This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/vShaZdzNX9wvtWmI2YzTDQMV4tE.roa
File:                     vShaZdzNX9wvtWmI2YzTDQMV4tE.roa (raw, json)
Hash identifier:          pj8ZB8a4INA/UZVW5cEDx6NM0fiNpGCGmgLmzczklvQ=
Subject key identifier:   BD:28:5A:65:DC:CD:5F:DC:2F:B5:69:88:D9:8C:D3:0D:03:15:E2:D1
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C790A99B71B0B658495DD40BC8FDEE
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/vShaZdzNX9wvtWmI2YzTDQMV4tE.roa
Signing time:             Thu 01 Jan 2026 04:18:45 +0000
ROA not before:           Thu 01 Jan 2026 04:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206093
IP address blocks:        82.177.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:90:a9:9b:71:b0:b6:58:49:5d:d4:0b:c8:fd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd285a65dccd5fdc2fb56988d98cd30d0315e2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:6c:41:25:c4:87:d7:aa:3c:af:21:5e:5d:
                    57:97:91:22:c4:db:69:14:e0:21:99:f1:59:69:b1:
                    e2:39:2a:fd:9b:fd:64:ba:7d:5a:9d:08:12:51:fe:
                    47:bb:9e:a4:2a:49:3b:54:9a:99:5e:f2:cd:a9:f7:
                    24:02:c6:09:6b:52:02:a7:0f:35:e2:03:87:29:da:
                    15:5d:8b:13:e5:fd:33:c6:53:d5:ba:d0:ee:14:75:
                    e4:85:4f:e9:91:71:36:dc:69:d0:2e:7f:35:96:ac:
                    5e:ef:fd:b3:26:8d:63:33:f6:90:d7:91:2c:51:14:
                    64:15:f5:dd:a8:6b:9e:02:39:d5:fb:fc:ca:4b:77:
                    88:fd:c1:23:7c:c9:e9:bc:01:16:2d:e3:e9:88:0e:
                    c2:b3:9e:bd:7b:50:6c:94:8b:1c:58:46:a7:d3:9f:
                    90:9c:95:39:f9:2c:5a:a2:22:30:23:51:ee:03:65:
                    89:64:50:c6:2d:7a:11:a2:79:41:ec:2b:4f:58:60:
                    54:03:14:9b:8e:bd:d9:ee:c3:d7:15:43:ec:9a:56:
                    cc:1c:88:dd:48:26:4f:a4:e4:d9:49:5f:25:d5:c5:
                    8d:67:16:33:6c:9c:e6:b2:8c:b3:52:1f:9b:ff:5e:
                    ee:5c:9b:86:d3:b1:89:e6:e7:65:47:3e:43:f2:57:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:28:5A:65:DC:CD:5F:DC:2F:B5:69:88:D9:8C:D3:0D:03:15:E2:D1
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/vShaZdzNX9wvtWmI2YzTDQMV4tE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:e9:3f:d8:a1:41:81:8f:50:d4:2e:90:26:db:0a:ab:80:
         80:db:82:d8:78:9b:47:d7:92:cc:65:cc:4b:16:b4:d7:d7:ca:
         6c:d1:bd:90:e1:4a:ac:cf:f0:ca:c1:22:4c:47:b8:43:37:78:
         32:33:6c:0c:82:30:6e:0f:5f:82:34:9e:3f:6f:42:18:15:bb:
         c8:2d:28:ee:e3:ba:33:be:7c:8b:a8:8d:62:20:2d:8c:f5:de:
         c0:13:48:d2:1e:2d:e9:12:0e:38:08:2e:f3:83:d9:79:27:21:
         2a:99:2c:14:ae:66:44:20:0c:aa:3e:26:38:c0:27:c5:e1:8e:
         43:e4:f8:d6:34:9d:f7:54:db:32:4f:66:8b:93:df:d7:99:52:
         6e:e8:cb:0c:fb:ff:e3:73:90:ef:73:ac:1d:4f:d1:dc:11:74:
         07:b1:da:7e:c7:2b:4b:fd:db:77:2b:7f:c2:f5:ba:4c:87:04:
         ef:c3:0b:82:8c:e2:86:33:98:7d:fc:be:1d:bb:04:de:ac:81:
         0e:7b:bf:43:4d:13:ab:5c:f9:84:4d:6b:3d:c0:6a:9f:c1:4d:
         b6:ce:cd:ad:c0:5c:b0:86:41:7b:2d:22:b0:df:68:8e:d1:89:
         98:d5:35:5f:36:b1:5b:fd:50:3c:1e:b2:29:88:d9:0e:41:de:
         57:e4:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:38 2026 by rpki-client