This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R2v_sIDP9bGVEdafhz4POQuo44o.roa
File:                     R2v_sIDP9bGVEdafhz4POQuo44o.roa (raw, json)
Hash identifier:          g1szvjJd5nbj2NlIVKpVQDlsTRvOxgR1Gi9HBORjJPA=
Subject key identifier:   47:6B:FF:B0:80:CF:F5:B1:95:11:D6:9F:87:3E:0F:39:0B:A8:E3:8A
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B775916517258960A25E9171BB4CAA5E9
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R2v_sIDP9bGVEdafhz4POQuo44o.roa
Signing time:             Thu 01 Jan 2026 02:18:05 +0000
ROA not before:           Thu 01 Jan 2026 02:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210910
IP address blocks:        77.65.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:16:51:72:58:96:0a:25:e9:17:1b:b4:ca:a5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=476bffb080cff5b19511d69f873e0f390ba8e38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:fe:0b:4d:23:ae:e9:d5:93:2d:c4:84:ad:
                    61:59:2b:3a:48:b8:3c:0a:a3:28:c4:50:c7:fd:71:
                    f0:cd:1b:47:79:9f:77:f5:d3:31:f4:de:fc:ef:a5:
                    d7:32:90:e5:8b:fa:bd:77:b4:83:b5:0d:ec:32:07:
                    f2:de:e8:6d:8b:94:de:07:e8:3f:42:6d:2a:e3:9b:
                    35:00:1a:af:a8:45:c9:23:29:0a:1a:a2:0f:40:fc:
                    a8:e2:4a:5c:4d:65:e3:17:71:c6:7e:35:29:6d:02:
                    18:2b:dc:1d:f8:10:65:b9:32:df:24:7f:05:1e:d6:
                    ff:d4:20:5c:36:90:a3:ab:e7:02:2e:44:53:62:74:
                    d5:61:42:4f:fe:76:8e:1e:84:e9:ad:48:6b:08:c0:
                    95:92:bc:65:ba:04:74:a1:7a:d4:6e:18:97:50:1a:
                    2b:53:27:23:3d:ef:62:da:5d:25:b8:e7:5e:57:8d:
                    77:f6:80:54:c2:85:8d:56:a1:b8:eb:1d:65:69:14:
                    0b:4f:4f:48:81:f4:a5:b2:87:d1:5c:37:c2:e4:bf:
                    e2:58:a5:79:5c:7a:ff:3e:b5:e1:9b:9b:d9:01:31:
                    48:61:f5:40:93:a1:d7:32:2f:75:7f:5a:12:f3:e8:
                    5b:74:ce:06:6a:27:7d:0d:2a:1f:18:a4:96:79:24:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6B:FF:B0:80:CF:F5:B1:95:11:D6:9F:87:3E:0F:39:0B:A8:E3:8A
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/R2v_sIDP9bGVEdafhz4POQuo44o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:cf:eb:a8:28:e4:e6:f7:2a:ba:c1:d4:29:fb:86:6b:90:
         6b:39:1b:e0:c0:dd:a3:1e:df:18:39:12:06:a4:f8:64:da:25:
         1d:4a:58:7d:fc:69:54:71:1f:af:1f:1a:16:ae:2d:3b:50:94:
         de:98:a9:b0:5e:dd:3e:ce:9f:9c:b2:7d:6e:12:28:fa:01:fa:
         5e:7d:60:bf:3c:f9:27:88:f3:98:a2:f2:2c:b2:ae:6c:f3:4f:
         4d:d3:87:ba:dc:ba:44:1b:50:7b:56:37:b2:56:b1:ff:4b:3c:
         f0:93:87:37:36:4b:de:77:25:30:14:29:4d:a5:dc:b4:27:3b:
         4d:e5:cb:ba:e4:1c:9b:39:f0:89:e2:63:60:55:74:61:c9:71:
         e0:13:1f:50:50:0c:30:33:d6:76:f7:a8:14:ab:70:10:af:ae:
         7e:90:cf:84:a7:a5:60:8e:cf:95:e1:e6:eb:dd:de:f2:21:12:
         6c:cc:83:6a:c5:a4:10:bf:07:eb:2c:fa:d0:ec:d5:29:d9:f6:
         35:b9:f1:65:81:3b:2d:36:87:ad:1c:0f:fc:7d:1b:a5:32:1c:
         78:16:8c:27:91:fb:73:f2:d3:05:b1:d4:29:bb:4f:f9:5f:9d:
         04:77:df:77:24:6d:c7:d6:c5:8f:65:dd:67:64:95:1c:bd:67:
         94:8e:3e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:44 2026 by rpki-client