This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/_VVNfxdA5_FHj05YYq547OSKmlQ.roa
File:                     _VVNfxdA5_FHj05YYq547OSKmlQ.roa (raw, json)
Hash identifier:          13IEzG/o1pmkzrgbkejU8IZuzD7A6Ft+aR2tUe+BCq8=
Subject key identifier:   FD:55:4D:7F:17:40:E7:F1:47:8F:4E:58:62:AE:78:EC:E4:8A:9A:54
Certificate issuer:       /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial:       019B79ECDF5AC2233C93DDE2C7D405C7B5C7
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/_VVNfxdA5_FHj05YYq547OSKmlQ.roa
Signing time:             Thu 01 Jan 2026 14:18:45 +0000
ROA not before:           Thu 01 Jan 2026 14:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207044
IP address blocks:        185.106.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:df:5a:c2:23:3c:93:dd:e2:c7:d4:05:c7:b5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
        Validity
            Not Before: Jan  1 14:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd554d7f1740e7f1478f4e5862ae78ece48a9a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:71:aa:e8:7f:68:0d:2c:85:7a:2e:99:da:
                    9d:0a:d5:5c:e1:31:6a:f8:54:63:d2:5d:25:34:a0:
                    2f:eb:82:cd:87:c3:16:74:d6:96:55:7c:1a:ee:e9:
                    85:f9:d7:1b:22:2d:14:6e:80:c6:e3:90:5f:54:28:
                    bc:69:f2:1a:d0:87:be:40:67:1a:ee:0f:75:a9:57:
                    26:8f:7c:b1:db:43:97:17:f1:85:cc:a1:96:71:50:
                    b0:cf:07:25:f8:8e:5b:d9:4d:7e:5a:b8:89:cc:e5:
                    90:88:a9:ea:23:74:f1:c0:92:99:79:76:6c:92:bc:
                    de:18:47:a6:84:04:0e:a5:bd:c7:4b:21:be:4e:8b:
                    93:82:e6:47:3c:b2:0c:64:d5:9d:c0:78:ea:9a:0d:
                    79:2a:e1:ab:89:3b:73:42:ae:d0:15:40:65:01:0c:
                    43:fa:79:55:84:7e:c8:e0:91:94:45:92:40:54:a9:
                    38:e7:6c:3d:37:b0:f0:d2:a6:ba:c3:c9:36:5d:f4:
                    0e:8a:8b:b2:99:1b:93:e6:17:8a:c6:f3:7b:f8:95:
                    6a:f2:af:07:d7:b5:1b:a0:3b:24:ea:c9:13:da:a5:
                    40:1b:5e:86:e5:ea:03:c7:4d:8e:5c:fd:41:d7:4c:
                    a3:81:68:67:cd:fe:01:12:c3:c7:4e:77:b7:62:a8:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:55:4D:7F:17:40:E7:F1:47:8F:4E:58:62:AE:78:EC:E4:8A:9A:54
            X509v3 Authority Key Identifier:
                keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/_VVNfxdA5_FHj05YYq547OSKmlQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:ef:4d:68:ef:89:6b:f8:6e:cd:27:93:13:f4:39:8f:e9:aa:
         ba:7d:fe:e9:4e:e5:c6:2a:60:17:09:ea:e6:f2:6d:1c:9c:8d:
         0f:f0:dc:68:5e:de:90:1d:04:83:1d:61:21:49:08:31:6a:11:
         67:ce:6f:83:f7:56:ed:40:4a:f2:f2:0a:42:af:89:f7:7c:63:
         c3:98:90:01:3c:f4:fb:47:b3:45:8b:f4:79:d4:3a:31:af:d8:
         2b:76:9b:f6:00:5e:0a:06:31:68:2a:7d:96:9a:17:74:d9:9a:
         75:c6:32:c2:45:7b:20:53:74:76:fc:4b:19:7e:8e:a6:3d:68:
         2d:ad:88:d5:40:24:8c:0a:3f:1a:72:46:e0:a2:71:f2:66:74:
         30:f0:a7:3e:09:64:ad:7c:12:9d:95:ba:31:2a:fb:dc:14:90:
         e1:27:21:de:1a:0d:2d:3e:e5:d6:9d:69:cc:6f:69:7e:6b:5f:
         b7:d0:2e:e7:19:5c:40:46:22:5e:fb:0a:23:74:63:61:67:a9:
         75:00:a1:00:37:63:51:32:9f:11:6c:cf:60:ad:b2:2f:43:0a:
         af:3f:b9:a7:06:aa:e4:f3:b9:66:f9:fc:a0:59:96:4e:e8:ce:
         fe:a6:b7:6f:3a:57:72:c7:1e:41:e4:dd:97:f9:47:c4:b4:dc:
         bb:f5:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:26 2026 by rpki-client