This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/V_VULBThI1SWyMzlduk_v5YT_-M.roa
File:                     V_VULBThI1SWyMzlduk_v5YT_-M.roa (raw, json)
Hash identifier:          4K3qqngjQDm7OwkvFF4NbH9BZck83XCd1/K8P6OeAw4=
Subject key identifier:   57:F5:54:2C:14:E1:23:54:96:C8:CC:E5:76:E9:3F:BF:96:13:FF:E3
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019B7E38DDC5E0000831786C264AFE62D240
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/V_VULBThI1SWyMzlduk_v5YT_-M.roa
Signing time:             Fri 02 Jan 2026 10:20:14 +0000
ROA not before:           Fri 02 Jan 2026 10:20:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     397231
IP address blocks:        37.209.192.0/24 maxlen: 24
                          37.209.194.0/24 maxlen: 24
                          37.209.196.0/24 maxlen: 24
                          37.209.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:dd:c5:e0:00:08:31:78:6c:26:4a:fe:62:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jan  2 10:20:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57f5542c14e1235496c8cce576e93fbf9613ffe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cc:6e:d1:11:1c:d8:b5:5f:b7:a7:fe:14:01:
                    02:57:5a:93:47:c5:40:62:d0:76:30:76:e8:87:1d:
                    7f:b0:c1:b1:3e:c8:7b:57:67:b0:6c:bd:a1:91:7a:
                    2f:18:e2:66:ed:32:86:ff:fc:cb:60:8e:af:cd:c1:
                    44:61:d7:c7:dd:ca:fa:e0:4d:74:16:73:41:18:29:
                    76:4b:2a:ac:c8:c5:41:c6:51:31:6e:e9:bb:ae:57:
                    cc:a2:eb:91:ae:17:28:d6:48:c4:9a:1e:44:6e:68:
                    65:87:10:37:61:d6:bf:28:49:5d:ab:fd:1c:8e:76:
                    ce:56:60:20:8f:5d:1a:63:d7:4d:e9:2e:88:5d:2f:
                    e0:d1:b9:c7:c9:3e:b2:36:fa:06:84:e3:7e:b7:f7:
                    40:94:3c:a7:88:61:2b:b2:ba:70:97:14:de:c0:cd:
                    3f:a7:1d:3e:46:c7:19:5c:e1:d1:60:6e:66:e8:48:
                    98:24:77:32:72:97:2d:89:00:71:7b:05:96:a1:e2:
                    34:36:43:32:cb:60:f5:b0:73:28:6a:89:81:a4:7d:
                    f9:8e:bd:33:f1:fb:28:c9:7d:9d:82:e8:ac:5a:4a:
                    4a:9f:80:1d:f4:a0:eb:69:a3:c4:94:df:b0:bc:79:
                    34:2a:85:31:bc:92:1b:62:08:3b:d9:ba:c8:83:fc:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F5:54:2C:14:E1:23:54:96:C8:CC:E5:76:E9:3F:BF:96:13:FF:E3
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/V_VULBThI1SWyMzlduk_v5YT_-M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.192.0/24
                  37.209.194.0/24
                  37.209.196.0/24
                  37.209.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:69:75:f9:62:f2:6d:87:da:ed:b8:dc:43:1f:69:d8:58:
         11:17:19:60:b2:cb:5f:3e:53:93:31:9b:bd:7c:60:39:4d:6c:
         62:12:e5:b4:38:44:e5:ae:e0:0a:16:fa:80:e9:43:c4:d1:3b:
         06:d0:6d:80:34:7a:8c:9c:74:13:4c:f6:cc:be:f9:d4:45:ea:
         a0:1c:a0:fc:fa:5f:dc:d6:d0:f6:7e:08:91:5e:89:de:98:5e:
         71:2f:69:72:f6:8b:16:88:35:6f:39:21:c8:3b:c0:61:14:96:
         27:08:e8:61:3d:c7:5a:ac:2b:aa:12:f9:cc:61:37:4b:d3:b6:
         83:49:2f:f3:27:d3:19:4e:de:bb:4e:98:16:1f:9c:7e:17:8f:
         e9:59:50:fd:d8:cb:eb:67:a7:f4:37:99:46:10:32:1b:7c:7c:
         70:de:48:ea:87:e9:56:31:3e:ca:91:6b:f6:48:27:2c:70:bb:
         b8:f2:01:56:e2:7d:71:80:ae:cd:cf:73:a8:a9:99:0c:4b:05:
         6f:1a:a5:62:27:d8:82:93:3d:96:b3:75:5b:63:60:43:db:37:
         39:fa:17:44:bc:c8:53:50:4e:1a:a8:f0:07:c7:8e:ce:9d:97:
         33:35:c1:b0:cc:c3:51:14:bc:aa:06:66:3f:de:cd:d2:01:e8:
         8a:46:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:15:23 2026 by rpki-client