This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/e1omXpCIQpnerGyCBf44XvMH7b8.roa
File:                     e1omXpCIQpnerGyCBf44XvMH7b8.roa (raw, json)
Hash identifier:          WuuVal2MbC5TVrn+qWtOZo1dB1Kr34wJojmJ2NY5UPQ=
Subject key identifier:   7B:5A:26:5E:90:88:42:99:DE:AC:6C:82:05:FE:38:5E:F3:07:ED:BF
Certificate issuer:       /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial:       019B7E383549960BB4750419EAFBEDDFC2A5
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/e1omXpCIQpnerGyCBf44XvMH7b8.roa
Signing time:             Fri 02 Jan 2026 10:19:31 +0000
ROA not before:           Fri 02 Jan 2026 10:19:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        77.83.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:35:49:96:0b:b4:75:04:19:ea:fb:ed:df:c2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
        Validity
            Not Before: Jan  2 10:19:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b5a265e90884299deac6c8205fe385ef307edbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:71:b5:2c:64:80:a3:8e:18:ab:83:9b:a7:
                    cf:82:e9:f9:f4:3d:b7:4e:1f:67:4a:a7:f9:f7:16:
                    1d:ef:64:a9:70:52:51:18:03:7a:81:3a:10:a6:4a:
                    69:c9:85:13:c1:09:be:b9:90:0f:5c:c4:6f:1f:44:
                    3f:88:fd:a9:07:58:fe:b5:18:f5:09:27:53:92:72:
                    b2:d7:4f:96:d5:6b:47:b5:f4:da:ba:1c:71:5a:12:
                    33:e0:3b:41:a1:5b:7b:42:28:b2:32:64:2b:f7:24:
                    d9:7d:4d:d0:b8:f6:e4:3d:08:ad:18:3d:7c:fb:46:
                    b5:11:cb:98:18:98:65:6b:5e:30:50:93:4c:22:f5:
                    75:17:99:29:b3:c2:3c:8e:55:ad:f0:1a:21:ef:de:
                    6a:f2:c7:1d:37:3a:f9:94:76:c8:04:11:36:34:4d:
                    98:b0:88:4a:18:bb:89:5f:48:97:e8:34:66:d5:54:
                    4a:7a:59:40:ed:71:88:96:24:1f:c2:90:7c:a5:2b:
                    8f:82:09:71:8b:57:ac:33:eb:96:be:6f:d2:1e:da:
                    3b:ae:56:f9:3d:52:14:3b:2b:71:82:cb:3b:0d:80:
                    d4:79:56:13:17:82:38:dd:41:88:0e:be:44:aa:3b:
                    a7:4f:1e:d6:a5:00:08:e5:57:23:dc:d6:a9:c5:cb:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5A:26:5E:90:88:42:99:DE:AC:6C:82:05:FE:38:5E:F3:07:ED:BF
            X509v3 Authority Key Identifier:
                keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/e1omXpCIQpnerGyCBf44XvMH7b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:3f:55:85:26:eb:cb:89:fd:62:75:54:a0:ff:83:58:43:64:
         18:e5:d4:23:bb:9a:5d:d5:46:89:17:56:83:aa:cb:3f:79:ec:
         7c:e5:b7:99:38:02:8c:27:1b:ae:0c:05:d5:2d:33:b3:5a:b9:
         61:19:7c:2f:84:50:74:c5:28:63:eb:08:fa:6a:81:0b:f9:5e:
         54:44:cd:63:ee:5d:54:a9:80:3b:59:55:40:61:35:bb:4a:e4:
         ff:40:88:75:93:07:38:6d:ba:04:75:f4:93:b7:60:39:13:03:
         59:c8:d5:ea:2c:fc:9f:ef:00:ee:e0:e5:62:12:65:ae:a1:66:
         be:94:59:f3:d9:7c:39:f1:0d:5a:11:06:4e:b8:7a:7f:3e:26:
         27:72:8c:11:19:ce:12:53:7e:73:da:13:9b:00:78:be:cd:c4:
         e4:f2:65:f8:3c:b3:27:28:e6:32:0a:01:28:75:99:41:5c:6a:
         70:6c:74:91:df:c2:54:18:b9:fd:16:b2:f9:11:4b:cd:4f:49:
         24:dd:6b:4d:ba:c4:3f:20:fc:96:db:4a:6b:e6:0b:2f:ea:fe:
         76:68:4f:14:4f:4f:c9:d4:18:d3:06:9a:c4:50:63:fd:37:d8:
         20:9b:df:41:96:5a:00:59:11:e8:24:fe:df:e8:60:5a:5a:f3:
         20:68:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:40:12 2026 by rpki-client