This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/VFR_MohEdR-AKxxl4vGLPNK27CY.roa
File:                     VFR_MohEdR-AKxxl4vGLPNK27CY.roa (raw, json)
Hash identifier:          JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=
Subject key identifier:   54:54:7F:32:88:44:75:1F:80:2B:1C:65:E2:F1:8B:3C:D2:B6:EC:26
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       019B77C77A60FB9BE584438CBC2265DD0CB6
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/VFR_MohEdR-AKxxl4vGLPNK27CY.roa
Signing time:             Thu 01 Jan 2026 04:18:40 +0000
ROA not before:           Thu 01 Jan 2026 04:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206902
IP address blocks:        84.38.140.0/24 maxlen: 24
                          87.99.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:7a:60:fb:9b:e5:84:43:8c:bc:22:65:dd:0c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Jan  1 04:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54547f328844751f802b1c65e2f18b3cd2b6ec26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:88:43:f8:5c:3a:d9:25:63:06:6b:04:34:
                    b7:66:5e:d2:a5:43:2a:fa:63:6e:a0:c3:33:2a:ce:
                    04:21:0f:c7:fc:ed:41:b6:e3:cd:79:90:67:2c:16:
                    8c:ab:e1:39:f4:24:9f:33:c5:1e:23:31:3b:16:69:
                    16:a0:27:ca:32:9a:9c:3b:77:85:c7:d0:f7:31:bd:
                    65:e4:de:4e:59:57:95:07:9c:c3:d5:dd:4a:6e:f7:
                    fc:a7:c0:e1:eb:5f:a1:c9:21:49:31:6f:c4:52:bf:
                    58:50:b7:01:be:c8:e4:15:5a:ff:1d:2d:7a:90:f7:
                    5c:0c:0e:32:ae:6a:1a:5b:05:2e:8c:d2:5b:06:4c:
                    be:7a:0a:6d:6f:1e:54:b6:61:31:6b:cf:50:2e:2c:
                    a8:0d:0b:59:19:dd:19:a9:07:2a:c8:9d:20:36:b9:
                    20:fc:c8:7c:db:b7:62:8d:e3:0c:58:8e:ad:56:90:
                    04:8d:a8:2d:5a:1c:bb:3b:97:a7:60:25:ba:99:c1:
                    de:5e:77:91:82:da:f8:ce:4b:04:35:6a:f1:5a:f3:
                    fb:fa:b3:20:b6:4a:07:87:b6:b0:54:d8:dc:a3:c6:
                    9e:11:0d:ec:38:a6:80:e5:70:4d:ed:2a:a7:7c:b8:
                    7f:ac:6b:c7:a2:20:d3:89:5a:0e:3e:26:99:fa:80:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:54:7F:32:88:44:75:1F:80:2B:1C:65:E2:F1:8B:3C:D2:B6:EC:26
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/VFR_MohEdR-AKxxl4vGLPNK27CY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.38.140.0/24
                  87.99.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:cd:4d:e3:64:70:83:b5:e1:c5:d4:23:d1:71:1c:73:5c:e6:
         a3:d9:48:c4:43:49:e4:3c:9d:35:97:db:dc:1f:ca:08:76:84:
         2b:1c:79:57:95:e1:27:12:b3:90:b4:66:90:7f:fe:ff:6c:85:
         71:db:89:c5:d9:0f:d4:2f:82:6b:d1:f5:e2:4c:3b:5d:e3:56:
         67:60:7f:a2:11:e1:7e:0a:34:fc:17:67:77:4b:b6:e2:d3:f8:
         3b:d4:39:93:af:e9:11:07:42:7c:42:0e:32:79:20:d3:d1:3b:
         28:88:18:a9:5f:6c:63:a3:e9:53:06:a9:35:2f:5a:b7:7a:5a:
         85:15:d8:e3:7f:7b:5b:62:2e:dd:b8:41:96:c1:5b:3b:2f:62:
         91:10:0e:5b:78:77:3e:44:62:81:13:dd:74:35:2c:dc:d0:66:
         ab:f9:1f:05:16:f8:b7:e1:c9:fb:84:f7:9b:6f:3f:c4:42:9f:
         73:76:bf:5e:27:07:ed:ba:e9:13:53:bb:4d:6f:3f:cb:a2:d6:
         c7:b7:1d:41:0a:00:b1:0d:78:4f:f2:37:b1:e0:c1:05:60:f3:
         f2:18:f0:aa:aa:c7:bb:e9:66:d8:86:6e:00:27:e6:90:ab:9b:
         38:d3:f7:1d:18:cd:c1:2a:17:ec:9c:9c:02:20:45:49:1c:d6:
         ab:3d:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:45:06 2026 by rpki-client