This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/VNhF9CeN5jHWH1tX5Wl26BrCyHA.roa
File:                     VNhF9CeN5jHWH1tX5Wl26BrCyHA.roa (raw, json)
Hash identifier:          2KghxCrjmwflH1r/P5I8hjxMykiOshc6jpUIIxBQRpo=
Subject key identifier:   54:D8:45:F4:27:8D:E6:31:D6:1F:5B:57:E5:69:76:E8:1A:C2:C8:70
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019B78A2665D5950CC9EC113C0C395390056
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/VNhF9CeN5jHWH1tX5Wl26BrCyHA.roa
Signing time:             Thu 01 Jan 2026 08:17:47 +0000
ROA not before:           Thu 01 Jan 2026 08:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215523
IP address blocks:        79.135.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:66:5d:59:50:cc:9e:c1:13:c0:c3:95:39:00:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Jan  1 08:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54d845f4278de631d61f5b57e56976e81ac2c870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:9e:6a:23:14:10:24:d6:27:d2:d3:36:31:
                    82:2a:7c:3c:86:9a:6e:02:2a:a3:75:6e:cd:6d:81:
                    1e:bc:d9:9b:62:88:37:aa:7c:ef:78:45:bb:8a:cc:
                    65:26:52:35:66:6e:bb:ef:a8:d7:46:03:20:1f:97:
                    e7:d2:c6:92:62:14:3f:bf:99:22:78:80:b3:f7:e9:
                    d4:75:3b:66:eb:eb:fe:5f:4d:63:e3:60:9b:96:7d:
                    69:d2:87:34:79:85:da:c0:d3:60:8e:3e:1e:fe:32:
                    0e:f4:f5:79:d5:67:b4:b9:95:61:bf:e7:35:7a:78:
                    f9:4b:19:81:b8:c5:e7:3f:59:81:d6:4e:56:1d:43:
                    4c:b4:18:18:b2:3a:db:28:a1:a5:c8:f1:ae:75:8e:
                    eb:e2:41:ee:5f:a1:f1:d4:f6:1c:6f:3e:88:ab:dc:
                    0c:55:d2:b1:7f:76:30:07:df:51:85:c3:0c:e4:95:
                    2c:77:ec:5d:4d:65:03:21:ce:f7:e8:6c:17:37:75:
                    db:87:93:8b:2d:18:ee:f0:e5:ab:34:44:5b:40:d0:
                    5c:da:92:90:ad:44:b6:ef:2a:d1:b4:62:49:1d:78:
                    aa:e7:8d:38:88:9e:b7:d1:f4:2c:2a:7f:f7:98:91:
                    cd:58:24:57:64:42:1c:0b:61:07:57:1c:83:c5:8b:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D8:45:F4:27:8D:E6:31:D6:1F:5B:57:E5:69:76:E8:1A:C2:C8:70
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/VNhF9CeN5jHWH1tX5Wl26BrCyHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.135.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:80:24:5d:a2:47:06:d0:1c:10:71:72:97:54:12:93:9f:cd:
         5e:e2:90:90:2b:8c:03:f2:ac:33:40:08:74:59:ac:6e:54:62:
         6b:7c:10:83:e2:d7:46:98:34:f0:eb:e1:35:51:f8:e6:ed:ec:
         a2:49:f9:a1:7f:65:97:23:86:45:2d:73:e8:36:3f:cd:a0:4c:
         83:cc:d5:59:04:62:5e:f4:fa:4a:9e:fe:68:ee:eb:ed:0d:78:
         b4:a7:db:47:f6:f6:4e:38:d6:cf:7b:2e:6e:6b:13:c3:bd:2c:
         ad:b5:f3:b8:bf:62:21:e6:fc:57:6c:7e:4c:8f:e5:02:68:2c:
         c0:97:f6:93:b3:1c:17:5f:60:d8:e3:bd:ee:4f:aa:69:ca:f9:
         6f:fa:3c:b5:ea:db:15:23:b4:83:ab:73:ad:2f:34:3c:15:f3:
         19:23:0e:fc:7d:5c:0a:e9:88:c6:97:82:92:92:ba:dc:d5:91:
         c3:21:07:22:f2:46:46:a1:03:76:c9:75:2c:c4:41:a6:65:00:
         c1:bd:fc:c8:de:a1:c5:72:cb:d2:bf:8b:ea:26:34:e9:c3:6c:
         94:b7:b0:49:0e:62:5d:e5:dc:41:c9:25:77:0b:cd:fd:51:47:
         79:2a:92:eb:f9:58:4e:0d:3f:1c:c3:81:84:d7:3f:9f:c0:29:
         4f:9a:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:00:56 2026 by rpki-client