This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/VHn5fbgK9TT163CBWJTv5V844m4.roa
File:                     VHn5fbgK9TT163CBWJTv5V844m4.roa (raw, json)
Hash identifier:          TPUdDfw5uVSRkDAl0XMbSNV4hlR+3H658TMXtO+hKqQ=
Subject key identifier:   54:79:F9:7D:B8:0A:F5:34:F5:EB:70:81:58:94:EF:E5:5F:38:E2:6E
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019B999541912122F338D3F98CE200497E4C
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/VHn5fbgK9TT163CBWJTv5V844m4.roa
Signing time:             Wed 07 Jan 2026 17:50:54 +0000
ROA not before:           Wed 07 Jan 2026 17:50:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49505
IP address blocks:        95.181.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:99:95:41:91:21:22:f3:38:d3:f9:8c:e2:00:49:7e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Jan  7 17:50:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5479f97db80af534f5eb70815894efe55f38e26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:da:14:f0:bc:46:ab:b1:f5:e7:6b:de:3a:
                    c0:89:7f:e2:c8:1b:76:75:80:ca:6f:3f:e8:10:1b:
                    a7:49:56:c3:df:06:97:9c:8f:c1:7d:7b:08:76:b0:
                    06:dd:f8:5b:2f:f2:35:04:58:99:ba:68:cb:e5:2e:
                    ed:d9:5f:c4:17:9d:7b:ba:21:e2:02:28:6c:0c:ce:
                    7a:fb:2c:7c:92:f9:dc:aa:3b:0a:2e:9c:51:c8:92:
                    5b:37:93:fb:92:54:9a:77:30:52:17:32:ed:ac:47:
                    11:23:3c:5a:11:73:40:1c:71:58:ea:c1:99:5e:e2:
                    64:2b:c2:d3:83:cf:62:8d:da:de:5d:65:52:d0:33:
                    a8:4c:4f:66:a4:49:d1:2a:f7:1f:e5:52:c8:0b:4c:
                    6a:07:60:b6:a3:73:65:e6:56:4b:73:c1:89:b2:75:
                    96:f3:3b:24:fe:68:01:e9:4c:4e:98:ab:6e:89:d3:
                    a5:44:90:7d:50:fb:ef:d6:57:ab:36:32:9a:e1:0b:
                    ce:fa:07:2c:be:a1:e1:7e:a8:9f:85:4e:06:9d:e8:
                    77:9f:45:61:3d:a6:35:53:4a:c3:0b:8e:78:5b:4b:
                    cb:9d:8f:d0:a5:ad:06:74:5a:f0:6a:3c:d7:93:ec:
                    c4:45:25:1b:4e:d4:5a:9c:4f:f0:a8:a7:37:99:18:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:79:F9:7D:B8:0A:F5:34:F5:EB:70:81:58:94:EF:E5:5F:38:E2:6E
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/VHn5fbgK9TT163CBWJTv5V844m4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.181.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:72:9b:09:d2:e3:27:85:f7:09:09:ac:f7:e7:23:9a:33:
         73:91:77:c9:f5:48:66:03:94:76:f4:bb:69:21:75:bc:98:c5:
         92:4b:e0:43:61:33:91:5d:4e:92:72:ef:e1:85:d6:29:f9:2b:
         a9:71:b9:e6:f1:56:8f:8a:e8:f9:a5:f6:b4:1a:0c:4d:3d:2e:
         22:12:5b:aa:55:ca:e1:33:18:76:49:87:e7:99:db:f7:63:80:
         40:17:8b:73:af:51:fd:9d:52:cd:54:72:e7:af:bc:ec:c6:b6:
         1e:6f:3f:61:0d:c3:28:70:ce:91:19:a2:cd:3f:1a:5c:cd:18:
         5c:1e:aa:fc:f2:5d:18:e7:eb:b4:fc:aa:95:1d:79:06:ea:37:
         ff:a8:48:8e:4f:12:d9:94:49:df:d2:b7:2d:6b:31:56:38:db:
         8e:97:02:91:b3:7b:98:fd:86:f1:f9:2a:37:3a:6a:0f:86:68:
         8e:53:5b:80:05:ce:e6:20:81:c5:7a:2f:a9:42:fa:c7:af:69:
         b4:bf:3f:a1:60:ce:e5:24:f6:cb:3a:50:c2:30:52:23:3d:e6:
         3e:55:c8:f8:85:0f:a4:a5:0d:11:9a:5f:b3:57:be:5c:62:8d:
         22:4e:dc:ce:27:82:75:e2:f2:41:d4:55:76:b1:fc:a8:eb:33:
         70:d4:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:16 2026 by rpki-client