This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/NpEslkLQpMRfUYNHCdxghvt4Fuo.roa
File:                     NpEslkLQpMRfUYNHCdxghvt4Fuo.roa (raw, json)
Hash identifier:          4MFoFAiwtLl6PnmPgJEPHQ6e0gvExzrzCAzRmjSMODw=
Subject key identifier:   36:91:2C:96:42:D0:A4:C4:5F:51:83:47:09:DC:60:86:FB:78:16:EA
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7759188052B505F2063DB6A9666F079E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/NpEslkLQpMRfUYNHCdxghvt4Fuo.roa
Signing time:             Thu 01 Jan 2026 02:18:06 +0000
ROA not before:           Thu 01 Jan 2026 02:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212915
IP address blocks:        77.65.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:18:80:52:b5:05:f2:06:3d:b6:a9:66:6f:07:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=36912c9642d0a4c45f51834709dc6086fb7816ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:19:aa:41:4d:0a:f7:ea:88:af:02:fb:24:
                    8d:7a:d5:17:5d:4d:32:dd:62:15:73:e9:95:1d:b9:
                    92:56:ec:0e:30:d3:1c:e9:cb:4a:1a:df:bd:38:a4:
                    07:02:fd:c0:b9:b3:a3:cb:9d:1c:a1:39:89:f7:f9:
                    b5:ca:54:d2:54:7f:4a:8f:48:56:e9:e5:ca:3b:f3:
                    e3:68:21:d4:68:d1:29:35:ce:79:6b:79:bd:ad:47:
                    59:60:f5:b9:8d:81:5a:82:ec:36:2c:3a:29:ee:5b:
                    ef:96:99:8a:a0:aa:07:ef:01:69:ca:af:93:a1:75:
                    a7:92:a5:9a:ae:95:43:19:9c:2d:b3:f8:6f:48:98:
                    d2:5c:a1:7e:7a:e5:55:f2:60:7f:63:78:cb:c3:fe:
                    2c:8d:c1:57:69:97:91:6c:05:11:cf:7c:98:15:a0:
                    45:86:05:89:f9:e5:a9:54:d2:b4:73:ed:d1:bd:16:
                    6b:1f:52:22:8e:6a:bb:20:7c:4e:28:35:47:3d:f5:
                    9c:53:c8:15:a7:6f:f9:f9:f8:9f:68:34:98:12:56:
                    b5:9d:b9:13:80:bf:7b:ab:1a:ef:75:f7:71:09:b7:
                    c9:80:80:d3:84:38:a2:eb:ff:bf:ac:39:df:7a:bf:
                    38:11:90:8b:ba:d4:24:02:ef:43:f8:18:22:8f:d0:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:91:2C:96:42:D0:A4:C4:5F:51:83:47:09:DC:60:86:FB:78:16:EA
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/NpEslkLQpMRfUYNHCdxghvt4Fuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:90:ad:d1:50:83:ce:6d:30:85:0d:bb:40:a6:76:e3:bb:d0:
         db:da:a1:75:1c:0f:e9:33:62:59:c0:e1:9d:66:38:7a:9f:c1:
         68:04:47:91:53:3f:c6:e0:8b:cb:20:b1:ea:82:1f:6d:aa:22:
         13:2f:df:4f:19:1c:64:ab:47:aa:4b:a1:2a:72:a8:dd:9d:57:
         d7:0f:c9:2b:5e:05:38:7a:04:96:2a:38:3d:fa:d4:79:c0:df:
         ec:02:98:87:b0:cc:93:b9:87:53:71:77:4d:01:a9:7e:57:45:
         e2:42:b7:eb:2e:70:0f:6a:42:38:2b:41:21:19:3f:72:99:a5:
         dc:5a:ce:33:1b:e1:e3:56:74:6d:3a:ed:c2:b1:fd:40:2b:29:
         a3:13:c6:fa:80:81:4d:90:98:fd:5a:91:54:b4:60:26:47:2f:
         89:44:1f:54:5c:73:ab:d2:78:e3:ec:82:77:bc:de:a8:9b:36:
         ef:b7:fc:6b:f3:96:df:4a:50:76:e1:73:bd:8f:d8:aa:f4:2b:
         ce:0f:37:d5:0c:f4:c1:ba:3c:2c:7c:81:15:2d:81:40:31:fb:
         76:e6:dd:10:91:e5:58:38:4f:00:26:b0:79:04:93:fe:8e:e6:
         c0:ba:33:35:be:44:ea:79:72:40:35:af:96:a1:49:fc:14:6a:
         ae:7e:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:21 2026 by rpki-client