This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/aI54VBOZEiACRa-iYml64F-rGJk.roa
File:                     aI54VBOZEiACRa-iYml64F-rGJk.roa (raw, json)
Hash identifier:          ltJ/ZpWY9QBnCHYtRf611tQoudDPERuHCWSz/tX/pOk=
Subject key identifier:   68:8E:78:54:13:99:12:20:02:45:AF:A2:62:69:7A:E0:5F:AB:18:99
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C79630DFA384A8A29C96A8C0AF8F02
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/aI54VBOZEiACRa-iYml64F-rGJk.roa
Signing time:             Thu 01 Jan 2026 04:18:47 +0000
ROA not before:           Thu 01 Jan 2026 04:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211388
IP address blocks:        81.15.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:96:30:df:a3:84:a8:a2:9c:96:a8:c0:af:8f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=688e7854139912200245afa262697ae05fab1899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:20:a9:19:da:05:72:97:20:fe:a8:55:03:
                    a9:ac:c4:19:98:c5:9c:87:11:c6:6a:3c:02:fc:83:
                    ee:e6:e3:82:bb:47:9c:d8:47:be:c3:f6:48:31:77:
                    12:0d:2f:1d:4b:08:3a:e3:45:f3:5c:4a:d2:86:26:
                    0d:50:cc:63:40:fd:4d:f3:72:16:75:9e:f7:62:28:
                    fc:89:58:88:d9:43:a0:e6:8d:86:62:21:9c:fc:c2:
                    6d:0c:f4:77:8c:49:26:77:9e:14:d9:ec:d1:12:85:
                    04:83:e0:ba:73:c3:f4:67:da:8d:90:f4:e6:87:6f:
                    ec:18:96:12:a8:bb:92:eb:f6:8d:e3:99:7d:a4:ea:
                    95:fc:33:af:10:01:cb:69:34:17:63:fd:ac:cb:78:
                    a0:e1:ea:8e:84:2e:24:42:37:99:77:7c:c1:45:62:
                    d5:b8:d3:6f:1a:10:21:6f:d0:f7:78:2c:20:ce:7e:
                    da:81:82:f3:d4:7e:4d:2e:ce:f7:f3:8f:1c:89:c4:
                    d5:41:c6:7d:7a:4d:6e:c1:0d:e3:ab:23:94:1b:16:
                    d3:84:f4:cd:5e:57:95:48:ac:43:dd:98:d0:66:99:
                    fe:cb:50:22:18:05:ee:90:15:4b:0f:69:90:ad:70:
                    3e:87:4e:67:11:e8:5c:b2:df:a9:29:5b:2f:bd:ec:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8E:78:54:13:99:12:20:02:45:AF:A2:62:69:7A:E0:5F:AB:18:99
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/aI54VBOZEiACRa-iYml64F-rGJk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:3d:74:e3:53:12:49:5f:94:68:21:4f:3c:33:1c:26:ea:
         b8:03:8a:10:1e:57:8c:c4:94:fb:2a:37:ae:9b:31:33:ec:b7:
         5a:65:9a:05:03:ac:1c:78:b4:d2:b2:29:c9:43:c0:1b:a3:42:
         88:39:29:2a:6a:56:05:95:48:2f:a3:50:f7:61:28:f5:3f:d4:
         23:55:8d:38:3a:7e:a8:14:cd:0f:9d:52:a1:9f:91:75:61:9c:
         d2:d0:3a:d7:72:78:d9:b3:7f:1e:59:c3:e8:62:f6:63:ac:fd:
         14:d8:58:57:0d:c7:13:65:87:ad:92:87:26:38:a3:24:9e:6f:
         66:8c:f0:87:a9:12:6a:6c:d2:37:fc:38:bd:ba:cf:48:7c:c1:
         ba:d7:ef:f1:cd:9c:8c:a6:33:3c:d7:79:a6:c6:5d:87:a5:ff:
         1e:47:ca:88:21:c6:75:ee:74:86:72:f8:8b:53:c5:a5:a2:47:
         65:aa:f2:e8:03:67:60:81:84:c9:3e:7d:10:e1:45:0d:35:a0:
         c5:70:61:05:b1:85:ce:14:b7:2c:01:3b:4e:9b:56:d0:93:f0:
         00:5f:49:8b:c7:21:d0:99:4b:3d:36:a2:2e:51:07:cf:b7:0d:
         ef:1a:d3:e5:8b:b6:d7:10:fa:d1:1b:ad:97:83:3b:a0:e0:fe:
         32:d0:9f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:07 2026 by rpki-client