This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VoV9MToSf3UUqVY5YWljcNlf07Y.roa
File:                     VoV9MToSf3UUqVY5YWljcNlf07Y.roa (raw, json)
Hash identifier:          tS+Yt8FxnurT0UZJ7ClYqWyZaBT7l8I4+axZOMRQCnA=
Subject key identifier:   56:85:7D:31:3A:12:7F:75:14:A9:56:39:61:69:63:70:D9:5F:D3:B6
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C7770A3E3416B42CBB00ED1FD72C38
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VoV9MToSf3UUqVY5YWljcNlf07Y.roa
Signing time:             Thu 01 Jan 2026 04:18:39 +0000
ROA not before:           Thu 01 Jan 2026 04:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44284
IP address blocks:        82.177.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:77:0a:3e:34:16:b4:2c:bb:00:ed:1f:d7:2c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56857d313a127f7514a9563961696370d95fd3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:a2:fb:0c:51:88:8a:34:b6:4b:ce:ed:0e:
                    5b:96:25:d1:a1:5b:29:b8:94:5e:76:09:47:61:eb:
                    97:2c:f7:33:dd:3c:7c:82:9e:11:4c:05:6e:d4:df:
                    8d:12:a4:73:63:ab:1a:48:4f:a1:83:66:33:89:a7:
                    7d:6c:0e:10:2e:5b:ba:78:cd:59:43:95:05:ca:cd:
                    ee:8d:fe:7a:77:a1:70:5b:51:4b:da:df:4e:fe:b8:
                    92:97:f4:eb:08:eb:cf:ae:b3:0c:ad:13:ea:c9:0b:
                    ea:ce:e0:49:39:15:eb:f6:cf:0a:c4:66:61:77:8b:
                    9d:f8:b2:99:fb:09:e3:f6:07:f7:32:c9:96:31:47:
                    83:e1:6b:ce:1f:3a:70:67:63:db:36:e0:03:c0:a7:
                    24:22:97:84:0f:18:6f:7d:ee:99:42:a7:c4:5c:00:
                    c5:c0:38:51:36:6a:e4:b7:60:1d:c0:50:2c:02:7b:
                    1d:4c:c7:44:d2:6c:a4:88:c3:c1:5c:8e:f9:bc:77:
                    e7:af:07:78:18:af:3b:60:cc:12:85:5c:ba:60:2a:
                    c3:2d:b9:bb:2a:3d:ed:23:09:83:e5:dd:7e:b6:3c:
                    f2:0a:76:30:d1:11:f3:b3:e8:c0:e6:95:72:98:01:
                    4d:5a:fc:7b:c6:42:a2:23:d3:cd:26:ea:d2:9a:de:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:85:7D:31:3A:12:7F:75:14:A9:56:39:61:69:63:70:D9:5F:D3:B6
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VoV9MToSf3UUqVY5YWljcNlf07Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ca:a7:a8:af:58:61:d1:2d:3c:73:5b:86:af:d9:05:c7:98:
         b0:0c:20:6f:c0:f6:49:4a:0b:12:d8:ca:39:ef:c0:35:b7:c2:
         07:07:07:4c:11:9d:c3:00:12:83:36:37:12:4e:a6:8d:70:1a:
         ad:00:33:ad:e1:aa:c1:32:70:a2:9a:30:c0:04:da:bb:98:99:
         3f:7b:54:43:b7:73:e6:d0:ef:26:00:18:5e:2e:0d:d0:7d:20:
         28:a4:ee:34:2f:a3:aa:44:1b:40:30:b6:66:a6:c3:6b:96:11:
         41:f0:68:02:59:06:ce:34:2c:8d:08:4e:18:06:7d:51:25:4f:
         0f:8f:8c:62:1c:6e:9b:56:dc:71:7e:7b:9e:f5:74:2e:7c:98:
         f3:0b:23:10:6a:50:d6:20:87:66:9b:94:5c:c2:19:f8:fb:c1:
         b9:d3:da:4c:b9:c2:f5:0e:c8:1a:78:2d:0e:fb:d1:c0:9e:ac:
         8a:df:85:3b:de:7a:65:91:80:50:07:4e:37:ce:4c:60:d0:70:
         43:e2:49:fd:dd:1e:bf:50:5e:15:95:ae:f1:4b:7c:97:da:21:
         b7:62:46:d9:5d:4b:7a:b4:0d:ad:e4:21:7f:56:d9:8b:bd:19:
         b1:57:4b:e3:df:cd:ee:8f:7e:d8:6f:1b:06:e3:91:a8:d3:81:
         6d:76:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:45:53 2026 by rpki-client