This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/RlEOr0WWERBvHKR2QN4dalFNNhU.roa
File:                     RlEOr0WWERBvHKR2QN4dalFNNhU.roa (raw, json)
Hash identifier:          5VgYzfgp02jq47FQDCUj7EgiYDLkaZo7FOYod34Ux0E=
Subject key identifier:   46:51:0E:AF:45:96:11:10:6F:1C:A4:76:40:DE:1D:6A:51:4D:36:15
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C76BD59F6701ED8D6C7F3019D3C4A9
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/RlEOr0WWERBvHKR2QN4dalFNNhU.roa
Signing time:             Thu 01 Jan 2026 04:18:36 +0000
ROA not before:           Thu 01 Jan 2026 04:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24577
IP address blocks:        82.177.142.0/24 maxlen: 24
                          82.177.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:6b:d5:9f:67:01:ed:8d:6c:7f:30:19:d3:c4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46510eaf459611106f1ca47640de1d6a514d3615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:c5:4b:1c:14:37:5b:40:c2:20:a2:32:a5:
                    c1:fb:6c:88:19:0c:68:06:43:03:3b:37:30:fb:b1:
                    f2:d4:ee:87:c4:c1:dd:6d:85:e9:2a:8d:5d:d2:44:
                    5d:c1:1b:51:89:01:eb:0c:e0:8e:71:19:4a:13:15:
                    05:af:ec:c1:16:47:61:09:b7:3d:48:15:2f:84:4d:
                    f9:89:ac:aa:7e:e9:e9:d9:e9:12:45:29:a0:8c:ce:
                    aa:ed:94:64:0e:ea:f6:d4:70:8a:bd:12:9b:75:24:
                    36:09:30:28:00:ff:9e:e0:90:e1:91:e3:80:b6:24:
                    67:e7:2f:59:4f:af:9c:f6:87:32:42:f6:e7:8a:4f:
                    fd:36:62:db:6f:89:39:f9:1a:b6:1b:d3:74:dc:11:
                    a9:09:a6:bd:8c:6f:f0:b3:98:f9:09:ef:77:0b:e9:
                    ba:39:7a:10:32:62:8e:13:d3:9f:5d:5d:37:c7:3a:
                    12:77:ab:f6:a0:d7:e8:eb:d2:6e:d1:7b:8d:67:8e:
                    dc:2b:0b:45:0e:39:b6:4a:47:49:8a:cb:27:e2:59:
                    c6:93:42:fa:b6:4c:6e:63:4e:0f:31:54:42:15:0d:
                    c9:57:d6:dd:fb:1d:5e:8b:6e:c2:69:3a:20:95:6d:
                    a3:eb:7d:58:23:e0:99:dc:91:8b:f8:90:bc:2f:13:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:0E:AF:45:96:11:10:6F:1C:A4:76:40:DE:1D:6A:51:4D:36:15
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/RlEOr0WWERBvHKR2QN4dalFNNhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.142.0/24
                  82.177.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:19:ea:6d:08:92:03:ca:b3:0d:1e:15:2b:f3:d4:3c:93:
         08:25:0e:5e:bf:f3:a1:06:52:4c:96:ab:9d:18:f2:ba:92:51:
         7a:b9:8a:e6:4f:ea:f5:1b:61:11:b1:3b:17:15:35:f3:55:75:
         01:c9:1a:ac:ab:bd:b0:15:55:d1:70:4c:ab:a3:8a:d0:ad:2e:
         16:e3:b6:90:a0:7a:73:d1:26:b0:18:be:87:9c:1d:a3:48:14:
         44:11:e0:dc:43:5f:c4:c6:d4:16:21:7f:36:af:24:54:e1:17:
         d2:cf:ff:d3:38:aa:ad:dd:21:0f:e1:17:78:5c:10:25:3a:6e:
         b6:c2:46:10:ea:5a:de:77:fc:2e:1c:19:37:01:2b:44:71:d9:
         e5:5e:55:2e:1f:a3:17:0e:56:b7:94:94:32:dd:b2:83:48:0e:
         b6:ed:d9:57:2e:56:d5:a5:6e:06:da:0c:15:25:22:ef:98:fc:
         1b:8f:f4:cb:cf:eb:25:9a:e0:83:45:1f:0a:4e:12:b3:3b:54:
         1f:a9:84:73:41:9a:0f:c3:09:65:f8:67:98:74:91:3a:17:c6:
         1e:30:f2:ce:29:d5:7c:55:4f:86:49:5f:40:81:71:1c:31:7f:
         f7:54:c9:4d:3e:20:40:f1:69:8f:20:fb:ef:55:b6:b7:91:92:
         2a:73:83:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt3x2vVn2cB7Y1sfzAZ08SpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjUxMGVhZjQ1OTYxMTEwNmYxY2E0NzY0MGRlMWQ2YTUxNGQzNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0HFSxwUN1tAwiCiMqXB+2yIGQxo
BkMDOzcw+7Hy1O6HxMHdbYXpKo1d0kRdwRtRiQHrDOCOcRlKExUFr+zBFkdhCbc9
SBUvhE35iayqfunp2ekSRSmgjM6q7ZRkDur21HCKvRKbdSQ2CTAoAP+e4JDhkeOA
tiRn5y9ZT6+c9ocyQvbnik/9NmLbb4k5+Rq2G9N03BGpCaa9jG/ws5j5Ce93C+m6
OXoQMmKOE9OfXV03xzoSd6v2oNfo69Ju0XuNZ47cKwtFDjm2SkdJissn4lnGk0L6
tkxuY04PMVRCFQ3JV9bd+x1ei27CaToglW2j631YI+CZ3JGL+JC8LxO09QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEZRDq9FlhEQbxykdkDeHWpRTTYVMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvUmxFT3IwV1dFUkJ2SEtSMlFONGRhbEZOTmhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUrGOAwQA
UrG9MA0GCSqGSIb3DQEBCwUAA4IBAQAqqhnqbQiSA8qzDR4VK/PUPJMIJQ5ev/Oh
BlJMlqudGPK6klF6uYrmT+r1G2ERsTsXFTXzVXUByRqsq72wFVXRcEyro4rQrS4W
47aQoHpz0SawGL6HnB2jSBREEeDcQ1/ExtQWIX82ryRU4RfSz//TOKqt3SEP4Rd4
XBAlOm62wkYQ6lred/wuHBk3AStEcdnlXlUuH6MXDla3lJQy3bKDSA627dlXLlbV
pW4G2gwVJSLvmPwbj/TLz+slmuCDRR8KThKzO1QfqYRzQZoPwwll+GeYdJE6F8Ye
MPLOKdV8VU+GSV9AgXEcMX/3VMlNPiBA8WmPIPvvVba3kZIqc4MI
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:39 2026 by rpki-client