This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/VeHqLROfdS_jL-AwmtThhDT6_is.roa
File:                     VeHqLROfdS_jL-AwmtThhDT6_is.roa (raw, json)
Hash identifier:          bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=
Subject key identifier:   55:E1:EA:2D:13:9F:75:2F:E3:2F:E0:30:9A:D4:E1:84:34:FA:FE:2B
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019B7D5D004FD48C90E99B06513822A4D7C2
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/VeHqLROfdS_jL-AwmtThhDT6_is.roa
Signing time:             Fri 02 Jan 2026 06:20:05 +0000
ROA not before:           Fri 02 Jan 2026 06:20:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62416
IP address blocks:        31.7.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:00:4f:d4:8c:90:e9:9b:06:51:38:22:a4:d7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Jan  2 06:20:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55e1ea2d139f752fe32fe0309ad4e18434fafe2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:85:bb:17:1e:36:13:26:a6:e0:b4:58:c9:
                    ac:99:e2:32:0a:4d:da:23:55:cf:91:29:6f:aa:0e:
                    36:0c:52:96:c6:b5:e3:4c:0d:60:03:9d:b2:ef:b6:
                    14:1d:37:b9:e6:2e:a9:03:72:9f:c3:0a:a2:37:82:
                    07:1f:5c:06:a2:fa:44:e5:75:d5:94:3b:9e:e9:1d:
                    82:40:75:2b:d9:f0:53:46:9d:7b:b2:e4:cd:59:e0:
                    26:41:cc:7f:82:34:19:d7:f2:33:cb:b2:25:c8:68:
                    85:54:05:8a:22:6b:5c:c1:41:ca:90:17:37:f6:d7:
                    2e:68:d0:83:f6:dd:92:96:07:fa:ba:51:73:f9:2d:
                    d9:1b:57:1e:53:8f:29:22:06:4a:71:cf:a2:fc:a3:
                    12:b0:ca:a3:dc:60:18:c2:3b:21:49:40:f0:c3:01:
                    ed:96:d2:b2:62:28:75:6e:7e:b0:1d:ff:4f:6a:d5:
                    ef:d0:c0:71:08:14:4f:c9:59:da:8d:81:57:a8:3a:
                    5e:3a:dd:56:41:f2:8a:24:f9:d5:06:69:0b:82:c1:
                    fe:2b:9b:d3:77:d7:4b:59:d4:d8:cf:c7:b8:49:69:
                    38:ce:00:f2:18:12:ae:e2:f9:f8:ec:2d:e1:a9:b5:
                    db:e8:29:50:7b:a3:85:59:63:a0:eb:00:ec:a1:87:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E1:EA:2D:13:9F:75:2F:E3:2F:E0:30:9A:D4:E1:84:34:FA:FE:2B
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/VeHqLROfdS_jL-AwmtThhDT6_is.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.7.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:3e:4c:ff:8f:52:ac:6d:4d:1c:e9:e3:b6:13:dc:a7:83:c2:
         d2:5d:82:b7:db:ef:90:6e:55:b8:73:41:b9:89:30:9f:27:a4:
         51:27:ac:1e:c0:eb:9b:ec:1f:bb:99:aa:2c:ea:c2:15:2d:fd:
         21:55:a8:25:45:22:6e:5a:67:9c:6a:de:5a:53:b3:39:52:32:
         82:8b:3b:00:df:89:e0:63:46:7e:b6:24:20:31:cb:dc:c5:32:
         0a:86:d8:41:b1:94:c5:70:c8:13:00:ea:66:66:e9:b3:1f:a6:
         60:b8:08:dc:2c:f2:31:e4:c6:50:41:84:6d:03:a9:fb:56:d9:
         28:82:95:4d:40:e9:a7:41:f2:82:3d:e3:80:80:b3:97:1a:a5:
         b0:d5:0b:47:05:38:63:66:88:b9:70:de:6f:94:af:9e:b6:43:
         f0:ff:2b:0c:2d:ed:4e:70:57:33:7b:a7:42:29:0b:c4:29:5e:
         12:dd:a7:ee:bb:ac:97:82:c9:3a:31:82:90:f1:d8:8f:62:03:
         77:78:9d:1f:52:76:92:e5:09:0a:bc:24:fd:48:33:2a:a7:e8:
         be:c2:4d:39:ba:ce:2d:9b:a6:f9:49:e2:74:74:b5:3f:2d:e8:
         77:3e:9b:13:50:6e:a6:fa:a1:c1:f0:93:3e:c1:47:63:17:44:
         c5:7c:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:43 2026 by rpki-client