This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/VdHoxGlnRqHLH1BFJzKzY5i5REw.roa
File:                     VdHoxGlnRqHLH1BFJzKzY5i5REw.roa (raw, json)
Hash identifier:          dsaCJE0OYhxYSMRnj1r3I0s5ntGNaUFaI5WVluKFvG4=
Subject key identifier:   55:D1:E8:C4:69:67:46:A1:CB:1F:50:45:27:32:B3:63:98:B9:44:4C
Certificate issuer:       /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial:       019B7C7F70230F7DB5B151CF439E6C00936A
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/VdHoxGlnRqHLH1BFJzKzY5i5REw.roa
Signing time:             Fri 02 Jan 2026 02:18:05 +0000
ROA not before:           Fri 02 Jan 2026 02:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203914
IP address blocks:        158.94.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:70:23:0f:7d:b5:b1:51:cf:43:9e:6c:00:93:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
        Validity
            Not Before: Jan  2 02:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55d1e8c4696746a1cb1f50452732b36398b9444c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e1:5c:15:5f:e9:fb:4b:cd:b9:eb:5c:95:a7:
                    02:ab:65:e6:64:83:66:86:cd:11:15:f2:4d:7f:31:
                    2d:c5:07:ff:7e:9e:ee:60:06:1f:d8:15:1d:4e:20:
                    93:7f:7a:3e:2a:f4:26:e8:29:97:98:68:21:a7:4c:
                    d9:28:d8:b3:58:4e:11:1e:12:d4:61:d2:00:36:82:
                    9e:97:95:c3:8f:27:eb:74:df:49:3d:00:08:49:48:
                    3a:db:44:1f:7e:25:1c:85:62:37:05:8a:4a:8c:99:
                    5a:4c:99:32:b3:1b:fd:95:28:5f:48:16:28:a4:f0:
                    7d:d0:db:ec:f7:70:3e:35:76:4c:76:c9:50:2c:4e:
                    68:57:13:7a:59:30:9b:b2:c0:a4:cc:6e:0e:2b:1a:
                    cc:db:6e:ae:34:b0:c5:91:9e:42:93:26:15:28:45:
                    02:ae:65:15:8c:9f:b3:66:d9:3e:65:c0:f5:bd:53:
                    40:6f:04:e0:71:1a:3a:de:d9:26:72:66:2d:26:38:
                    95:67:a2:3f:29:ee:7b:3e:dd:37:f5:33:57:9f:e7:
                    9b:5f:2c:90:3d:b9:92:17:3f:81:5d:1f:b4:45:da:
                    1e:ce:fa:2d:b5:b3:f3:6e:f2:de:e4:6c:46:7b:d1:
                    2b:ad:10:79:25:3c:2d:b7:6f:38:2c:1e:5f:9f:78:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:E8:C4:69:67:46:A1:CB:1F:50:45:27:32:B3:63:98:B9:44:4C
            X509v3 Authority Key Identifier:
                keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/VdHoxGlnRqHLH1BFJzKzY5i5REw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.94.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:31:7e:a6:9c:ed:9e:d2:40:ea:13:6b:a7:fb:2e:b8:e1:ad:
         de:24:25:48:a9:db:31:27:fa:8c:a4:5c:ef:b3:56:99:26:ef:
         68:09:99:a8:64:02:c7:0d:7f:ff:bc:8c:6d:df:c9:ee:44:21:
         9b:8c:23:64:88:a5:37:01:82:97:f1:7d:12:88:37:f6:51:f0:
         af:08:03:78:60:46:d7:9f:7b:e0:50:fd:b7:83:f7:25:6f:0a:
         c3:4a:cc:e6:02:f2:90:bb:32:39:f9:27:19:55:f8:fa:80:3f:
         12:6a:50:39:44:de:4a:e9:db:1b:59:26:d7:7f:03:fb:54:a8:
         4e:51:d7:c7:46:55:1e:de:8e:8d:a3:ed:49:56:7c:a8:d3:b2:
         da:4a:98:31:be:c5:d4:24:26:f6:d1:8d:bd:97:02:5c:8b:5e:
         ca:25:6c:f0:40:73:d4:ab:35:ae:7f:ed:c4:cb:52:e7:ef:57:
         99:ab:e9:a3:17:37:2f:c4:48:20:b3:d2:60:33:41:29:f8:c4:
         31:b8:ed:d0:12:c9:27:ec:75:ed:95:9e:78:2c:61:b6:5b:6e:
         58:d7:90:8d:7e:a1:76:92:f6:6a:28:a6:9f:35:d6:de:87:9a:
         16:a5:bc:b2:a5:2f:7d:a6:a2:47:57:8d:73:50:e6:29:58:97:
         45:46:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:45 2026 by rpki-client