This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/VOsklXRPi5AsfytJ7h-_DeqIeyg.roa
File:                     VOsklXRPi5AsfytJ7h-_DeqIeyg.roa (raw, json)
Hash identifier:          tKatxYKbmsaEuCNsIxKCmZyCQCE1Y1J4bjW+cSVHx5Q=
Subject key identifier:   54:EB:24:95:74:4F:8B:90:2C:7F:2B:49:EE:1F:BF:0D:EA:88:7B:28
Certificate issuer:       /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial:       019B791053E4CE57E1FE939687C4A366C130
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/VOsklXRPi5AsfytJ7h-_DeqIeyg.roa
Signing time:             Thu 01 Jan 2026 10:17:51 +0000
ROA not before:           Thu 01 Jan 2026 10:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34625
IP address blocks:        37.75.232.0/24 maxlen: 24
                          37.75.233.0/24 maxlen: 24
                          37.75.236.0/24 maxlen: 24
                          195.242.236.0/24 maxlen: 24
                          212.119.56.0/24 maxlen: 24
                          212.119.57.0/24 maxlen: 24
                          212.119.58.0/24 maxlen: 24
                          212.119.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:53:e4:ce:57:e1:fe:93:96:87:c4:a3:66:c1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
        Validity
            Not Before: Jan  1 10:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54eb2495744f8b902c7f2b49ee1fbf0dea887b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:65:c4:2d:33:f3:15:43:81:33:f6:a2:a8:
                    7a:ef:3b:1a:a3:99:8d:12:d1:39:ea:12:98:ef:54:
                    be:df:bb:eb:0b:0f:a3:bf:2e:71:a9:db:9f:58:e0:
                    7e:77:6c:c5:88:2c:4b:a4:cf:12:a4:82:16:38:f4:
                    3b:18:f8:e1:90:b6:75:e5:90:00:66:ed:a6:ab:68:
                    f8:cf:c7:cf:57:47:11:ae:39:2f:31:5d:ad:df:26:
                    27:c4:d8:19:0c:70:f0:11:ac:9d:91:10:7d:72:60:
                    c0:bc:14:c2:40:1b:fe:26:59:98:f9:23:2f:27:e8:
                    ab:64:65:59:69:8b:eb:56:da:2b:e0:39:d7:e0:f4:
                    05:0f:90:67:8c:a4:2c:9f:d3:35:af:f0:3f:cd:4b:
                    8a:4d:b3:85:fb:51:0a:04:c9:65:a1:88:23:d5:ce:
                    66:e2:9c:e2:51:99:4a:61:49:73:01:75:59:63:cf:
                    24:22:44:0f:92:ea:3f:b2:1a:f9:d1:f6:8f:4a:f7:
                    4e:3a:33:d3:61:bb:00:36:f0:dc:72:68:ec:fe:b8:
                    99:42:fc:37:0b:0b:6b:df:b0:a2:16:4f:05:3e:17:
                    92:3f:a1:25:c7:25:96:b2:8d:f5:36:34:a4:85:1a:
                    9f:dd:38:5d:a1:ed:0f:ae:ed:25:bf:cd:2d:3f:2a:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EB:24:95:74:4F:8B:90:2C:7F:2B:49:EE:1F:BF:0D:EA:88:7B:28
            X509v3 Authority Key Identifier:
                keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/VOsklXRPi5AsfytJ7h-_DeqIeyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.75.232.0/23
                  37.75.236.0/24
                  195.242.236.0/24
                  212.119.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:82:fb:9d:27:5f:d4:63:13:e0:2d:b1:17:d1:d3:35:71:d9:
         78:e4:73:11:53:82:8a:df:f3:4e:f7:d5:16:c1:cc:b7:5e:40:
         04:04:95:30:a1:46:f2:f3:56:d9:a9:46:34:00:ca:49:aa:f1:
         11:bc:25:a9:af:7e:03:26:63:94:62:19:4a:51:79:33:a5:90:
         26:dd:51:2a:51:17:1e:8e:57:9b:03:94:1d:78:f5:36:1c:75:
         a6:a9:15:b8:8e:5d:8b:f3:10:fa:68:97:d8:e5:9f:b2:d7:50:
         20:f1:c5:bd:0a:68:51:39:d1:6a:3c:14:5c:c4:71:2f:dc:55:
         de:ff:25:93:15:75:e8:2c:6b:ef:ba:18:ec:13:6d:c8:13:6d:
         5b:0d:54:cd:1f:22:83:4b:63:10:f2:02:9c:54:a6:1f:5f:39:
         35:f4:d2:04:f9:e7:c1:3f:0c:d2:c1:83:20:13:6e:91:1a:37:
         45:1e:00:79:14:8c:c3:f5:6f:ff:67:4a:74:d9:8b:f6:10:47:
         e1:93:bf:79:f8:b1:5d:14:77:cd:b5:c0:83:0f:4b:78:52:fd:
         83:dd:bd:42:1a:fe:74:aa:89:12:3e:fe:c2:9d:cd:ef:01:21:
         88:b8:60:c9:22:f4:49:a2:19:b6:fa:96:70:a7:82:81:05:ea:
         8d:b5:bf:a4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZt5EFPkzlfh/pOWh8SjZsEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj
NjYwODkwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGViMjQ5NTc0NGY4YjkwMmM3ZjJiNDllZTFmYmYwZGVhODg3YjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0VlxC0z8xVDgTP2oqh67zsao5mN
EtE56hKY71S+37vrCw+jvy5xqdufWOB+d2zFiCxLpM8SpIIWOPQ7GPjhkLZ15ZAA
Zu2mq2j4z8fPV0cRrjkvMV2t3yYnxNgZDHDwEaydkRB9cmDAvBTCQBv+JlmY+SMv
J+irZGVZaYvrVtor4DnX4PQFD5BnjKQsn9M1r/A/zUuKTbOF+1EKBMlloYgj1c5m
4pziUZlKYUlzAXVZY88kIkQPkuo/shr50faPSvdOOjPTYbsANvDccmjs/riZQvw3
Cwtr37CiFk8FPheSP6ElxyWWso31NjSkhRqf3Thdoe0Pru0lv80tPyqlCwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFTrJJV0T4uQLH8rSe4fvw3qiHsoMB8GA1UdIwQY
MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt
NTRhMjVlMmNkYWE5LzEvVk9za2xYUlBpNUFzZnl0SjdoLV9EZXFJZXlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5
LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBJUvoAwQA
JUvsAwQAw/LsAwQC1Hc4MA0GCSqGSIb3DQEBCwUAA4IBAQBsgvudJ1/UYxPgLbEX
0dM1cdl45HMRU4KK3/NO99UWwcy3XkAEBJUwoUby81bZqUY0AMpJqvERvCWpr34D
JmOUYhlKUXkzpZAm3VEqURcejlebA5QdePU2HHWmqRW4jl2L8xD6aJfY5Z+y11Ag
8cW9CmhROdFqPBRcxHEv3FXe/yWTFXXoLGvvuhjsE23IE21bDVTNHyKDS2MQ8gKc
VKYfXzk19NIE+efBPwzSwYMgE26RGjdFHgB5FIzD9W//Z0p02Yv2EEfhk795+LFd
FHfNtcCDD0t4Uv2D3b1CGv50qokSPv7Cnc3vASGIuGDJIvRJohm2+pZwp4KBBeqN
tb+k
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:45 2026 by rpki-client