This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/VCtB3XpWALiiYZlR8kJ9-T8jFlM.roa
File:                     VCtB3XpWALiiYZlR8kJ9-T8jFlM.roa (raw, json)
Hash identifier:          PjwhiA7JGNs6MbNHIzd4jnryrVDjAI+5D7u5r33tbKg=
Subject key identifier:   54:2B:41:DD:7A:56:00:B8:A2:61:99:51:F2:42:7D:F9:3F:23:16:53
Certificate issuer:       /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial:       019B7AC8107BA53F4CCDA990296FCABDA49C
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/VCtB3XpWALiiYZlR8kJ9-T8jFlM.roa
Signing time:             Thu 01 Jan 2026 18:18:10 +0000
ROA not before:           Thu 01 Jan 2026 18:18:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        178.236.233.0/24 maxlen: 24
                          178.236.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:10:7b:a5:3f:4c:cd:a9:90:29:6f:ca:bd:a4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
        Validity
            Not Before: Jan  1 18:18:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=542b41dd7a5600b8a2619951f2427df93f231653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:eb:9e:59:73:41:c6:c1:6c:46:5e:02:99:
                    91:5b:b3:72:7a:3e:78:84:de:b9:78:b2:8b:74:df:
                    aa:9c:64:d7:02:29:b4:8c:75:04:d7:f6:54:0c:d9:
                    08:1a:1a:0d:e6:32:04:a1:37:c9:32:90:f4:38:96:
                    ae:77:8f:96:e9:ff:26:ce:02:50:ec:3b:20:3a:56:
                    6d:7e:4a:05:27:0c:90:be:c2:84:de:a6:86:d7:8f:
                    60:dd:92:8b:ff:b3:dc:8e:54:61:b0:d2:98:c5:06:
                    d4:ca:fc:5a:0e:11:c0:bc:b6:b7:c2:d9:31:db:d5:
                    5e:ab:80:d9:ae:33:ca:23:73:69:a6:01:49:70:ef:
                    77:67:ba:5d:2c:70:a9:ea:3e:df:35:8e:f9:72:03:
                    42:7c:62:02:db:cc:aa:b5:2d:f8:5f:b0:a2:0a:88:
                    82:36:f4:8a:56:05:75:eb:65:29:f5:56:8a:94:13:
                    65:32:22:e8:b9:e6:39:ea:87:31:98:8a:fb:9f:16:
                    a3:14:a2:89:89:4a:e0:ac:68:c4:9a:31:45:3b:be:
                    8e:3b:c2:78:74:fa:06:47:3e:7e:53:56:68:79:8e:
                    17:36:87:ca:70:b0:fe:96:92:b9:f5:7f:fa:46:5f:
                    c8:6a:ee:fa:4c:2f:6c:7f:6a:43:25:b9:c6:3e:2d:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2B:41:DD:7A:56:00:B8:A2:61:99:51:F2:42:7D:F9:3F:23:16:53
            X509v3 Authority Key Identifier:
                keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/VCtB3XpWALiiYZlR8kJ9-T8jFlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.233.0/24
                  178.236.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:19:51:f9:de:77:e4:c9:58:56:63:25:66:c3:84:42:9f:74:
         ef:8f:d5:48:7b:fb:2d:60:96:a3:f6:cc:1c:0e:84:2b:ca:5c:
         3d:f0:5e:f5:d9:bf:b4:b8:43:84:c8:b8:97:b4:41:76:0d:37:
         fc:dc:5f:89:8b:56:3e:06:13:b6:58:10:50:a4:2d:42:ae:1f:
         c1:24:ab:a8:37:ea:9b:9b:a5:7a:99:15:10:aa:9b:31:cb:8d:
         d3:38:be:24:a9:36:97:a8:8e:c0:c5:e6:f0:b0:1b:93:09:3c:
         2b:3e:e6:62:b1:08:ad:30:9e:e6:79:8b:fe:5a:c3:46:ef:d3:
         7f:79:62:f1:78:e8:20:b9:5b:04:a8:1b:8c:55:c2:7b:36:ac:
         6b:64:6e:c1:fb:ad:23:21:78:11:fe:34:5b:d9:3f:0e:69:71:
         63:dd:96:ec:05:37:dc:2e:71:b8:81:a3:c8:ca:b7:7c:ba:a7:
         f6:48:16:51:39:59:e4:d0:8e:3e:b4:b1:c4:9c:09:93:cf:5c:
         a9:a2:b4:bb:aa:e0:47:7a:6c:61:6b:a9:c2:45:e7:a9:8a:08:
         1f:1f:55:56:13:0b:b3:5d:2d:ce:21:0e:d0:20:1b:3e:2d:19:
         43:90:c1:99:6a:c8:78:a7:4e:d8:85:60:5d:58:bc:38:2f:82:
         63:e6:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:32:38 2026 by rpki-client