This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/vjwSSPjssAJWg17wdB8nOax9NPg.roa
File:                     vjwSSPjssAJWg17wdB8nOax9NPg.roa (raw, json)
Hash identifier:          +Skus1QTMfLkZcv6BWomJpA4+khM7/pNQ8k90KcyWes=
Subject key identifier:   BE:3C:12:48:F8:EC:B0:02:56:83:5E:F0:74:1F:27:39:AC:7D:34:F8
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       019B7CEE48544B787FBDF6ED5F7A26A7958F
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/vjwSSPjssAJWg17wdB8nOax9NPg.roa
Signing time:             Fri 02 Jan 2026 04:19:09 +0000
ROA not before:           Fri 02 Jan 2026 04:19:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203210
IP address blocks:        77.87.73.0/24 maxlen: 24
                          77.87.74.0/24 maxlen: 24
                          91.196.48.0/22 maxlen: 22
                          91.196.48.0/24 maxlen: 24
                          91.196.49.0/24 maxlen: 24
                          91.196.50.0/24 maxlen: 24
                          91.196.51.0/24 maxlen: 24
                          195.22.124.0/23 maxlen: 23
                          195.22.124.0/24 maxlen: 24
                          195.22.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:48:54:4b:78:7f:bd:f6:ed:5f:7a:26:a7:95:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Jan  2 04:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=be3c1248f8ecb00256835ef0741f2739ac7d34f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:22:9a:22:20:e4:5f:81:30:6b:af:29:5c:
                    71:30:34:c1:6d:e7:5d:45:fd:f7:29:85:64:33:96:
                    66:87:c5:6e:26:26:3d:13:9c:a4:ac:60:b7:52:46:
                    92:32:b2:95:e5:01:bd:8a:c5:bd:e5:a5:68:2b:28:
                    ec:b0:a9:c6:26:24:13:ae:cf:18:1f:cf:33:9f:6f:
                    9c:28:5b:f9:b2:e0:f6:75:77:31:c0:71:94:89:0a:
                    b6:2e:fa:f3:84:2f:ed:d2:89:d9:00:5c:24:21:47:
                    b9:fc:9b:f2:85:43:ea:f4:ac:ca:d6:7f:8e:50:26:
                    b7:c9:f2:a2:7c:d6:f0:05:e9:02:7c:9e:bf:9c:fe:
                    20:eb:2c:f4:d2:c7:19:2d:2c:42:f9:40:6e:4b:09:
                    0a:69:e8:47:76:79:ca:0b:15:22:fe:7e:c4:26:e9:
                    b4:26:40:c6:72:a5:1c:51:2d:df:42:0e:cf:b3:05:
                    91:93:aa:41:5f:e3:f8:ed:6d:b7:e4:39:3f:ee:62:
                    7b:9c:f6:25:28:42:b8:56:22:c4:49:fe:3f:cc:df:
                    91:47:d7:6a:3e:23:10:d9:7e:3c:37:95:48:81:26:
                    18:67:60:58:2e:3f:1a:f2:cc:16:2a:fd:21:2c:5c:
                    a2:5d:66:fe:ab:11:19:11:4b:cb:fb:e6:be:b1:21:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3C:12:48:F8:EC:B0:02:56:83:5E:F0:74:1F:27:39:AC:7D:34:F8
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/vjwSSPjssAJWg17wdB8nOax9NPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.73.0-77.87.74.255
                  91.196.48.0/22
                  195.22.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:3d:3c:d4:98:92:9d:6b:42:c8:55:0f:85:91:cd:49:1a:
         c9:e0:9a:08:c1:1f:0e:16:a8:f0:e8:40:3b:fa:de:4f:0f:e0:
         d6:41:91:48:1c:8e:8b:72:89:af:34:cf:b7:6a:f1:4f:0d:23:
         e6:4f:35:e1:b5:32:1f:5b:5b:76:e3:26:d7:a7:73:55:0a:64:
         9f:54:03:f2:cc:bc:10:28:b3:82:8e:32:49:80:fe:59:1c:fb:
         ba:53:dc:e9:78:ca:b3:01:33:f8:26:bd:ed:93:57:49:21:b4:
         97:2a:56:3a:82:c6:7c:38:df:b7:8e:2c:c9:24:2b:de:14:ba:
         63:97:5d:97:f6:26:a6:d5:85:f0:61:d8:d9:e0:89:b6:3f:41:
         d6:6a:6e:5e:8f:21:cb:cf:3d:5e:f9:7f:04:18:78:4c:54:2f:
         64:77:23:a9:45:47:3d:a3:da:50:10:b0:1c:ce:e1:c8:f2:c2:
         0d:03:9e:1d:2e:81:68:88:5d:77:0b:62:6c:7c:16:b9:a3:76:
         c0:08:04:7c:90:d3:6d:b6:6a:be:86:d1:51:0b:1c:fc:53:9f:
         2b:37:94:28:19:1a:46:95:64:c5:01:29:bb:63:0d:60:5a:d8:
         f6:0a:60:37:dd:b4:bc:d2:d5:07:b3:ad:0f:23:7e:9b:33:db:
         be:98:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:39 2026 by rpki-client