This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/rVHx6Pke-1-J_coPbRofT3X1WBE.roa
File:                     rVHx6Pke-1-J_coPbRofT3X1WBE.roa (raw, json)
Hash identifier:          cs7tRyRz+7+LNYFhgQ605831LjS0egooa3rWx2g/DuI=
Subject key identifier:   AD:51:F1:E8:F9:1E:FB:5F:89:FD:CA:0F:6D:1A:1F:4F:75:F5:58:11
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019BE84ABD256711F84897E35DF1A2AD970B
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/rVHx6Pke-1-J_coPbRofT3X1WBE.roa
Signing time:             Fri 23 Jan 2026 00:39:30 +0000
ROA not before:           Fri 23 Jan 2026 00:39:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210644
IP address blocks:        95.181.160.0/24 maxlen: 24
                          95.181.162.0/24 maxlen: 24
                          95.181.167.0/24 maxlen: 24
                          95.181.174.0/24 maxlen: 24
                          95.181.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e8:4a:bd:25:67:11:f8:48:97:e3:5d:f1:a2:ad:97:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Jan 23 00:39:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad51f1e8f91efb5f89fdca0f6d1a1f4f75f55811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:f2:76:97:a6:62:68:45:96:9e:c6:51:a9:
                    03:77:6b:87:e0:cf:41:b1:fd:6c:90:33:74:d8:aa:
                    a5:f1:9c:5c:dd:7b:38:8d:61:3a:68:bc:4a:04:e6:
                    a0:d3:43:3c:cc:2b:16:23:81:e3:15:3a:96:e9:ae:
                    de:11:f6:14:00:3d:bf:41:49:3c:d5:0d:3b:be:6e:
                    19:ca:8f:d1:bc:d6:6d:e3:27:de:ce:02:74:0a:e6:
                    4c:7c:98:7e:ff:0b:70:4a:38:b1:fa:0a:4d:5a:07:
                    ec:5a:92:e1:ca:7b:9d:ca:ba:11:d0:05:b0:58:f2:
                    85:21:6b:db:00:3d:8c:0d:2f:f8:92:03:cb:18:ba:
                    f1:5d:0b:4e:ef:18:0a:1c:23:87:0a:a3:b1:06:e1:
                    e0:20:6b:33:3a:4c:2e:2d:05:d5:aa:4c:ab:87:07:
                    db:fe:70:55:e8:16:3a:3d:8b:57:27:f3:4c:5d:de:
                    bd:3d:fc:d3:50:04:9a:7e:ce:68:59:9d:92:bc:1b:
                    95:51:05:02:bf:a0:d5:a0:c8:89:f2:93:b8:a8:e4:
                    f8:76:6b:75:43:52:51:d6:63:6e:dc:0e:7a:a1:49:
                    60:97:d4:0a:84:b5:da:9e:c0:3c:ea:03:d1:f1:db:
                    94:18:d4:5c:58:ec:8c:1e:4c:de:21:e2:ce:70:c5:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:51:F1:E8:F9:1E:FB:5F:89:FD:CA:0F:6D:1A:1F:4F:75:F5:58:11
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/rVHx6Pke-1-J_coPbRofT3X1WBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.181.160.0/24
                  95.181.162.0/24
                  95.181.167.0/24
                  95.181.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:e6:89:8a:ea:92:84:9e:30:4c:25:cc:8b:c8:10:98:0a:
         06:10:39:b2:97:de:b4:d8:28:9c:51:64:fe:00:d1:02:8c:fd:
         65:39:d8:4e:6e:b5:75:91:b8:96:71:57:df:34:44:0b:12:a7:
         5b:1f:d3:57:8a:4a:06:66:bd:36:70:92:47:7f:e0:c3:fd:79:
         f8:46:a9:e3:ff:07:58:b3:06:96:7c:ee:5a:76:ca:d2:04:d1:
         9f:59:22:bf:07:35:f3:3c:87:00:d1:e6:6c:73:92:1f:dd:de:
         b2:26:de:a6:77:26:fa:d6:fc:92:b2:b3:df:05:40:d5:48:15:
         39:1d:5e:84:ac:ba:b8:7d:38:98:aa:e1:e3:2d:e3:64:fd:94:
         a8:3d:d3:ee:23:60:3e:3e:2a:83:00:d5:d3:54:4d:b4:36:08:
         1e:b0:50:09:21:fc:79:4e:6d:30:59:86:ea:0b:1e:0a:bf:f1:
         31:4e:03:3e:41:3f:90:6a:b3:b2:05:a1:5b:b4:ae:dc:45:78:
         6e:72:92:8d:4b:63:1e:b1:d5:33:7e:c6:23:f6:8b:93:95:1b:
         00:fd:c2:20:b3:d6:dc:58:34:51:80:d8:7d:b0:ed:18:f2:27:
         50:f8:14:30:7f:9d:8a:22:1a:03:cb:09:89:3a:86:53:72:78:
         f0:0d:df:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:04 2026 by rpki-client