This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa
File:                     sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (raw, json)
Hash identifier:          R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=
Subject key identifier:   B0:FC:94:FD:79:B7:32:2E:03:AC:26:1D:FB:10:8F:1C:2B:BB:62:3F
Certificate issuer:       /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial:       019B7DCB47CA4FBC6C632B55BBCC45A7DD1F
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa
Signing time:             Fri 02 Jan 2026 08:20:32 +0000
ROA not before:           Fri 02 Jan 2026 08:20:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47253
IP address blocks:        77.91.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:47:ca:4f:bc:6c:63:2b:55:bb:cc:45:a7:dd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
        Validity
            Not Before: Jan  2 08:20:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b0fc94fd79b7322e03ac261dfb108f1c2bbb623f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:76:31:0f:d9:67:ef:00:62:eb:c4:99:23:
                    43:ea:e9:ea:fb:17:24:5c:8d:dd:0b:46:0b:74:dc:
                    41:c1:35:a2:be:9c:f1:6b:8f:27:24:1b:a5:f8:90:
                    5b:68:ca:21:9c:cf:c1:22:9b:32:3c:e2:f7:71:59:
                    47:c6:f4:57:b9:d8:03:ec:1e:55:3f:81:67:66:2c:
                    4d:0d:3d:9a:36:ea:7f:5e:6d:98:85:47:c3:5c:12:
                    d1:b9:2d:cd:a2:fb:bb:ed:73:c6:68:d5:ab:c5:70:
                    fd:dc:89:e5:9e:2a:16:cd:11:c3:7a:4f:b1:1b:77:
                    01:b2:35:ac:72:f5:3e:91:3d:ba:0c:93:e0:fe:f7:
                    f0:9f:36:65:af:43:45:4b:6b:46:ed:ee:50:f8:96:
                    c9:c8:8f:0c:91:fe:56:03:3d:a4:21:42:26:67:16:
                    ad:22:ae:75:5d:20:70:56:c7:87:fd:3c:9a:39:35:
                    17:4c:37:61:36:26:1a:18:28:b3:34:b3:6b:d1:19:
                    c4:71:85:88:ad:ba:e1:81:9d:07:c3:5c:09:bb:cf:
                    ab:a0:5a:84:1b:6e:8a:51:d4:1a:67:7a:9f:f0:3c:
                    ee:f3:a8:29:e0:20:c7:01:a2:4b:a9:f6:0e:3b:f7:
                    55:e7:ff:ab:9b:d7:16:67:15:0f:64:7a:82:c5:bf:
                    b2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FC:94:FD:79:B7:32:2E:03:AC:26:1D:FB:10:8F:1C:2B:BB:62:3F
            X509v3 Authority Key Identifier:
                keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.91.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:d4:70:d2:04:ce:17:45:9c:dd:bc:a6:09:bc:be:23:04:2c:
         f1:29:e5:9c:65:f4:a2:c1:86:47:e4:43:14:d0:e4:be:4d:cd:
         96:c6:4c:91:26:93:66:5d:88:93:94:a8:70:a1:7d:e8:6a:02:
         9a:7d:67:b3:7a:3d:3a:e2:af:9b:0f:98:ab:3f:e4:e6:d8:d1:
         d7:86:c2:2a:08:0c:d5:e3:42:97:ac:ed:0b:c0:66:15:f1:ba:
         e0:0f:f8:af:66:ec:8b:ac:a9:af:63:4a:bd:67:47:a4:21:2a:
         e2:01:86:7c:44:7d:3f:c4:ec:3a:b0:8a:93:c7:41:e7:47:e6:
         65:1f:87:e8:c6:20:15:31:95:7e:60:71:32:22:60:9c:35:d9:
         5c:62:ae:73:df:b4:42:97:ef:25:87:22:d0:2e:8a:51:a5:83:
         c6:9a:7b:db:2a:f2:c6:87:3f:0e:39:8b:74:9e:70:7d:bd:16:
         81:08:52:b3:29:64:e5:42:69:91:4a:1a:f9:ae:87:be:08:3b:
         09:11:c0:30:da:63:e2:5c:fd:73:04:07:25:7c:92:15:63:3f:
         b6:c8:5b:0f:1b:83:61:6d:1b:1e:6f:d9:ae:28:9b:f5:5d:de:
         cc:21:ae:94:fd:d0:72:a5:48:62:da:48:ca:27:a1:4f:26:60:
         4d:40:1d:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9y0fKT7xsYytVu8xFp90fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm
ZTc0ZjkwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGZjOTRmZDc5YjczMjJlMDNhYzI2MWRmYjEwOGYxYzJiYmI2MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCt2MQ/ZZ+8AYuvEmSND6unq+xck
XI3dC0YLdNxBwTWivpzxa48nJBul+JBbaMohnM/BIpsyPOL3cVlHxvRXudgD7B5V
P4FnZixNDT2aNup/Xm2YhUfDXBLRuS3Novu77XPGaNWrxXD93InlnioWzRHDek+x
G3cBsjWscvU+kT26DJPg/vfwnzZlr0NFS2tG7e5Q+JbJyI8Mkf5WAz2kIUImZxat
Iq51XSBwVseH/TyaOTUXTDdhNiYaGCizNLNr0RnEcYWIrbrhgZ0Hw1wJu8+roFqE
G26KUdQaZ3qf8Dzu86gp4CDHAaJLqfYOO/dV5/+rm9cWZxUPZHqCxb+ysQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLD8lP15tzIuA6wmHfsQjxwru2I/MB8GA1UdIwQY
MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt
ZWI1YTYyN2U3NmEzLzEvc1B5VV9YbTNNaTREckNZZC14Q1BIQ3U3WWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz
LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTVuUMA0G
CSqGSIb3DQEBCwUAA4IBAQCf1HDSBM4XRZzdvKYJvL4jBCzxKeWcZfSiwYZH5EMU
0OS+Tc2WxkyRJpNmXYiTlKhwoX3oagKafWezej064q+bD5irP+Tm2NHXhsIqCAzV
40KXrO0LwGYV8brgD/ivZuyLrKmvY0q9Z0ekISriAYZ8RH0/xOw6sIqTx0HnR+Zl
H4foxiAVMZV+YHEyImCcNdlcYq5z37RCl+8lhyLQLopRpYPGmnvbKvLGhz8OOYt0
nnB9vRaBCFKzKWTlQmmRShr5roe+CDsJEcAw2mPiXP1zBAclfJIVYz+2yFsPG4Nh
bRseb9muKJv1Xd7MIa6U/dBypUhi2kjKJ6FPJmBNQB3i
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:54 2026 by rpki-client