This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/VLzwNJkeBJU6voipR2ycpH_SyW0.roa
File:                     VLzwNJkeBJU6voipR2ycpH_SyW0.roa (raw, json)
Hash identifier:          WYZWxhBI2BwoiqzCW6Bmxom122HZzf1lwYvT1+rEwEw=
Subject key identifier:   54:BC:F0:34:99:1E:04:95:3A:BE:88:A9:47:6C:9C:A4:7F:D2:C9:6D
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       019B7DCA4C6CC3F3ECF59F255A76C274F4FD
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/VLzwNJkeBJU6voipR2ycpH_SyW0.roa
Signing time:             Fri 02 Jan 2026 08:19:28 +0000
ROA not before:           Fri 02 Jan 2026 08:19:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60545
IP address blocks:        176.10.105.0/24 maxlen: 24
                          185.195.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:4c:6c:c3:f3:ec:f5:9f:25:5a:76:c2:74:f4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Jan  2 08:19:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54bcf034991e04953abe88a9476c9ca47fd2c96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:91:19:e2:90:7f:89:93:87:56:01:03:7e:
                    d4:af:ce:eb:46:54:db:fe:ea:1e:d6:e4:ab:e7:f8:
                    e3:64:95:59:99:58:81:fe:49:3b:8f:15:b3:6d:3e:
                    af:b3:bb:6a:16:7c:af:c4:90:59:8b:65:d1:dc:7a:
                    97:9d:51:16:2e:a6:ae:df:0c:68:21:e3:e4:1a:f8:
                    5d:74:fb:da:4a:85:3e:62:72:af:51:2e:0c:12:c4:
                    91:ab:90:9e:f8:50:40:08:8f:9b:ac:c1:02:d0:55:
                    f7:43:50:f4:5b:e2:1e:22:be:1c:c5:64:bf:76:65:
                    ef:03:5e:9e:74:72:b6:f2:64:ef:2c:97:08:6a:e8:
                    8f:6d:fc:ef:36:30:4d:52:ae:86:3f:f9:3e:f8:74:
                    64:98:c1:a8:c5:fe:4f:d8:36:1a:10:69:2c:36:04:
                    47:cb:ff:6d:bc:8c:5d:6c:b3:bf:c9:23:c8:c5:a8:
                    f2:1b:c0:fc:84:8f:6c:06:72:1c:2e:15:b4:d4:8c:
                    ad:b6:be:13:ab:af:cc:43:61:e8:cc:8c:aa:42:c7:
                    33:0f:95:dd:66:90:5d:ff:dc:05:a5:bc:95:41:55:
                    01:83:3e:d2:96:fd:8f:82:33:69:e8:e9:d3:bc:58:
                    6f:fd:fd:97:6e:cf:0d:a9:d1:fd:74:97:86:e3:1f:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BC:F0:34:99:1E:04:95:3A:BE:88:A9:47:6C:9C:A4:7F:D2:C9:6D
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/VLzwNJkeBJU6voipR2ycpH_SyW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.10.105.0/24
                  185.195.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:02:d5:7c:99:83:e1:ed:63:52:db:00:0f:9e:97:aa:56:14:
         2d:01:d6:10:bf:40:8a:f4:ec:8a:9a:fc:70:3c:42:5d:bd:66:
         81:61:18:e1:01:cf:94:2d:b9:d2:15:99:48:f8:15:c7:e7:0d:
         fc:d2:88:f4:ef:09:3c:5e:5d:43:41:00:76:02:73:64:66:8c:
         03:fe:65:78:81:3c:80:10:84:1f:de:25:3a:fd:95:e4:57:97:
         ff:9f:e8:69:a8:8f:fa:3c:82:50:3a:a5:fd:55:2a:5f:12:26:
         76:13:0f:9c:83:72:3c:cf:39:b6:00:0b:71:3e:13:45:6f:d4:
         8c:f7:cb:85:44:ef:fb:c7:9a:3c:ba:db:86:b2:ab:f7:9b:b4:
         31:5c:4d:32:96:a1:de:7f:6d:da:0a:60:50:26:a3:2d:6e:43:
         58:dd:35:3c:6d:fc:46:a5:79:86:59:b3:e8:83:c7:b7:4c:94:
         81:98:56:55:32:17:95:88:bd:46:15:96:c8:25:a8:17:fd:4a:
         b1:c1:6e:b9:cf:e5:59:09:24:0a:71:a2:e5:7f:cf:42:d0:4c:
         a4:2f:f8:b6:5b:2b:ce:74:cf:d3:7c:64:2c:a5:68:b7:00:7b:
         51:8e:d1:74:4f:51:3c:38:2d:4b:3b:d9:72:af:69:07:8a:44:
         fb:74:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:55:21 2026 by rpki-client