This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/CWwWa_vyGj82X1p5y-DJ0i4N8DE.roa
File:                     CWwWa_vyGj82X1p5y-DJ0i4N8DE.roa (raw, json)
Hash identifier:          7hbb3g71VwbXfNDGI9fECeYzclmiM8kG/wyWGXifwrA=
Subject key identifier:   09:6C:16:6B:FB:F2:1A:3F:36:5F:5A:79:CB:E0:C9:D2:2E:0D:F0:31
Certificate issuer:       /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial:       019B797E0C259D950222C5AE930CEE855E3B
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/CWwWa_vyGj82X1p5y-DJ0i4N8DE.roa
Signing time:             Thu 01 Jan 2026 12:17:42 +0000
ROA not before:           Thu 01 Jan 2026 12:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208885
IP address blocks:        95.85.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:0c:25:9d:95:02:22:c5:ae:93:0c:ee:85:5e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
        Validity
            Not Before: Jan  1 12:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=096c166bfbf21a3f365f5a79cbe0c9d22e0df031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:f7:3a:54:1a:b7:ba:7b:d8:3c:f4:4f:b5:
                    e7:a3:1d:7a:b9:df:81:26:ff:a9:e8:73:3d:0d:38:
                    c8:34:7a:f4:16:58:af:f2:2d:07:e2:67:36:6e:b1:
                    67:f2:6e:2a:9a:6e:4a:08:80:a9:06:16:ed:a4:c7:
                    1a:90:20:c9:a2:15:43:ba:30:03:b9:1e:5c:1d:6b:
                    2b:f1:9d:24:fc:72:be:b1:bf:1f:df:2b:2b:fc:c3:
                    86:ad:66:a9:63:d0:bd:17:4c:9a:a7:4a:ac:3a:9f:
                    08:be:60:5a:77:e4:2c:f7:0c:73:bc:f1:1a:42:ba:
                    22:40:12:c4:8a:4c:db:6d:1d:a9:eb:58:6b:46:4e:
                    82:48:f3:25:07:66:ed:a6:54:df:bc:13:cd:19:a6:
                    32:3b:5b:a0:d4:49:8c:75:24:aa:d8:24:17:f8:37:
                    31:59:4a:91:d3:83:ef:82:07:c7:32:8a:23:0d:f6:
                    32:02:c7:f5:b8:e8:e5:c4:a6:da:66:8e:7e:75:03:
                    f9:7d:d8:21:0f:c3:4e:98:87:7c:71:5b:65:2b:a3:
                    2c:1e:9e:e2:a5:96:91:6f:dc:3c:d2:81:7b:38:ae:
                    be:da:30:f5:8a:5b:ff:cc:be:da:6e:98:22:ac:60:
                    a6:ba:a6:6d:36:b8:a6:94:55:1c:0d:32:31:9d:d1:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6C:16:6B:FB:F2:1A:3F:36:5F:5A:79:CB:E0:C9:D2:2E:0D:F0:31
            X509v3 Authority Key Identifier:
                keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/CWwWa_vyGj82X1p5y-DJ0i4N8DE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.85.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:be:ed:c5:04:37:70:b7:e2:4f:e1:d2:42:5a:82:e4:9c:c0:
         3c:c4:8e:ee:b0:74:ed:09:74:05:cc:f2:9c:fa:66:ed:f6:d3:
         de:6e:a6:32:87:9e:47:62:00:84:f3:3d:32:c2:35:d1:9e:61:
         2a:c7:06:a0:08:ae:4d:83:27:40:d7:3b:41:99:84:b5:30:ae:
         07:91:36:a1:e2:6b:43:6c:70:a1:1c:96:7a:b2:40:4e:60:9f:
         13:35:0d:27:29:94:bd:bb:0e:c6:e2:5c:a5:7b:68:55:e5:d2:
         35:6d:30:90:ab:27:b5:21:97:34:70:d1:1c:b3:e7:4f:97:ec:
         ec:df:1f:33:a7:52:7a:3b:b6:ee:5c:fa:ce:cf:3b:99:13:f0:
         00:47:3a:55:af:81:bc:13:39:ec:a4:50:96:1e:1f:f6:3f:05:
         3b:04:79:62:f1:b8:90:08:0a:60:82:76:ab:e8:41:fb:0e:36:
         9b:6d:3a:e6:da:9f:f8:2d:ec:c5:0d:6e:37:c7:24:02:75:75:
         02:ee:07:6d:93:e8:0a:70:2f:5a:28:97:29:2a:57:ac:3d:eb:
         c2:42:7f:15:ff:2f:99:47:e5:67:2b:8b:8e:3b:77:29:31:56:
         40:5d:c7:aa:f8:53:d6:4c:b5:ba:87:dc:e4:58:e9:90:f3:e9:
         2d:fa:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:38:14 2026 by rpki-client