This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jWVQLNW_Ub4bYDbV-oqdn4MXS0c.roa
File:                     jWVQLNW_Ub4bYDbV-oqdn4MXS0c.roa (raw, json)
Hash identifier:          VHOBYGvGVQJ7TgSHiIPhKOHKQa6F+mnDDc116Lin1pc=
Subject key identifier:   8D:65:50:2C:D5:BF:51:BE:1B:60:36:D5:FA:8A:9D:9F:83:17:4B:47
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C7700FB1987EE4BDB8415E0BFB0732
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jWVQLNW_Ub4bYDbV-oqdn4MXS0c.roa
Signing time:             Thu 01 Jan 2026 04:18:37 +0000
ROA not before:           Thu 01 Jan 2026 04:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35115
IP address blocks:        195.136.68.0/23 maxlen: 23
                          195.136.74.0/23 maxlen: 23
                          195.136.80.0/22 maxlen: 24
                          195.136.80.0/23 maxlen: 23
                          195.136.96.0/22 maxlen: 22
                          195.136.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:70:0f:b1:98:7e:e4:bd:b8:41:5e:0b:fb:07:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8d65502cd5bf51be1b6036d5fa8a9d9f83174b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3a:ae:72:94:f4:4f:ac:bd:dd:31:32:90:72:
                    fd:fc:05:ae:82:72:b8:89:c5:6b:38:ff:80:82:3b:
                    31:b7:3f:7a:3f:7a:96:26:b5:e3:c5:57:f9:d7:a8:
                    07:01:35:c0:d8:a8:d5:fb:17:12:72:fd:a9:2c:6b:
                    54:2c:e7:5c:be:d8:29:ea:dc:57:47:76:84:ef:57:
                    79:59:80:f7:7b:22:f7:2b:26:5d:f8:ac:ff:fc:e8:
                    5b:00:d1:04:ae:e5:8d:c8:92:7f:9a:e5:58:0a:02:
                    d3:35:06:6b:77:7f:51:eb:d5:2f:f9:e8:c7:c1:d5:
                    82:32:55:eb:94:6a:f1:75:c7:00:de:82:ed:ab:b3:
                    ca:96:fa:3b:53:0d:9f:65:6a:f4:86:58:ac:34:6a:
                    1e:5d:d0:71:d0:7f:9d:32:2e:4f:d8:fa:95:67:f9:
                    16:cd:bf:f3:65:45:c4:b7:70:9e:99:4f:d5:8d:7c:
                    10:1b:b4:e9:56:1b:51:f4:d1:3b:24:dc:b3:02:f9:
                    67:71:13:46:65:b9:b2:ac:6b:c4:a8:03:da:5a:14:
                    78:94:20:c3:50:bd:19:ad:2a:e6:4a:85:cd:58:78:
                    a2:d4:a4:fb:99:ed:fe:69:84:84:d0:9c:20:f2:8b:
                    00:b4:96:40:30:19:fa:fd:a4:9e:b7:52:b9:3b:af:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:65:50:2C:D5:BF:51:BE:1B:60:36:D5:FA:8A:9D:9F:83:17:4B:47
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/jWVQLNW_Ub4bYDbV-oqdn4MXS0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.136.68.0/23
                  195.136.74.0/23
                  195.136.80.0/22
                  195.136.96.0/22
                  195.136.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:18:f0:f0:c2:72:5e:0f:68:03:72:6c:f2:7f:7e:ca:bc:
         02:e5:82:54:b5:ab:bd:af:57:4c:7c:44:8e:47:f4:a8:30:b5:
         5c:90:1c:5a:62:78:ac:95:9a:03:a7:32:5c:d6:cd:87:99:9a:
         25:37:7d:16:29:80:88:f3:0b:d9:6e:8b:40:6a:47:28:b0:84:
         e3:a1:8e:a0:60:61:5d:4b:14:49:12:b4:27:19:dc:03:aa:dc:
         46:75:6d:fb:b4:e7:54:04:13:56:7b:24:51:c9:95:e9:86:c2:
         05:b9:0f:7b:02:63:c8:0f:5b:2f:0c:7e:aa:a9:48:d0:01:f5:
         d0:7c:24:c4:a9:7f:c6:70:d0:f8:3a:fb:b5:83:ba:b8:fa:d5:
         e3:db:eb:0c:8d:95:92:22:bc:fb:9c:10:7f:d1:18:50:ae:32:
         a8:18:fc:70:bd:01:7e:fb:e3:da:cb:e6:37:72:56:fd:02:f0:
         96:73:ce:c0:23:a3:01:53:3f:91:32:0e:e6:f0:97:9c:1e:a0:
         6d:5d:a7:8e:25:56:2a:06:9e:13:50:02:a5:a5:eb:da:0e:65:
         cc:79:6c:de:75:55:54:ce:58:7c:52:c7:68:4a:5b:aa:44:7d:
         c6:8b:a1:05:99:93:18:5d:20:38:8f:40:31:af:eb:04:31:a0:
         db:b6:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:17:40 2026 by rpki-client