This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V7PhEJVFsrZo9pGKaIQK5WECOec.roa
File:                     V7PhEJVFsrZo9pGKaIQK5WECOec.roa (raw, json)
Hash identifier:          2YyxI5Uh5Ve1PJk93FzHJPtACA99+aDwsGuwi5lYGkg=
Subject key identifier:   57:B3:E1:10:95:45:B2:B6:68:F6:91:8A:68:84:0A:E5:61:02:39:E7
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C76C34A955225378AC47819921C512
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V7PhEJVFsrZo9pGKaIQK5WECOec.roa
Signing time:             Thu 01 Jan 2026 04:18:36 +0000
ROA not before:           Thu 01 Jan 2026 04:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24756
IP address blocks:        81.15.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:6c:34:a9:55:22:53:78:ac:47:81:99:21:c5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57b3e1109545b2b668f6918a68840ae5610239e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:83:b1:77:e5:b1:a0:56:36:1e:3e:f2:51:
                    d0:30:1c:11:e7:52:71:17:f2:96:e9:f4:84:48:74:
                    2e:10:53:fd:60:dd:aa:9f:d7:4a:5a:58:85:38:1c:
                    5f:e1:61:a6:db:9b:6c:33:7e:a7:d2:7c:c9:a5:8e:
                    03:3c:d8:03:03:04:64:57:65:25:d0:00:84:b5:7b:
                    a1:b7:cd:6f:59:90:e6:42:f8:43:d3:c7:59:cb:8a:
                    a1:a0:59:d6:04:d2:5c:6c:6b:4d:2e:75:ef:4c:28:
                    70:f9:d3:2c:c4:d6:9e:22:3c:e6:01:3e:3b:b5:62:
                    83:84:a8:fd:d7:23:20:e2:e2:56:cf:2c:de:63:70:
                    00:8e:d0:f9:f7:74:7c:ec:0d:f5:a6:4e:f2:47:c5:
                    e0:ab:9b:4a:72:f9:a1:62:2f:9e:8e:3c:88:6f:e6:
                    72:d8:3b:fd:56:e0:17:7f:e5:f2:a0:c7:14:29:2a:
                    a9:72:3a:d8:ca:c7:95:f6:26:df:dd:76:f4:8a:0f:
                    38:19:33:2a:ff:02:99:e3:e8:54:ee:4d:f6:6e:fb:
                    07:42:2c:35:13:5e:bb:ac:6c:f7:cb:84:9a:61:c7:
                    25:c6:21:93:be:87:ef:dc:c3:73:d3:18:a7:b4:ee:
                    c4:7e:65:10:6e:b0:aa:d6:d3:78:60:cf:6d:45:5a:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B3:E1:10:95:45:B2:B6:68:F6:91:8A:68:84:0A:E5:61:02:39:E7
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V7PhEJVFsrZo9pGKaIQK5WECOec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:a9:7a:fa:f0:1b:82:30:df:90:29:8b:0b:dd:b3:ce:03:
         a7:e3:88:5a:bb:e9:72:a2:08:4b:26:d2:7c:06:cc:c4:db:4e:
         4a:27:68:b2:20:ed:d8:24:bb:e4:1b:1f:3f:2d:aa:35:de:e4:
         52:fa:2e:46:de:34:e9:0e:b0:04:f4:94:db:46:b1:5d:92:d7:
         d3:ef:b5:2f:42:3c:c0:c0:77:e5:2e:ed:26:31:0c:de:29:d1:
         0f:4b:59:b9:bd:b1:80:27:68:8e:4c:fb:05:ef:4b:07:f9:fa:
         d5:62:b9:c1:78:76:61:a9:93:0f:af:10:13:b7:16:c3:7f:ae:
         bf:95:e8:9c:08:e3:fb:e7:0b:ef:5b:ea:c2:da:a3:ac:f2:bf:
         26:52:e6:5d:4e:8a:b9:c4:80:44:5f:ab:42:fc:19:7e:9e:c2:
         11:13:1d:a6:34:f2:fd:00:49:a0:ca:7d:43:1f:fb:74:46:d5:
         fb:b8:1b:f1:0e:ac:91:7d:08:0e:34:3e:e8:4e:cb:4f:20:64:
         30:ee:50:cc:fb:31:16:dc:f2:5b:72:87:a9:d6:ce:d5:36:d2:
         1b:98:34:68:f9:49:c9:52:02:03:7c:4f:6c:2c:0b:00:89:a8:
         93:c9:52:bd:8a:8a:64:5f:20:9f:e4:44:c1:21:78:1b:be:15:
         d8:9c:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:03 2026 by rpki-client