This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/VLAKggAmP_2e5ujcu_orpJmGymk.roa
File:                     VLAKggAmP_2e5ujcu_orpJmGymk.roa (raw, json)
Hash identifier:          R7zarhFK+F6qeI1f2Us/zQph/cT5R9wLEpRj2LShETc=
Subject key identifier:   54:B0:0A:82:00:26:3F:FD:9E:E6:E8:DC:BB:FA:2B:A4:99:86:CA:69
Certificate issuer:       /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial:       019B7C12E3B1FC323817AC61B54D7DBE45A0
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/VLAKggAmP_2e5ujcu_orpJmGymk.roa
Signing time:             Fri 02 Jan 2026 00:19:31 +0000
ROA not before:           Fri 02 Jan 2026 00:19:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210336
IP address blocks:        195.242.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:e3:b1:fc:32:38:17:ac:61:b5:4d:7d:be:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
        Validity
            Not Before: Jan  2 00:19:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54b00a8200263ffd9ee6e8dcbbfa2ba49986ca69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:28:04:ec:7d:f9:5a:36:25:d6:d6:60:cf:
                    ff:25:3a:9d:db:91:36:44:a8:2e:1d:f5:20:53:76:
                    b2:53:9a:e1:7e:88:a8:9b:8d:63:a6:a8:73:84:de:
                    98:66:27:75:1e:6f:c0:1d:97:dc:6b:91:d6:ba:48:
                    48:a3:f0:91:4f:d9:be:8d:08:a7:95:db:5b:c8:e0:
                    46:33:3a:7c:60:a1:2d:2d:68:b0:ab:2d:51:c4:78:
                    ae:e1:5b:7f:85:3e:c7:1a:e7:24:96:60:3a:d0:d8:
                    41:05:06:d7:37:ae:28:c3:6a:3d:4d:a0:9a:08:07:
                    d9:51:8d:f3:1b:0a:38:9a:db:8d:a6:e3:de:33:2a:
                    23:4d:da:89:6a:aa:ec:69:78:a7:15:73:51:d7:c8:
                    e4:a9:47:96:ce:14:93:84:32:e1:8b:77:8d:83:8a:
                    25:25:4d:fc:3b:14:7a:7c:7e:fc:71:f8:61:c8:73:
                    bd:b5:f9:9a:63:d9:70:1e:44:48:c4:03:da:d0:a7:
                    68:24:22:51:81:ce:f4:d2:d8:ea:d7:96:a8:86:29:
                    6c:36:bb:99:fe:0b:91:05:4b:8f:ef:26:e5:37:18:
                    35:6f:03:14:8b:91:71:85:c8:a8:a7:78:1d:6d:af:
                    d8:da:b4:c9:d9:9a:a3:15:6b:da:db:15:09:42:fb:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:0A:82:00:26:3F:FD:9E:E6:E8:DC:BB:FA:2B:A4:99:86:CA:69
            X509v3 Authority Key Identifier:
                keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/VLAKggAmP_2e5ujcu_orpJmGymk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.242.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:29:c0:25:02:38:2b:6d:54:8f:d3:2f:2b:2b:00:5c:5f:
         75:0d:a1:56:fb:ef:d1:5a:ac:a5:8a:6e:f9:70:1a:a5:51:ec:
         1e:f4:34:c5:fa:fc:e5:39:70:f6:95:27:52:00:17:23:cb:b9:
         36:46:d3:e2:eb:47:64:7e:3c:e8:33:32:4c:2f:34:73:d3:a7:
         39:14:49:b6:48:03:1d:52:49:42:a0:24:6d:f6:2b:01:77:12:
         b9:94:43:f9:b9:67:f4:63:df:6c:b0:a4:90:5b:a8:b7:ff:58:
         3d:0b:a0:38:c3:0b:9f:f6:21:44:0a:25:51:07:33:97:bc:2a:
         a3:d7:af:db:f1:d4:4c:28:97:e7:3b:27:f8:2f:9e:49:e6:3e:
         39:35:d8:9e:7f:a2:da:82:1c:36:d2:01:c7:26:73:17:fa:f0:
         a1:b0:8d:ca:71:1c:f1:22:de:5f:a5:cf:63:8b:34:d8:fe:57:
         6e:78:e3:4f:d9:67:45:3e:7b:9f:90:c1:6d:be:6d:79:4e:af:
         bb:64:f2:79:23:bb:d6:e2:96:bc:01:70:c4:68:79:03:ae:78:
         53:72:2c:71:9a:66:b8:26:1d:89:8a:d6:ea:3c:24:e5:67:b5:
         42:b9:fe:5d:ac:4b:b2:b4:af:ea:cd:4a:e8:f9:a7:d8:f9:e5:
         6a:b8:57:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:16:14 2026 by rpki-client