This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/vSzjn1fWy0z8fiUPAB5U1P2JVYU.roa
File:                     vSzjn1fWy0z8fiUPAB5U1P2JVYU.roa (raw, json)
Hash identifier:          IEVVYe5QqSxyyi6RoQfpdSJYqZGsQgTarsy0MHRuTso=
Subject key identifier:   BD:2C:E3:9F:57:D6:CB:4C:FC:7E:25:0F:00:1E:54:D4:FD:89:55:85
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       019B7E37E6C78B701A8FE6A7AC881170899A
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/vSzjn1fWy0z8fiUPAB5U1P2JVYU.roa
Signing time:             Fri 02 Jan 2026 10:19:11 +0000
ROA not before:           Fri 02 Jan 2026 10:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34117
IP address blocks:        195.46.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:e6:c7:8b:70:1a:8f:e6:a7:ac:88:11:70:89:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  2 10:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd2ce39f57d6cb4cfc7e250f001e54d4fd895585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:36:57:9c:47:75:a5:07:37:2b:b9:58:90:
                    6f:0b:cb:6d:c9:90:bb:12:30:a0:3c:76:c3:ec:f8:
                    90:b3:84:1f:af:57:06:4c:2f:e8:29:33:a9:f9:51:
                    3f:79:bc:bc:04:ae:34:5f:7e:89:11:c8:c0:d1:f3:
                    53:36:08:cd:91:99:3c:55:92:bc:9c:e4:cf:a5:1e:
                    94:f4:95:91:3d:13:a3:ac:6f:50:e6:88:f5:e9:72:
                    1e:37:c4:e9:77:2a:ea:70:af:7d:89:02:4a:aa:a5:
                    f3:9c:1f:21:12:9d:e6:53:8f:7b:df:d0:bb:8e:9f:
                    52:3b:c1:3e:40:61:39:8f:37:dd:ae:5b:a3:4b:cf:
                    c7:6f:89:52:f4:45:b8:09:91:85:3e:aa:de:0f:39:
                    67:81:d0:f0:0b:79:33:3c:6d:59:5a:86:7f:dc:44:
                    3b:db:36:bd:63:cb:9c:2d:a6:d2:8d:12:d5:ec:4b:
                    09:ab:a7:87:e0:4b:69:ee:79:94:26:9e:bc:86:bd:
                    ec:fe:4d:ed:0e:a2:43:eb:b6:be:e2:45:d3:d5:2c:
                    30:31:98:5b:ae:27:14:91:12:ef:b5:67:95:fe:39:
                    11:d3:85:1f:fe:6a:2a:72:58:eb:9c:fc:67:d7:f6:
                    ba:67:f7:7d:20:0d:f2:b0:d5:e3:94:4d:5a:bf:c9:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2C:E3:9F:57:D6:CB:4C:FC:7E:25:0F:00:1E:54:D4:FD:89:55:85
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/vSzjn1fWy0z8fiUPAB5U1P2JVYU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.46.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:4e:0d:5b:48:7a:a9:8b:0e:88:0c:17:3c:d5:6b:ce:a4:bc:
         3a:bd:1d:04:21:45:14:e4:88:89:c8:c8:5c:1b:b9:76:37:65:
         3a:55:21:d0:b0:90:f3:e8:6c:eb:90:0f:69:ca:66:50:92:9a:
         a4:2f:80:0d:e7:3a:b6:62:78:21:6f:2d:19:de:96:1e:65:01:
         1c:b1:fa:fe:1a:71:4f:72:d6:94:aa:b8:e2:63:e5:4e:6b:25:
         fa:11:83:72:19:12:6b:e3:fb:03:98:e0:21:9d:48:11:d7:09:
         32:b9:59:10:7f:d3:2b:84:1d:1e:0e:e6:7e:80:25:ce:a9:14:
         96:bb:65:44:27:db:08:45:b8:54:9d:66:f7:83:ee:f9:55:a2:
         be:fd:7f:01:55:22:42:45:74:4f:6a:05:23:1a:1d:f9:4f:82:
         41:01:9c:f2:2f:a8:c4:03:cf:e5:ed:04:c6:76:d0:7a:00:79:
         09:6d:f3:d5:58:ff:4e:e6:dd:06:f2:4a:af:af:3b:b3:8d:ba:
         ed:41:d0:be:f4:01:ab:f5:fb:06:00:cc:54:af:c7:6e:21:02:
         cb:ae:94:5e:6d:05:28:45:9d:fb:a9:e3:3d:e3:2c:55:a5:ed:
         1a:ee:a1:d0:fb:4b:4b:0f:7e:07:8c:0d:00:01:9f:2f:cb:0c:
         67:5e:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:41 2026 by rpki-client