This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/dxGf9vfm8QE59GMiUFHQVxIMbGE.roa
File:                     dxGf9vfm8QE59GMiUFHQVxIMbGE.roa (raw, json)
Hash identifier:          FZSqF3WaWChaxCSkXHiLYFuVolX85yPIbAjmKkSJQAM=
Subject key identifier:   77:11:9F:F6:F7:E6:F1:01:39:F4:63:22:50:51:D0:57:12:0C:6C:61
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       019B7E37F3DEB6BE14097FDA6B107228B270
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/dxGf9vfm8QE59GMiUFHQVxIMbGE.roa
Signing time:             Fri 02 Jan 2026 10:19:14 +0000
ROA not before:           Fri 02 Jan 2026 10:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     65593
IP address blocks:        84.44.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:f3:de:b6:be:14:09:7f:da:6b:10:72:28:b2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  2 10:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77119ff6f7e6f10139f463225051d057120c6c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:eb:2e:e7:10:cd:9b:4c:28:35:c6:22:24:
                    4c:a8:ed:85:1f:e8:d9:96:c9:0d:6f:a7:86:c4:ac:
                    2b:8b:60:5a:8d:25:f5:6f:91:12:5f:aa:bc:69:23:
                    d4:4e:1d:a7:cf:df:cf:4f:83:de:eb:2b:ab:c6:55:
                    03:5f:fa:e6:0b:9a:e3:59:a7:4f:74:f9:b4:be:90:
                    fd:83:f4:19:ed:c3:4f:c2:9b:f5:0b:12:d3:bc:cd:
                    97:04:19:74:f3:42:75:a1:31:b8:de:8c:f5:8e:02:
                    58:20:f5:a8:36:01:94:66:88:3c:21:23:ee:82:a2:
                    bd:2f:e4:3d:54:78:d9:e0:ae:a8:99:44:48:19:9d:
                    ce:ae:63:b0:e0:7f:2e:ef:46:16:0a:60:b7:67:b9:
                    4c:b3:30:d4:59:23:68:30:0f:fd:cf:3f:55:2b:0b:
                    2d:58:ba:8d:0b:03:03:10:7c:4b:a3:dc:c5:73:c3:
                    50:0d:d8:0e:bd:75:80:a5:53:95:67:8f:95:14:99:
                    74:09:a6:70:e6:e6:7f:c4:06:38:26:14:b3:73:3c:
                    14:17:45:3c:e6:3d:f3:1b:b8:cb:3d:a7:d9:11:23:
                    75:11:ff:4a:1e:0d:4f:81:2b:21:13:6a:79:96:c9:
                    ed:63:05:5f:68:a0:18:cc:81:d9:ad:60:6a:22:d1:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:11:9F:F6:F7:E6:F1:01:39:F4:63:22:50:51:D0:57:12:0C:6C:61
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/dxGf9vfm8QE59GMiUFHQVxIMbGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.44.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:76:91:e8:b3:95:1e:55:c0:61:d2:57:9c:53:de:1a:85:
         20:9a:92:ad:cf:c1:38:1d:8e:5a:fb:0b:2b:89:96:80:65:c6:
         85:b7:b3:b6:23:5f:3b:13:d0:0f:ab:a3:3d:ba:46:04:34:f5:
         dd:c0:91:f5:32:cb:1f:86:67:f6:4f:5e:29:2e:03:87:9e:f7:
         29:de:b4:8b:26:49:22:5c:35:cf:ba:d3:48:dd:3b:51:5d:0a:
         3b:e1:ec:b2:1f:7c:a5:7f:a1:cc:fd:3b:75:3c:6e:ed:b5:ec:
         27:da:2a:71:bd:ec:07:8d:d0:b5:40:66:1c:e5:75:16:65:64:
         34:c8:40:87:87:20:69:ee:a4:a1:2f:43:b4:cb:ff:39:7e:88:
         d8:80:88:20:7a:04:b6:23:dd:d6:b3:cc:83:07:ae:50:c5:e0:
         79:5c:4b:22:04:ed:45:33:5d:d0:ca:e1:4b:fd:49:3e:d3:6d:
         f7:72:8f:a1:2f:2c:07:54:54:3f:a7:1e:3c:7d:47:74:10:24:
         21:4c:bb:35:8e:0a:f2:a5:5f:b7:0b:51:9a:f0:4b:1f:fb:7d:
         8d:42:1d:7a:0c:8d:70:05:d1:e3:a0:33:ac:f7:9c:19:75:38:
         9b:78:9c:6f:3c:96:ff:bb:dd:9f:f2:78:2d:49:74:cf:91:1a:
         c1:f9:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:51 2026 by rpki-client