This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GuiFr7inQEMwXv2bi-thSd6WMvA.roa
File:                     GuiFr7inQEMwXv2bi-thSd6WMvA.roa (raw, json)
Hash identifier:          dYby5fxhhcZ1isK5fwr98Nr2V2u3QJ3gFxuIg1FKxpM=
Subject key identifier:   1A:E8:85:AF:B8:A7:40:43:30:5E:FD:9B:8B:EB:61:49:DE:96:32:F0
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B775914002EDD3910DFBB14E132FD477D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GuiFr7inQEMwXv2bi-thSd6WMvA.roa
Signing time:             Thu 01 Jan 2026 02:18:05 +0000
ROA not before:           Thu 01 Jan 2026 02:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210220
IP address blocks:        77.65.176.0/22 maxlen: 24
                          77.65.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:14:00:2e:dd:39:10:df:bb:14:e1:32:fd:47:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1ae885afb8a74043305efd9b8beb6149de9632f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bf:86:c0:29:3e:f8:30:9a:39:62:f8:92:37:
                    1d:d3:c0:5b:82:2b:1e:a5:26:e9:4e:3a:1f:c2:87:
                    17:ba:79:22:95:8a:f6:61:95:36:d0:68:d9:0d:e1:
                    82:d0:56:12:76:70:23:b5:8d:c7:38:42:05:39:fa:
                    7e:7a:4f:a0:10:c4:f4:15:cb:a7:3d:7a:82:48:12:
                    aa:0b:e9:6f:ee:f8:3c:f0:4c:e0:5c:f4:a5:6c:32:
                    e1:cf:0b:b9:6a:c8:50:be:80:f6:91:24:3b:d8:04:
                    c9:e0:6b:39:25:98:c2:d5:ba:a5:63:1d:36:fb:68:
                    17:d3:3a:21:da:26:ac:af:16:61:4f:68:11:a6:82:
                    9c:9a:c7:42:7b:e8:4b:a4:de:2e:9c:96:16:1c:d1:
                    d3:42:5b:89:ac:76:03:3c:46:db:37:90:f4:25:70:
                    9c:87:3f:3a:44:df:ed:ac:2c:5d:ae:12:3c:63:f5:
                    b6:55:37:cf:ba:1d:eb:d7:7d:ba:cb:8c:4b:b0:4e:
                    9d:d2:49:37:c0:97:34:66:97:a6:58:9a:53:81:af:
                    dc:25:6a:56:f2:6b:1d:31:f2:09:67:a1:dd:1a:fd:
                    c0:ae:35:42:f6:5c:86:aa:10:76:5e:42:5d:5a:94:
                    1d:f2:6d:ab:ab:c5:d5:3e:46:6c:4f:2a:19:7c:0e:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E8:85:AF:B8:A7:40:43:30:5E:FD:9B:8B:EB:61:49:DE:96:32:F0
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GuiFr7inQEMwXv2bi-thSd6WMvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.176.0/22
                  77.65.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:c5:f6:70:ba:61:7d:1b:7e:57:3f:f3:40:84:cc:13:fd:e9:
         cd:83:58:fe:c5:ff:2a:32:4d:7d:61:c6:82:d5:98:38:0c:6a:
         56:73:f7:c9:a8:c2:9a:0b:47:b4:b7:83:36:5d:97:4c:d2:b9:
         8e:22:c6:24:2e:b4:3f:68:11:2a:ec:61:25:3f:3b:3a:7a:a4:
         33:e2:f6:79:1b:a0:6c:8d:a2:36:f5:e3:49:ed:96:cb:70:31:
         5a:1d:d7:88:5f:6b:39:e2:96:7e:80:70:30:44:09:eb:7c:01:
         59:31:c3:cd:fa:0c:62:1f:ee:59:ee:70:95:56:a7:2e:4f:c5:
         2f:e0:93:38:c2:da:11:26:9b:bf:60:ef:4b:2a:d2:7b:61:79:
         0a:89:3f:75:de:d5:2e:3d:ee:d6:d2:87:29:7c:63:0c:86:a2:
         c7:fb:ad:3f:b6:f5:64:61:bf:b7:ad:fb:e4:4e:21:25:2a:69:
         de:a1:05:b5:2f:ad:e6:9c:dc:11:38:21:b9:d8:65:b0:40:67:
         49:02:6f:e6:7c:40:02:e6:87:b7:fb:f8:10:dc:5d:0f:13:fd:
         41:35:68:29:72:c8:1e:87:d9:f3:a2:f0:4d:1f:fb:2d:86:47:
         db:ba:04:06:d6:c2:90:8f:bb:34:a9:67:ea:2a:96:58:34:2c:
         2b:48:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:37 2026 by rpki-client