This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/VcGOwSBLa8MeclenBwYCnJTkc6Q.roa
File:                     VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (raw, json)
Hash identifier:          ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=
Subject key identifier:   55:C1:8E:C1:20:4B:6B:C3:1E:72:57:A7:07:06:02:9C:94:E4:73:A4
Certificate issuer:       /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial:       019B7F1586E11F371AA3CA83AD5562FB90F9
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/VcGOwSBLa8MeclenBwYCnJTkc6Q.roa
Signing time:             Fri 02 Jan 2026 14:21:15 +0000
ROA not before:           Fri 02 Jan 2026 14:21:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203663
IP address blocks:        185.12.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:86:e1:1f:37:1a:a3:ca:83:ad:55:62:fb:90:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
        Validity
            Not Before: Jan  2 14:21:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55c18ec1204b6bc31e7257a70706029c94e473a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:26:72:16:ef:42:e1:61:ea:11:5e:1f:55:cb:
                    3f:7d:08:e9:f9:51:ec:f4:0e:ac:de:d2:6b:7e:e2:
                    e3:66:d4:69:82:ee:21:bd:c9:bb:4e:64:57:cc:e8:
                    92:c3:94:de:98:33:55:5b:b9:26:90:59:c0:6e:36:
                    71:d5:77:e4:51:1d:a8:4c:60:55:bf:6a:8e:e9:20:
                    a9:a2:46:12:71:84:68:29:76:cd:20:57:03:ba:3b:
                    33:f9:f9:4c:d1:54:cb:c2:ad:45:28:a9:2c:74:eb:
                    b0:78:b8:22:b3:c8:91:57:9e:4b:73:06:e0:d2:9b:
                    90:5d:dd:ca:55:ee:88:e3:22:c1:b7:74:9e:3d:58:
                    d2:24:06:8d:89:1f:bc:fb:3b:69:3b:9c:49:71:ce:
                    be:19:36:36:d6:b5:85:77:d3:e2:d4:48:ec:b2:1c:
                    69:c6:bd:40:db:86:9f:6d:7d:e8:6c:d0:80:b1:bb:
                    ae:56:e9:9d:5f:93:7c:8d:2f:f3:20:0f:c7:f0:24:
                    d2:8d:8a:af:22:22:8a:5c:31:f8:49:1a:33:49:23:
                    cf:09:6c:b2:29:15:6e:6a:2e:4f:40:3d:cc:93:4f:
                    3e:6c:f6:fe:f6:d9:12:3f:78:46:2a:4b:b7:c2:00:
                    84:2e:4c:41:05:7b:1a:9b:d7:d3:7d:04:5a:4e:8b:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C1:8E:C1:20:4B:6B:C3:1E:72:57:A7:07:06:02:9C:94:E4:73:A4
            X509v3 Authority Key Identifier:
                keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/VcGOwSBLa8MeclenBwYCnJTkc6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.12.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:3b:ab:dd:07:f3:ba:43:cc:18:83:c5:c0:a1:d8:a4:c0:27:
         59:e6:79:d6:83:bb:f2:20:cb:cd:68:5e:81:43:d0:ed:cb:c5:
         ae:08:73:97:d1:3a:b0:b7:6d:72:d8:e2:0d:c3:fd:8d:69:cb:
         c5:52:0f:59:50:16:80:0c:bc:e8:81:17:21:0a:e3:1e:6c:e5:
         44:60:32:6d:c2:b3:77:fc:e2:f1:b7:18:f7:a0:2c:a4:9a:a0:
         ff:1b:74:cb:11:0b:1e:c0:24:c5:d7:30:08:01:4b:cc:dc:3a:
         f5:34:a7:d6:6a:88:07:a5:87:83:b0:25:8b:02:32:db:fe:63:
         f0:b1:9b:ac:9c:5c:9f:df:77:eb:cf:c4:db:3c:c8:9a:d2:e8:
         08:b9:d7:4f:54:74:7c:12:1b:01:13:bc:da:3d:83:65:de:ac:
         a6:8e:7f:70:da:47:15:c3:16:c3:5d:ba:63:04:c8:45:65:c7:
         41:1c:c1:61:19:ab:91:3b:ad:1e:62:e5:95:6e:5a:5b:7d:68:
         b8:de:f8:e7:55:38:83:52:16:05:0d:ac:c1:92:05:f3:be:2a:
         5e:54:1b:06:b8:b7:fc:9d:de:3e:b8:0c:14:63:8a:c5:99:ef:
         7b:84:40:3d:79:99:9a:7a:ba:ad:52:87:9a:5e:f1:5d:ce:a0:
         05:a3:cf:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FYbhHzcao8qDrVVi+5D5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw
MDhhZWMwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWMxOGVjMTIwNGI2YmMzMWU3MjU3YTcwNzA2MDI5Yzk0ZTQ3M2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iZyFu9C4WHqEV4fVcs/fQjp+VHs
9A6s3tJrfuLjZtRpgu4hvcm7TmRXzOiSw5TemDNVW7kmkFnAbjZx1XfkUR2oTGBV
v2qO6SCpokYScYRoKXbNIFcDujsz+flM0VTLwq1FKKksdOuweLgis8iRV55Lcwbg
0puQXd3KVe6I4yLBt3SePVjSJAaNiR+8+ztpO5xJcc6+GTY21rWFd9Pi1Ejsshxp
xr1A24afbX3obNCAsbuuVumdX5N8jS/zIA/H8CTSjYqvIiKKXDH4SRozSSPPCWyy
KRVuai5PQD3Mk08+bPb+9tkSP3hGKku3wgCELkxBBXsam9fTfQRaTovo9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXBjsEgS2vDHnJXpwcGApyU5HOkMB8GA1UdIwQY
MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt
YjA3ZDg0MTZhZTRhLzEvVmNHT3dTQkxhOE1lY2xlbkJ3WUNuSlRrYzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh
LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQzXMA0G
CSqGSIb3DQEBCwUAA4IBAQAXO6vdB/O6Q8wYg8XAodikwCdZ5nnWg7vyIMvNaF6B
Q9Dty8WuCHOX0Tqwt21y2OINw/2NacvFUg9ZUBaADLzogRchCuMebOVEYDJtwrN3
/OLxtxj3oCykmqD/G3TLEQsewCTF1zAIAUvM3Dr1NKfWaogHpYeDsCWLAjLb/mPw
sZusnFyf33frz8TbPMia0ugIuddPVHR8EhsBE7zaPYNl3qymjn9w2kcVwxbDXbpj
BMhFZcdBHMFhGauRO60eYuWVblpbfWi43vjnVTiDUhYFDazBkgXzvipeVBsGuLf8
nd4+uAwUY4rFme97hEA9eZmaerqtUoeaXvFdzqAFo8/l
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:57 2026 by rpki-client