This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/VL6J3vZTbL-0KSQOloFM2AVjSZg.roa
File:                     VL6J3vZTbL-0KSQOloFM2AVjSZg.roa (raw, json)
Hash identifier:          JU3p/Bn/swCU2DbrwcUBDJmSoERheb3FgweaOuNm7FA=
Subject key identifier:   54:BE:89:DE:F6:53:6C:BF:B4:29:24:0E:96:81:4C:D8:05:63:49:98
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       019B7EA6704F4B633ED05FFCB4D6868E8A91
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/VL6J3vZTbL-0KSQOloFM2AVjSZg.roa
Signing time:             Fri 02 Jan 2026 12:19:55 +0000
ROA not before:           Fri 02 Jan 2026 12:19:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43298
IP address blocks:        185.13.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:70:4f:4b:63:3e:d0:5f:fc:b4:d6:86:8e:8a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Jan  2 12:19:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54be89def6536cbfb429240e96814cd805634998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ad:f1:65:36:a3:96:f8:cf:93:c1:e7:98:6a:
                    9f:22:52:6f:b1:f2:d9:c1:48:1d:85:5d:ca:70:8b:
                    44:cc:dc:b9:82:29:3c:f0:42:d3:60:0a:8d:6e:e8:
                    cd:93:52:bc:30:fa:15:a2:b8:94:84:1c:35:3a:98:
                    c7:09:a5:6e:63:e1:16:03:00:bc:bf:35:ba:08:bb:
                    0b:2e:da:5b:d7:ef:3c:a9:07:94:ef:ab:49:35:45:
                    43:57:32:a0:34:a8:15:6a:4e:27:e9:34:ad:6b:4b:
                    92:bd:c2:6d:0b:c4:bf:1d:41:9a:2b:ab:8c:94:6b:
                    1f:8e:8e:b9:5d:f5:04:fd:e9:21:fd:e3:92:db:fa:
                    37:a6:95:13:c9:0c:f9:f8:fa:51:9c:d8:b6:e3:68:
                    0b:93:a5:b5:bd:49:8c:3d:e4:dd:80:3b:f4:b9:33:
                    cf:18:6f:1d:69:a2:e2:93:16:28:2d:7e:7b:51:4c:
                    34:4a:93:0a:e0:c5:e1:b8:01:14:eb:77:8a:c7:64:
                    f2:b6:ec:0e:7f:df:9f:a9:be:56:31:2f:04:2a:c7:
                    da:9d:18:f3:51:3d:62:37:1a:79:2f:01:83:7c:d2:
                    b7:c0:79:6c:a3:f5:bd:f5:f7:d7:84:d0:6a:ac:af:
                    fe:ef:70:95:bb:ba:e9:f3:e1:6b:74:0c:cd:a0:80:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BE:89:DE:F6:53:6C:BF:B4:29:24:0E:96:81:4C:D8:05:63:49:98
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/VL6J3vZTbL-0KSQOloFM2AVjSZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:ce:a7:8c:d2:6d:f0:83:45:ff:7e:e0:fc:de:02:af:10:37:
         b3:6c:38:72:89:3f:83:79:d4:fb:d2:5f:ab:1d:72:55:c9:78:
         ee:d4:22:f7:e6:5d:c6:0f:ce:92:66:51:d0:48:80:7d:f9:63:
         48:4c:45:bf:7d:64:d1:63:37:16:2e:5e:69:4e:e0:9c:7a:e6:
         cc:bb:30:b1:fe:79:0a:68:d6:44:fd:1a:e1:8e:58:33:86:a5:
         3a:15:34:7c:64:1b:ec:53:15:bb:b6:f4:b5:ac:79:78:1d:67:
         a7:18:8a:ec:3d:19:9c:44:e3:5d:7b:6b:fc:56:b5:9c:12:d3:
         20:5b:f5:4b:ca:30:d2:fc:d8:56:9f:2e:a8:09:cd:df:f8:5c:
         ba:eb:e4:b1:ef:01:e4:cd:65:41:5b:df:aa:bf:cf:f3:53:58:
         c8:3d:48:46:04:7d:30:6c:0c:46:5f:1f:4d:6b:e2:a7:5d:06:
         fc:fe:33:6e:34:8f:d8:a6:9f:1b:2c:1a:2e:91:b7:e7:09:65:
         64:44:69:c4:b5:2e:10:1a:42:23:fd:6f:9d:2e:23:ab:31:63:
         8f:8a:42:4a:1a:84:e2:32:9b:3d:7f:97:57:5e:6b:43:c4:7e:
         c5:26:8d:b0:41:5e:2a:eb:d9:8f:73:33:f5:95:22:17:68:95:
         5d:e3:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:22:57 2026 by rpki-client