This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uhILgEnklN0i1lC9_o6cjlmwuds.roa
File:                     uhILgEnklN0i1lC9_o6cjlmwuds.roa (raw, json)
Hash identifier:          A+UwL1zz55oXPU72B2gevW1S1S7nNpykHfj0Ylq2PYY=
Subject key identifier:   BA:12:0B:80:49:E4:94:DD:22:D6:50:BD:FE:8E:9C:8E:59:B0:B9:DB
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B77591A57CE0AD1B807E99E421083A5BD
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uhILgEnklN0i1lC9_o6cjlmwuds.roa
Signing time:             Thu 01 Jan 2026 02:18:06 +0000
ROA not before:           Thu 01 Jan 2026 02:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213310
IP address blocks:        77.65.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:1a:57:ce:0a:d1:b8:07:e9:9e:42:10:83:a5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ba120b8049e494dd22d650bdfe8e9c8e59b0b9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:bc:75:7f:4f:57:b4:77:45:b4:34:29:e6:
                    6f:0f:52:3e:68:31:e5:e7:5c:c5:92:ca:74:13:cb:
                    fc:00:41:b7:64:bc:e9:af:8b:2c:26:d2:65:ee:58:
                    d1:17:5b:a1:3c:6f:fa:ce:b0:63:59:f6:23:4b:2a:
                    71:87:f9:a9:8d:37:d5:75:6e:af:7c:27:c5:d8:f9:
                    55:82:a3:b0:6c:5d:05:b9:65:8e:36:7d:d5:1a:82:
                    d9:68:89:b9:96:b6:ac:f8:36:0c:dc:fe:f5:a5:41:
                    1e:5a:5b:a3:35:a9:1d:d9:7a:06:4e:ec:b9:6a:a6:
                    60:dd:92:a5:65:43:57:d6:b9:e4:3d:95:e5:2a:42:
                    60:f7:b1:b8:9a:89:5a:c4:72:df:96:d5:ca:56:63:
                    1b:c4:b2:44:94:01:90:20:17:7c:4f:3e:46:29:92:
                    ff:5a:da:36:d0:8d:2c:1a:66:cb:08:71:ec:f0:30:
                    1b:29:9b:e6:4a:08:7b:06:7f:0b:be:93:54:a5:dc:
                    31:95:b4:ba:2e:cb:3f:e3:5f:77:ff:00:3a:10:73:
                    c3:03:92:bb:5e:55:6f:b4:f3:fd:26:c1:5a:40:5f:
                    96:3e:08:64:c0:1b:18:36:21:67:ad:8e:9e:90:a6:
                    88:6f:1f:76:7c:bf:a0:96:65:98:45:b8:57:3c:ab:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:12:0B:80:49:E4:94:DD:22:D6:50:BD:FE:8E:9C:8E:59:B0:B9:DB
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uhILgEnklN0i1lC9_o6cjlmwuds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:82:c2:4d:5a:43:f6:36:1c:ee:7e:24:92:99:46:8c:a1:78:
         45:d1:5a:91:46:19:b4:5b:7a:c0:9b:be:b0:1c:58:ce:8d:2b:
         92:3a:69:c8:b8:18:80:ec:1d:62:b8:b9:51:c2:2a:19:1b:57:
         a2:58:a0:dc:3b:d0:8f:37:30:02:4d:63:46:39:f0:ef:0d:e4:
         66:31:07:a2:da:b0:0d:20:87:d3:e0:c9:53:92:8b:76:91:64:
         55:03:75:4e:64:1b:26:4a:7b:0c:06:c8:7a:2d:0d:a8:c1:df:
         21:1b:38:2c:ff:a1:41:07:7d:7e:95:fd:24:ee:71:df:cf:2e:
         ca:bd:ad:3a:52:45:c2:0d:0d:ac:ea:7a:de:4c:24:64:3b:0d:
         ff:0d:81:88:2f:a6:74:e9:3d:ad:5d:90:19:33:b7:4d:26:9d:
         d9:05:30:cd:c8:c3:0e:ef:8f:d6:fd:61:b9:b0:64:67:05:da:
         34:35:99:54:7b:7f:83:05:db:d0:b1:e0:09:3b:71:b1:a5:98:
         c5:70:e1:92:d2:46:e3:61:be:03:2c:df:ab:ed:a0:5c:5f:3e:
         c7:e5:45:8f:5a:64:e1:b1:91:19:37:74:32:ce:d7:57:6d:27:
         e5:73:98:7d:15:c3:71:a4:fa:d4:fb:be:ff:b3:eb:bf:7a:e7:
         67:d4:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:37 2026 by rpki-client