This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/x5cEzs372JrBCCE8W7o7tIizqHA.roa
File:                     x5cEzs372JrBCCE8W7o7tIizqHA.roa (raw, json)
Hash identifier:          zqsqYpovdlrImHSGz+METDuWpkjxJFP6hP6L3UeEkKc=
Subject key identifier:   C7:97:04:CE:CD:FB:D8:9A:C1:08:21:3C:5B:BA:3B:B4:88:B3:A8:70
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7758F91FC61A155D4C07E541FB721BC9
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/x5cEzs372JrBCCE8W7o7tIizqHA.roa
Signing time:             Thu 01 Jan 2026 02:17:58 +0000
ROA not before:           Thu 01 Jan 2026 02:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197437
IP address blocks:        77.65.225.0/24 maxlen: 24
                          178.16.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:f9:1f:c6:1a:15:5d:4c:07:e5:41:fb:72:1b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c79704cecdfbd89ac108213c5bba3bb488b3a870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:44:b5:43:3d:fb:c5:48:eb:b8:65:5b:ca:7e:
                    00:9d:d5:76:55:b6:bb:6f:66:23:cb:1c:28:c6:aa:
                    ca:38:43:a4:ad:d2:51:15:43:4c:68:84:64:b4:c6:
                    dc:5a:b3:6a:a3:e5:82:9b:97:0c:b6:d1:64:50:1d:
                    ca:d7:25:ad:0f:d4:c6:74:9e:b0:97:4a:79:7e:bc:
                    6b:04:c7:fe:79:fe:ea:7a:5b:36:a5:d2:e4:9f:3f:
                    55:a4:2d:cf:81:27:4e:bc:83:57:2d:a5:63:d6:95:
                    aa:19:74:8d:fa:8e:34:82:8a:28:97:6d:5e:d4:92:
                    d7:40:a9:05:b3:5f:fa:ae:32:15:4d:05:89:2c:66:
                    e3:e0:af:d3:d2:1e:9b:18:3b:e1:00:3e:6f:c3:e5:
                    62:2a:0d:c8:e7:12:60:dc:60:10:73:35:63:aa:e1:
                    b6:99:d5:67:78:e9:92:48:a1:4a:44:8b:c6:d9:c8:
                    be:89:96:c5:4e:d0:5f:43:13:27:08:05:7e:a7:2d:
                    84:fe:f7:5c:e4:96:ff:84:df:65:59:c6:e8:bb:63:
                    23:70:1d:b5:2c:95:8c:a2:2b:64:f8:54:68:b0:34:
                    e0:2c:25:a9:e8:6a:59:9d:ab:0c:c6:9f:d8:c1:a3:
                    ae:34:6b:58:79:75:c5:3d:f8:bf:2d:27:db:a6:d2:
                    4b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:97:04:CE:CD:FB:D8:9A:C1:08:21:3C:5B:BA:3B:B4:88:B3:A8:70
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/x5cEzs372JrBCCE8W7o7tIizqHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.65.225.0/24
                  178.16.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:11:9a:4f:33:d1:e0:8b:45:00:ce:09:b5:68:86:4c:2a:
         e0:f5:40:05:5a:0f:e1:4e:fd:4a:f2:7c:1d:63:97:e6:b8:43:
         71:e3:39:f8:68:13:a3:e1:6c:cd:ec:6c:d6:ba:fe:c7:8f:21:
         7c:c3:26:f3:f5:86:db:c7:9d:ff:4b:fd:30:d3:c9:6a:d4:e1:
         c9:cd:b8:47:42:0b:08:8f:f9:c8:c1:e7:b4:3b:12:1a:a0:a9:
         b7:ad:fe:f3:1b:4a:69:7e:67:9d:af:48:fa:2c:87:aa:2a:05:
         eb:65:96:9d:f0:f2:f0:8a:13:1e:f0:80:ed:b4:a7:ae:3a:44:
         4e:c3:5c:2b:ca:72:7b:76:ea:46:a5:5b:30:3d:37:d3:51:68:
         32:31:0e:12:21:97:5c:72:6a:dc:2c:b2:14:a5:4d:ee:2a:76:
         36:05:38:aa:6c:12:4d:17:bd:2d:42:4d:a4:f0:04:f5:96:67:
         f1:a1:3d:78:26:e2:df:92:9c:67:ec:5c:4b:05:a1:62:b0:0e:
         8b:58:05:64:84:be:a8:a3:6c:95:10:71:85:89:c1:b1:37:33:
         f8:eb:bb:f8:88:1a:43:25:b1:c5:5e:09:30:d6:0c:95:ff:03:
         31:76:97:b0:2e:92:b6:2c:13:eb:b3:30:a0:55:7d:1e:a6:e9:
         41:26:c2:b8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt3WPkfxhoVXUwH5UH7chvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzk3MDRjZWNkZmJkODlhYzEwODIxM2M1YmJhM2JiNDg4YjNhODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ES1Qz37xUjruGVbyn4AndV2Vba7
b2YjyxwoxqrKOEOkrdJRFUNMaIRktMbcWrNqo+WCm5cMttFkUB3K1yWtD9TGdJ6w
l0p5frxrBMf+ef7qels2pdLknz9VpC3PgSdOvINXLaVj1pWqGXSN+o40goool21e
1JLXQKkFs1/6rjIVTQWJLGbj4K/T0h6bGDvhAD5vw+ViKg3I5xJg3GAQczVjquG2
mdVneOmSSKFKRIvG2ci+iZbFTtBfQxMnCAV+py2E/vdc5Jb/hN9lWcbou2MjcB21
LJWMoitk+FRosDTgLCWp6GpZnasMxp/YwaOuNGtYeXXFPfi/LSfbptJLnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMeXBM7N+9iawQghPFu6O7SIs6hwMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEveDVjRXpzMzcySnJCQ0NFOFc3bzd0SWl6cUhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUHhAwQA
shByMA0GCSqGSIb3DQEBCwUAA4IBAQB1jhGaTzPR4ItFAM4JtWiGTCrg9UAFWg/h
Tv1K8nwdY5fmuENx4zn4aBOj4WzN7GzWuv7HjyF8wybz9Ybbx53/S/0w08lq1OHJ
zbhHQgsIj/nIwee0OxIaoKm3rf7zG0ppfmedr0j6LIeqKgXrZZad8PLwihMe8IDt
tKeuOkROw1wrynJ7dupGpVswPTfTUWgyMQ4SIZdccmrcLLIUpU3uKnY2BTiqbBJN
F70tQk2k8AT1lmfxoT14JuLfkpxn7FxLBaFisA6LWAVkhL6oo2yVEHGFicGxNzP4
67v4iBpDJbHFXgkw1gyV/wMxdpewLpK2LBPrszCgVX0epulBJsK4
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:47 2026 by rpki-client