This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/VuSedNq080u42oe8PtK90QTYvdk.roa
File:                     VuSedNq080u42oe8PtK90QTYvdk.roa (raw, json)
Hash identifier:          ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=
Subject key identifier:   56:E4:9E:74:DA:B4:F3:4B:B8:DA:87:BC:3E:D2:BD:D1:04:D8:BD:D9
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       019B7835536C4228670B688B31BB8BB63C91
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/VuSedNq080u42oe8PtK90QTYvdk.roa
Signing time:             Thu 01 Jan 2026 06:18:39 +0000
ROA not before:           Thu 01 Jan 2026 06:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12871
IP address blocks:        37.188.64.0/20 maxlen: 24
                          94.229.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:53:6c:42:28:67:0b:68:8b:31:bb:8b:b6:3c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Jan  1 06:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56e49e74dab4f34bb8da87bc3ed2bdd104d8bdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:b9:6a:82:82:b6:8e:72:5b:36:f0:c9:e9:
                    a7:94:1a:ce:ab:da:cc:e7:e2:d9:99:df:b5:06:80:
                    d1:1f:eb:80:4d:f5:74:da:b3:cb:8a:f7:61:85:2b:
                    f5:fa:a1:a4:e1:fa:5d:8a:52:c4:98:03:a8:fd:6b:
                    d6:1d:dd:9b:05:f6:43:dd:da:ac:97:eb:8b:23:e5:
                    9a:a2:ea:4b:7b:04:fd:1b:80:e5:ff:34:83:5a:59:
                    bd:d5:0c:56:eb:7c:ca:10:96:15:c3:54:34:4a:6f:
                    b0:d1:6f:cd:8e:6e:d2:58:48:5d:34:9c:e0:3e:69:
                    f4:fb:98:84:50:bb:a2:9e:53:48:85:3d:36:5c:78:
                    d4:e5:37:db:8e:94:6d:f0:66:98:16:4c:4b:c4:a1:
                    a2:3b:e5:eb:43:08:49:41:4f:b8:da:69:39:46:7c:
                    41:99:54:ed:02:35:91:91:af:7d:22:46:e1:b3:0e:
                    08:2c:5c:0f:1f:96:29:71:f7:c9:f2:85:18:6c:0e:
                    d3:9c:56:d9:0a:c2:44:2a:ad:5a:de:36:1d:4d:42:
                    8d:95:d9:a6:28:1a:47:d9:9d:4d:34:2d:60:7f:78:
                    14:77:1f:d5:24:72:d6:2c:33:1a:5e:09:b6:b9:5b:
                    1f:cf:86:eb:f5:59:ac:07:dd:6f:e5:2b:03:f9:1d:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:9E:74:DA:B4:F3:4B:B8:DA:87:BC:3E:D2:BD:D1:04:D8:BD:D9
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/VuSedNq080u42oe8PtK90QTYvdk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.188.64.0/20
                  94.229.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:b5:26:7f:7d:29:6f:02:21:e9:ed:8f:75:80:c2:cc:8f:99:
         ce:92:5e:56:3f:45:4e:55:5d:45:66:b2:5c:29:a3:0d:fb:9f:
         2a:bf:a9:5f:ff:69:45:a6:be:cd:f1:fc:c7:26:54:4f:fe:cb:
         0a:1d:ca:b8:51:8e:2d:5e:40:fc:ba:04:34:51:df:09:3a:ff:
         c5:87:1c:75:89:79:62:60:6f:77:28:d7:36:b4:61:52:0e:d0:
         36:da:4d:5a:cc:cc:23:31:e3:80:9c:70:25:15:6a:c4:8b:17:
         6e:4e:46:c6:86:4c:50:1b:01:4b:16:37:ac:f5:16:7d:f0:36:
         2e:0c:76:ee:d7:ea:58:6b:5a:3d:e1:03:19:a5:91:7a:41:d0:
         d8:09:3e:c3:f8:73:9b:88:c2:e6:64:15:1b:2e:cb:7c:e7:7f:
         47:f8:73:10:17:93:21:c8:2d:81:f7:0b:f4:1d:99:86:30:4f:
         1a:17:8a:cb:36:c2:13:fd:6f:b1:92:92:94:3c:bc:53:f9:93:
         bc:55:63:fa:94:c9:6b:9e:de:5a:a2:08:52:0b:bd:53:29:b7:
         00:4d:28:1f:8d:44:bc:c9:a2:cf:33:95:4b:4e:3c:82:d8:63:
         fd:d2:ef:4c:ea:92:2d:b1:6e:97:10:0e:78:73:34:df:e6:0d:
         6a:9a:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:37:28 2026 by rpki-client