maxlen: 24
                          195.7.8.0/24 maxlen: 24
                          195.7.9.0/24 maxlen: 24
                          195.7.10.0/24 maxlen: 24
                          195.7.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:c8:93:cb:7e:57:d4:a3:db:85:78:05:00:66:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
        Validity
            Not Before: Jan  1 02:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=beb57c281f79ab6fdfc6e2e28a5f802d65606da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:4b:e8:89:c1:34:c7:9b:84:b5:d5:32:b6:98:
                    6b:4d:4f:8a:a0:de:07:6c:c8:af:b6:02:05:e0:c2:
                    e0:4f:ee:85:24:ff:5a:18:27:fb:99:02:15:b2:1b:
                    58:9d:ec:34:fc:f5:4a:45:b4:f0:ec:99:b3:4c:1c:
                    02:7e:5d:49:90:22:4c:07:bc:8e:d8:bf:fa:84:c2:
                    81:71:4c:b3:39:68:71:8b:94:3a:78:00:8d:83:a6:
                    db:3f:23:bb:0b:c6:89:f6:d7:00:04:12:f5:08:a9:
                    f8:1c:a2:c4:d2:46:90:24:19:6f:ef:2e:6c:49:11:
                    ef:5e:2a:1a:2c:2b:05:39:33:d0:d8:5f:1c:64:ab:
                    e4:c2:85:17:d6:e3:10:4f:6d:3d:9b:10:da:d9:ba:
                    35:87:09:43:d3:6d:1e:3a:f2:ed:a8:4d:37:e8:aa:
                    13:2d:c7:27:a6:b5:5c:86:e7:78:94:aa:7f:62:89:
                    e8:9c:db:d7:3d:ea:05:12:e6:bf:c1:32:0b:e4:1c:
                    71:b1:0b:79:2a:01:e5:da:3f:7f:ba:96:25:3c:11:
                    20:25:a3:71:5e:e8:d9:61:47:47:36:fc:e6:37:ef:
                    3c:fc:36:2b:11:18:4e:64:c2:49:da:57:b2:22:67:
                    80:31:0d:47:d3:66:ea:89:06:10:47:a0:4f:50:79:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B5:7C:28:1F:79:AB:6F:DF:C6:E2:E2:8A:5F:80:2D:65:60:6D:A0
            X509v3 Authority Key Identifier:
                keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/vrV8KB95q2_fxuLiil-ALWVgbaA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.236.0/22
                  193.219.112.0/24
                  195.7.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:a7:4f:01:bd:3c:fb:a2:78:88:d7:cc:78:39:f5:65:22:b7:
         72:36:c7:c7:2b:13:75:22:78:3a:63:bd:ca:04:de:e9:d9:2b:
         cf:1d:60:1c:22:1c:c4:6c:06:50:b4:89:fb:25:79:af:17:23:
         1e:4d:eb:54:25:1c:98:53:9f:41:61:09:0a:c6:3b:5c:f1:22:
         d2:c6:11:83:8b:b8:bc:2d:14:b2:a2:98:68:28:9c:6e:f5:37:
         8d:0f:0b:50:ad:eb:6a:83:21:a6:af:9d:92:4e:24:b2:9d:d3:
         d0:78:22:7a:38:29:d2:af:b2:c9:5e:f5:05:18:4c:91:33:fc:
         45:54:f8:ac:c9:a0:f6:28:cc:9b:04:30:7f:b1:12:82:16:3f:
         c2:e5:c6:6b:9a:22:71:a1:c5:d5:7a:5a:30:a9:f7:30:d6:5b:
         da:bd:a9:11:fb:4d:23:1d:74:35:3a:73:d0:b6:c3:d3:14:11:
         c2:35:93:3f:85:b1:53:be:d8:29:ce:93:6c:a5:71:2b:cd:d1:
         60:e9:5e:cd:e7:f8:e2:e1:24:42:4f:d0:3b:32:7a:ab:d9:86:
         89:67:e4:66:10:3d:a0:62:38:93:52:33:7e:80:3d:b4:6b:46:
         22:f1:67:10:60:3b:c9:36:0c:50:9b:73:83:12:38:e1:f2:9c:
         6c:76:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:19:50 2026 by rpki-client