This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/gYsdgAs4KIaJroqJZMhZmwRNn38.roa
File:                     gYsdgAs4KIaJroqJZMhZmwRNn38.roa (raw, json)
Hash identifier:          t90AwEAZ729TPglZyxHbnIWUY3pMyQTtaWuzn+iV9DQ=
Subject key identifier:   81:8B:1D:80:0B:38:28:86:89:AE:8A:89:64:C8:59:9B:04:4D:9F:7F
Certificate issuer:       /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial:       019B7C80BBDEEC7E752591B11701A327E46C
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/gYsdgAs4KIaJroqJZMhZmwRNn38.roa
Signing time:             Fri 02 Jan 2026 02:19:30 +0000
ROA not before:           Fri 02 Jan 2026 02:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        79.135.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:bb:de:ec:7e:75:25:91:b1:17:01:a3:27:e4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
        Validity
            Not Before: Jan  2 02:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=818b1d800b38288689ae8a8964c8599b044d9f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:a1:2b:9c:8c:73:69:58:bd:43:1d:10:be:
                    6f:20:21:d6:24:4e:21:59:c3:ed:12:14:ef:09:a2:
                    92:20:62:18:db:75:e9:15:36:f1:ee:19:77:e9:2a:
                    94:ff:cf:8b:6f:38:b0:ee:d0:98:ef:c6:6f:53:92:
                    c9:d3:d2:f2:29:8d:70:b6:72:e3:e4:4e:6f:d0:01:
                    c0:66:58:73:4f:56:f4:f4:5e:27:9f:fe:ae:ee:eb:
                    dc:63:ee:6d:da:1a:37:27:96:55:d9:58:25:7a:aa:
                    2c:f8:d6:49:8e:82:f5:75:97:76:50:87:70:dc:7a:
                    00:05:f1:05:3d:4d:67:ba:65:db:66:17:75:5b:10:
                    92:32:43:07:af:6a:6b:3f:21:34:d0:42:c3:ae:33:
                    13:a2:0f:ec:67:b5:e8:4c:56:ca:aa:6c:25:dd:dc:
                    95:bb:dc:13:6d:7f:c1:3f:7d:f0:6e:ee:8f:2d:d4:
                    75:52:48:d8:8f:b9:e5:83:3d:0a:7a:df:8d:5a:34:
                    f7:f6:0c:21:79:09:78:74:4e:9d:38:e1:62:10:09:
                    aa:77:c4:87:fd:22:3e:b2:d9:7a:54:d1:54:95:54:
                    bb:27:24:7b:4a:3f:72:33:75:54:31:ff:ee:24:4e:
                    ec:54:8c:b7:9b:03:1e:5a:1e:0b:13:e7:f4:ec:fa:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8B:1D:80:0B:38:28:86:89:AE:8A:89:64:C8:59:9B:04:4D:9F:7F
            X509v3 Authority Key Identifier:
                keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/gYsdgAs4KIaJroqJZMhZmwRNn38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.135.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:1d:4f:ba:65:39:63:30:50:44:4f:05:24:ba:94:5a:11:55:
         f3:a4:4b:7c:e8:32:9c:04:ed:01:96:15:f1:d3:0a:4d:0f:47:
         9b:bd:77:66:6d:70:9f:5a:c4:12:ea:0a:81:fe:80:cb:42:1a:
         4a:57:de:61:a4:59:d0:cb:72:c1:91:36:0f:f6:10:eb:33:4d:
         a1:c4:22:3a:58:7e:6e:2b:b4:50:33:e6:0a:e1:3f:aa:0b:61:
         ad:92:7b:b9:10:57:04:02:a6:01:30:c8:cc:c6:c9:2b:fc:1c:
         ba:24:b8:73:7c:31:10:0f:c8:ed:29:c0:21:f7:fb:89:90:06:
         dd:33:6d:54:35:a5:56:7c:e7:cf:f1:7a:40:ad:84:63:89:5e:
         16:26:01:78:e4:1c:5e:13:14:90:a9:ff:ab:1f:ff:10:2f:5d:
         50:ea:a5:a8:64:63:16:0d:3b:ac:37:42:ce:e2:83:44:24:21:
         f6:95:16:68:5c:8e:ef:9c:8c:a8:c2:57:0c:52:bb:1c:33:12:
         c3:9b:d0:45:61:f5:83:20:b4:d7:76:2e:a7:33:35:35:4d:ed:
         b6:39:f7:14:6a:27:d9:45:63:3f:30:f8:dc:12:26:46:71:90:
         eb:6c:eb:41:92:d6:ad:29:2d:58:e0:06:82:69:a5:13:41:4d:
         9e:92:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:39:54 2026 by rpki-client