This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/NpiHnYFexffpXlY55BYzjfAHv4w.roa
File:                     NpiHnYFexffpXlY55BYzjfAHv4w.roa (raw, json)
Hash identifier:          KMdyac6MZ5qBRRQr/k2XUi4yNROOCzI2aVOuefuG2aA=
Subject key identifier:   36:98:87:9D:81:5E:C5:F7:E9:5E:56:39:E4:16:33:8D:F0:07:BF:8C
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       019B7CEE46FE4D2886B46D3FDCEC32257479
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/NpiHnYFexffpXlY55BYzjfAHv4w.roa
Signing time:             Fri 02 Jan 2026 04:19:09 +0000
ROA not before:           Fri 02 Jan 2026 04:19:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34530
IP address blocks:        77.87.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:46:fe:4d:28:86:b4:6d:3f:dc:ec:32:25:74:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Jan  2 04:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3698879d815ec5f7e95e5639e416338df007bf8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6f:e4:ba:f7:d8:68:ce:b1:bc:5b:9b:42:6d:
                    30:63:7a:3f:63:cb:20:e6:f2:68:98:e0:2d:65:f5:
                    f1:65:0e:1c:82:b3:14:88:dd:d4:ca:b0:8e:7b:8a:
                    91:91:83:4d:cb:f1:39:00:95:51:e2:1b:32:cb:18:
                    83:e7:42:29:57:26:02:a4:fa:b1:f2:3f:4b:2a:6b:
                    05:c6:4f:0b:7d:ae:f9:90:b6:d5:6d:5e:60:f6:43:
                    b0:37:0c:00:26:5a:88:12:ea:42:2a:38:bd:67:70:
                    86:94:1a:15:5c:bf:dd:49:3b:d6:77:dc:1c:f1:1f:
                    cc:52:cf:69:33:40:51:3d:fd:3c:80:fc:40:f3:6b:
                    f2:91:58:bf:0c:f3:39:95:a1:df:82:92:eb:80:ca:
                    db:ef:2b:77:e3:f2:4f:ec:fe:49:5b:50:e6:87:90:
                    8d:60:f3:81:54:4e:92:ea:e9:da:86:da:65:92:b2:
                    3b:79:99:f4:ee:2f:be:c0:43:3a:93:ae:80:74:84:
                    17:99:29:15:26:bd:3f:a7:44:34:40:73:00:9a:12:
                    53:b2:62:97:5d:d5:0e:e0:9b:9b:03:e8:9e:48:d2:
                    bf:b4:65:24:ee:8e:8a:25:a7:c5:ae:48:74:8b:07:
                    f9:68:4a:a3:4e:3e:9f:28:e7:bd:7a:b9:72:21:71:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:98:87:9D:81:5E:C5:F7:E9:5E:56:39:E4:16:33:8D:F0:07:BF:8C
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/NpiHnYFexffpXlY55BYzjfAHv4w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:69:df:09:e4:80:a5:34:1a:04:ac:c6:9f:5b:a2:1c:66:71:
         15:29:ca:e4:39:18:17:fe:57:95:57:95:b7:c0:03:5a:fb:17:
         bb:2b:67:2b:c0:0b:a0:7a:0f:a2:9c:90:b0:16:01:28:e1:9b:
         b4:62:bb:9e:ae:ef:58:6b:a0:60:f9:21:72:04:39:00:d4:89:
         e4:f5:ce:4d:49:8f:fc:ec:7c:66:c9:0f:77:f8:91:54:93:94:
         c2:92:89:d7:36:07:19:bb:85:6d:81:a1:45:87:ef:b8:c9:9b:
         24:c5:57:ef:a2:ab:fe:1f:7b:01:70:73:5f:55:72:77:6f:59:
         5c:22:3b:13:f7:87:97:7a:e9:56:ba:8a:8a:29:e7:4f:3c:8e:
         04:2e:4b:5b:8e:6a:3e:f4:69:ec:b8:75:28:af:ee:28:34:c3:
         fa:70:cb:d7:4a:b6:46:cf:f9:fe:8f:f8:41:8c:ca:bd:19:99:
         b4:15:cb:48:88:bf:98:47:3c:53:ce:2f:f7:cb:c3:3c:ec:e1:
         f1:59:33:75:7f:f6:ba:99:30:2f:ad:16:42:ed:59:9e:1e:59:
         5c:4f:2c:2c:e0:aa:3f:7d:66:59:29:9a:2a:0c:73:e4:8b:fc:
         f0:59:aa:a2:34:d9:0f:04:eb:5e:34:17:d8:bc:1e:30:62:94:
         2e:26:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:58:24 2026 by rpki-client