This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/mHsA_rVsySauclXQKxspDTECljE.roa
File:                     mHsA_rVsySauclXQKxspDTECljE.roa (raw, json)
Hash identifier:          flPV0bAd69ESTw3Hk72QzoQVnq7R0pY25e/DdE1uZIQ=
Subject key identifier:   98:7B:00:FE:B5:6C:C9:26:AE:72:55:D0:2B:1B:29:0D:31:02:96:31
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       019B7BA536840946BD05BFA3A29307F640D4
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/mHsA_rVsySauclXQKxspDTECljE.roa
Signing time:             Thu 01 Jan 2026 22:19:43 +0000
ROA not before:           Thu 01 Jan 2026 22:19:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39115
IP address blocks:        77.247.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:36:84:09:46:bd:05:bf:a3:a2:93:07:f6:40:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Jan  1 22:19:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=987b00feb56cc926ae7255d02b1b290d31029631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:1d:3e:f0:e7:4a:fb:32:b2:30:59:7e:4f:
                    41:45:e9:b5:06:95:e8:ae:87:33:1d:13:a7:8b:41:
                    d1:42:72:20:d2:0a:69:6d:7f:9e:38:00:15:da:83:
                    97:03:b4:cb:1f:cc:36:a5:f2:4d:61:c6:ff:a1:1d:
                    d8:8e:fc:b2:53:2f:83:30:0f:89:20:32:80:c0:c2:
                    d8:b2:51:ba:90:c0:bc:50:8d:38:f0:0e:52:8b:75:
                    3e:04:e5:94:17:9f:4c:77:45:d4:2d:0a:1b:fe:bc:
                    a0:37:51:1a:f6:02:88:7f:7d:88:ed:7f:ac:8d:66:
                    0a:f0:78:f0:eb:96:e2:37:37:3e:6c:1d:f0:2e:f4:
                    b1:06:f4:df:a6:59:fe:27:ff:a4:46:2a:d8:34:41:
                    96:63:ac:e5:2d:78:1f:5d:d6:f6:fa:bc:26:ad:a3:
                    02:79:4e:6f:a0:e0:33:fc:82:a1:c8:be:28:60:72:
                    11:a2:6f:da:09:ce:0f:70:e2:cc:79:74:75:17:63:
                    5a:26:cf:28:a1:9f:1c:e3:de:5e:e7:25:46:38:89:
                    8d:33:4c:71:bd:af:f0:d5:b4:bc:fc:74:e1:c9:10:
                    e7:c9:6e:f4:31:32:d6:ab:cb:fc:2e:02:18:84:cc:
                    e7:bb:6b:2e:1c:e4:9a:d4:54:8b:08:e0:66:4b:c0:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7B:00:FE:B5:6C:C9:26:AE:72:55:D0:2B:1B:29:0D:31:02:96:31
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/mHsA_rVsySauclXQKxspDTECljE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.247.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:71:1b:b1:b0:64:3e:32:c7:05:04:07:22:65:a2:27:2a:
         a9:39:59:19:c5:38:8d:fd:85:f3:61:7d:47:f6:10:cd:c3:67:
         ec:51:05:29:bd:9f:e5:1e:ca:d6:11:7f:c8:8e:19:38:4a:e7:
         a6:93:89:76:f3:06:42:96:21:ea:9d:56:8d:20:e4:93:26:79:
         5b:6f:4e:62:69:e4:2a:a5:2c:f2:14:b1:37:ea:3a:ca:00:ec:
         b6:ac:a3:25:0f:ca:06:2d:7e:f1:9a:bb:b7:6f:77:0e:f9:46:
         7d:46:8d:6f:ff:99:a8:39:e6:83:a6:5d:e8:a7:9a:9b:a0:0e:
         20:4c:a4:cf:1a:2d:02:46:59:f9:ec:60:53:03:52:5a:a6:f9:
         81:e2:18:c6:c8:cf:ac:07:2c:9d:58:51:fd:f6:d6:fe:ae:6c:
         61:0a:8e:4c:e4:b4:92:12:cd:19:9f:ce:15:d8:bd:c4:7f:85:
         c4:31:d2:d0:5b:6e:0f:24:64:13:79:c3:71:2d:d5:ff:38:88:
         cc:2e:86:e9:b9:24:a7:e4:ca:94:97:66:c9:be:ca:fc:53:36:
         1d:4b:44:74:43:d8:04:ae:fb:38:18:a3:71:f9:4c:7f:0f:d8:
         13:e8:78:fb:be:ed:64:a7:c9:16:b4:65:6d:ec:d7:78:a4:73:
         48:7b:45:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:02 2026 by rpki-client