This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/05pxQUZ3O5g7XwtchpzgXkYXLrM.roa
File:                     05pxQUZ3O5g7XwtchpzgXkYXLrM.roa (raw, json)
Hash identifier:          pSBaxXr7aIa0AV76Ml4OFVZIYb8NNW03JRmIFNcA92E=
Subject key identifier:   D3:9A:71:41:46:77:3B:98:3B:5F:0B:5C:86:9C:E0:5E:46:17:2E:B3
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       019B7CEE4726A2CB2658E3E1B8EECCE50734
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/05pxQUZ3O5g7XwtchpzgXkYXLrM.roa
Signing time:             Fri 02 Jan 2026 04:19:09 +0000
ROA not before:           Fri 02 Jan 2026 04:19:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28747
IP address blocks:        77.241.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:47:26:a2:cb:26:58:e3:e1:b8:ee:cc:e5:07:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Jan  2 04:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d39a714146773b983b5f0b5c869ce05e46172eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:53:12:3d:d1:21:57:21:d8:26:84:22:21:
                    49:88:19:22:5c:6f:69:80:56:a8:07:a8:b7:8f:f3:
                    dd:ab:03:84:c0:cd:c0:38:8b:86:56:0d:f7:83:15:
                    7b:b1:99:6c:a8:d0:05:53:e7:c9:15:8b:b5:e9:6e:
                    ca:be:e9:c6:5d:fb:7e:28:33:3c:a4:5b:6e:b5:93:
                    d4:86:f7:8f:f1:df:1c:e8:b5:47:2c:48:1a:cf:e1:
                    22:6c:a1:35:26:5b:9d:8e:61:19:a6:1b:6a:6f:77:
                    bf:bf:11:fb:b1:ab:71:7e:f8:6d:31:77:34:9e:e6:
                    0e:38:48:45:ed:3e:c0:b2:26:b3:18:3b:36:90:b2:
                    a4:4a:db:a2:4d:a4:97:c1:60:68:c2:5e:fb:78:f5:
                    2c:59:68:a5:5f:8b:da:83:42:35:f7:2d:86:8e:d7:
                    f5:30:13:4d:4b:43:b0:0d:bf:18:58:93:df:37:84:
                    32:3c:cf:f7:1c:ea:82:d9:7d:6c:f9:cb:61:fb:a9:
                    80:c3:71:18:d2:a1:21:77:44:18:e8:02:cc:1c:99:
                    a6:92:0e:d5:fe:cf:c7:6a:ec:71:21:02:c5:f7:ac:
                    38:54:97:b0:1b:e2:0c:c3:b9:cc:0f:0e:e2:d4:69:
                    05:27:b0:c5:47:d4:c6:fb:bc:e0:0d:40:b5:6b:69:
                    00:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9A:71:41:46:77:3B:98:3B:5F:0B:5C:86:9C:E0:5E:46:17:2E:B3
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/05pxQUZ3O5g7XwtchpzgXkYXLrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.241.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:45:7c:cc:7d:70:1f:fd:ae:a7:d3:34:f7:1d:c5:af:04:52:
         64:7e:d4:2c:ee:55:b4:0c:dc:56:6d:f2:92:bf:33:64:06:b3:
         ee:6e:96:a8:f9:b7:85:e1:3b:61:b5:ea:39:28:b9:af:2e:70:
         59:ce:b3:45:2e:5b:ea:19:4e:50:28:71:b3:e9:9a:e7:34:9b:
         90:a3:b1:03:46:94:44:15:b2:06:63:24:59:a6:fe:9e:17:0b:
         db:2e:10:29:e5:18:de:3f:63:47:74:7b:dc:1b:06:6d:4f:59:
         af:87:94:88:46:36:55:95:ad:03:0f:58:50:ea:67:9b:84:58:
         22:95:96:58:d7:10:e7:be:70:71:d6:a8:98:ce:ed:51:af:74:
         f9:98:51:67:4f:91:e2:2a:f1:71:41:51:90:99:33:d7:0d:5c:
         bd:6a:8e:05:dc:a5:b4:75:0e:14:2f:3a:b5:9e:79:92:6a:ee:
         24:d0:0f:48:39:07:1d:9f:56:b2:a8:2d:43:df:89:0a:a1:08:
         e9:a7:bd:69:de:54:5d:6f:73:63:fe:42:b6:fe:5c:87:27:a9:
         8e:2e:e6:51:01:75:ac:a4:1d:07:ad:b2:cf:24:26:de:bf:57:
         47:e2:74:4f:55:72:40:98:10:8e:d2:03:e2:2a:ce:29:0e:5f:
         89:a5:ab:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87kcmossmWOPhuO7M5Qc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTEwYWNjZTMzYWM4NTAxMWNhOGMyMmQyMDAxNjY2ZTQ1
YjkzNzcwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzlhNzE0MTQ2NzczYjk4M2I1ZjBiNWM4NjljZTA1ZTQ2MTcyZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloxTEj3RIVch2CaEIiFJiBkiXG9p
gFaoB6i3j/PdqwOEwM3AOIuGVg33gxV7sZlsqNAFU+fJFYu16W7KvunGXft+KDM8
pFtutZPUhveP8d8c6LVHLEgaz+EibKE1JludjmEZphtqb3e/vxH7satxfvhtMXc0
nuYOOEhF7T7AsiazGDs2kLKkStuiTaSXwWBowl77ePUsWWilX4vag0I19y2Gjtf1
MBNNS0OwDb8YWJPfN4QyPM/3HOqC2X1s+cth+6mAw3EY0qEhd0QY6ALMHJmmkg7V
/s/HauxxIQLF96w4VJewG+IMw7nMDw7i1GkFJ7DFR9TG+7zgDUC1a2kAGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOacUFGdzuYO18LXIac4F5GFy6zMB8GA1UdIwQY
MBaAFOIRCszjOshQEcqMItIAFmbkW5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEt
ZDMzZjA4ZjNhNDhkLzEvMDVweFFVWjNPNWc3WHd0Y2hwemdYa1lYTHJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEtZDMzZjA4ZjNhNDhk
LzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfFfMA0G
CSqGSIb3DQEBCwUAA4IBAQAuRXzMfXAf/a6n0zT3HcWvBFJkftQs7lW0DNxWbfKS
vzNkBrPubpao+beF4Tthteo5KLmvLnBZzrNFLlvqGU5QKHGz6ZrnNJuQo7EDRpRE
FbIGYyRZpv6eFwvbLhAp5RjeP2NHdHvcGwZtT1mvh5SIRjZVla0DD1hQ6mebhFgi
lZZY1xDnvnBx1qiYzu1Rr3T5mFFnT5HiKvFxQVGQmTPXDVy9ao4F3KW0dQ4ULzq1
nnmSau4k0A9IOQcdn1ayqC1D34kKoQjpp71p3lRdb3Nj/kK2/lyHJ6mOLuZRAXWs
pB0HrbLPJCbev1dH4nRPVXJAmBCO0gPiKs4pDl+JpavM
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:23:34 2026 by rpki-client