This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/VQiElCspYygojHZx1e_d787gq8M.roa
File:                     VQiElCspYygojHZx1e_d787gq8M.roa (raw, json)
Hash identifier:          cYsGyxOGTSDbkK7Bo8Dcbyj6xyiZ7rpceD54Wi9Pnvo=
Subject key identifier:   55:08:84:94:2B:29:63:28:28:8C:76:71:D5:EF:DD:EF:CE:E0:AB:C3
Certificate issuer:       /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial:       019B7EA458364DCA39E6E68BAE5266EF4A1B
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/VQiElCspYygojHZx1e_d787gq8M.roa
Signing time:             Fri 02 Jan 2026 12:17:38 +0000
ROA not before:           Fri 02 Jan 2026 12:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15763
IP address blocks:        195.138.36.0/24 maxlen: 24
                          195.138.42.0/23 maxlen: 23
                          195.138.44.0/22 maxlen: 22
                          195.138.48.0/22 maxlen: 22
                          195.138.52.0/24 maxlen: 24
                          195.138.59.0/24 maxlen: 24
                          195.253.8.0/21 maxlen: 21
                          195.253.16.0/22 maxlen: 22
                          195.253.21.0/24 maxlen: 24
                          195.253.24.0/22 maxlen: 22
                          195.253.28.0/23 maxlen: 23
                          195.253.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:58:36:4d:ca:39:e6:e6:8b:ae:52:66:ef:4a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
        Validity
            Not Before: Jan  2 12:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=550884942b296328288c7671d5efddefcee0abc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:a0:67:3c:aa:db:0a:0f:e7:98:68:23:83:
                    9a:b2:21:a6:b5:d0:63:3b:48:10:c9:14:39:06:1c:
                    59:99:cf:90:86:d7:78:30:f5:b5:1c:dd:87:5f:45:
                    5e:11:ac:07:7c:8d:3b:32:d7:e0:b1:81:ef:9b:9d:
                    de:2a:0b:5c:e1:e5:09:68:db:fe:6f:02:56:34:c0:
                    10:e3:a5:66:c8:b0:8a:6c:96:6f:bc:f5:9c:a1:54:
                    a8:21:97:dc:e8:f1:e4:7b:26:a0:ca:cf:f4:d9:85:
                    a9:9f:f5:5b:01:bb:25:52:98:9d:bb:42:a5:f1:33:
                    67:1c:37:77:8c:d8:6e:63:f8:d4:fb:94:67:af:52:
                    a9:be:39:15:c0:0a:3e:50:5d:8e:fc:d7:04:e2:c4:
                    ab:59:13:63:52:d5:34:43:ec:e9:1a:f6:77:1f:45:
                    c4:3b:ed:7e:a0:5a:fb:aa:c4:5a:db:65:91:e9:ea:
                    15:44:f2:ff:ba:9c:65:15:32:ae:39:53:11:21:eb:
                    2c:36:cf:96:eb:bd:83:6a:f6:d9:95:fb:97:e1:92:
                    34:e5:77:04:2c:e1:2f:83:c4:34:de:41:5e:0d:a5:
                    28:2d:e0:8f:0a:58:b9:60:75:ab:26:b7:c5:4e:71:
                    23:cf:05:86:2e:c1:8d:a8:51:63:06:66:29:cd:73:
                    31:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:84:94:2B:29:63:28:28:8C:76:71:D5:EF:DD:EF:CE:E0:AB:C3
            X509v3 Authority Key Identifier:
                keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/VQiElCspYygojHZx1e_d787gq8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.138.36.0/24
                  195.138.42.0-195.138.52.255
                  195.138.59.0/24
                  195.253.8.0-195.253.19.255
                  195.253.21.0/24
                  195.253.24.0-195.253.30.255

    Signature Algorithm: sha256WithRSAEncryption
         6f:e1:5d:dd:e1:e8:45:8e:8e:ba:65:1f:08:2e:5d:2e:c3:55:
         84:8c:4f:55:fa:a2:f1:6c:5e:e4:44:6a:05:a6:b6:ec:8d:2e:
         52:5d:ea:5c:ec:c0:02:e7:52:cd:d8:a9:c8:a4:35:c7:fb:95:
         6f:f0:9e:1e:f8:ee:fe:26:64:4e:35:ec:d2:f4:91:68:7c:81:
         72:3a:77:58:c6:9e:cb:ce:43:72:44:87:cc:bd:81:74:b7:6a:
         51:4e:93:91:53:38:cd:ee:eb:ee:2e:e7:76:89:69:9c:25:12:
         81:ef:80:c1:22:e6:92:c1:9c:67:9a:95:29:b9:8f:21:e7:7b:
         90:84:b3:d7:c5:4a:07:bd:ef:a0:bf:76:df:c7:72:0d:20:05:
         d0:7b:9f:12:4c:e2:29:4a:86:60:d7:0c:76:78:29:4f:43:7c:
         57:08:31:44:cb:ba:c7:90:64:65:ae:54:ec:77:5a:18:cb:7b:
         c7:ca:7e:62:dd:f0:37:4e:67:15:4b:5f:f0:19:cd:0f:a9:25:
         73:92:64:08:5d:25:16:42:14:60:89:9a:29:39:88:1b:00:cf:
         98:60:8e:55:eb:25:a7:09:8f:49:3b:f1:c4:a4:db:84:3c:ff:
         df:f3:30:52:bd:45:ff:bc:e7:ba:3f:76:bf:98:2e:8c:66:cf:
         fe:10:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:39:12 2026 by rpki-client