This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7lxx3jBDavUiB__q3uZ14W8nDzU.roa
File:                     7lxx3jBDavUiB__q3uZ14W8nDzU.roa (raw, json)
Hash identifier:          Fbp86RbNT55eomkv3KNrGB+3Q18qEzfiRj7bNDcI1d4=
Subject key identifier:   EE:5C:71:DE:30:43:6A:F5:22:07:FF:EA:DE:E6:75:E1:6F:27:0F:35
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C7857D2F3CEBA8A7B8F04ED542E002
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7lxx3jBDavUiB__q3uZ14W8nDzU.roa
Signing time:             Thu 01 Jan 2026 04:18:43 +0000
ROA not before:           Thu 01 Jan 2026 04:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199260
IP address blocks:        82.177.30.0/23 maxlen: 23
                          195.136.12.0/23 maxlen: 23
                          195.136.78.0/24 maxlen: 24
                          195.136.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:85:7d:2f:3c:eb:a8:a7:b8:f0:4e:d5:42:e0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee5c71de30436af52207ffeadee675e16f270f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:b7:12:bc:89:44:76:1f:c8:85:df:b7:d4:
                    16:83:5c:32:fe:9a:47:1a:6d:64:a5:46:45:d5:f3:
                    84:d8:6d:cd:66:20:67:a4:09:b7:7f:2a:d2:80:5b:
                    24:19:a0:08:d6:aa:e0:aa:fe:e8:69:70:5e:f0:b8:
                    d8:ae:fe:84:aa:0d:52:a4:be:9f:ed:fe:3e:f0:9c:
                    af:39:ac:ea:9f:dc:6d:9b:9d:49:c0:ae:c5:b5:55:
                    b0:28:b2:99:aa:3d:dc:c9:2c:84:7e:fd:53:2f:a1:
                    ee:27:3d:8f:76:79:e5:b5:3b:93:89:3d:17:34:cb:
                    1d:e6:b8:ca:35:4d:bb:c8:5f:59:e4:d0:67:1a:52:
                    82:5f:9f:33:aa:53:44:5b:f3:9d:95:c5:93:21:d4:
                    e5:ca:cf:3e:c2:29:ca:b9:ff:1c:dd:04:a6:ab:09:
                    5c:e0:0d:f7:74:e2:cd:96:7c:9a:23:94:29:17:22:
                    9d:50:c7:b7:17:e0:16:41:74:b5:49:57:92:b5:37:
                    f9:e5:74:71:4b:17:64:73:2d:ac:dc:d7:3c:09:e8:
                    81:06:40:2c:18:8a:f2:93:88:e5:dc:21:97:78:19:
                    ed:72:fb:77:b6:a6:46:b1:7c:6d:c2:1a:0a:dd:59:
                    0f:f1:c7:cc:2e:0f:c7:c7:7e:38:4c:51:4a:58:bc:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5C:71:DE:30:43:6A:F5:22:07:FF:EA:DE:E6:75:E1:6F:27:0F:35
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7lxx3jBDavUiB__q3uZ14W8nDzU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.30.0/23
                  195.136.12.0/23
                  195.136.78.0/24
                  195.136.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:84:7e:95:40:48:b4:2f:81:aa:ce:f5:cc:6b:06:20:96:a6:
         88:97:f6:2d:6e:2a:ea:5e:17:62:65:a0:77:dd:ec:17:15:80:
         90:b2:42:1a:4d:16:67:13:c5:0e:14:6c:ab:11:d7:11:1a:ea:
         a8:3f:fe:0a:99:1c:a3:74:ae:8a:78:c8:b9:de:93:92:84:46:
         d4:43:92:e9:89:8b:ec:1a:1d:7a:8a:58:ba:8c:14:85:e9:cf:
         2d:74:14:7f:4d:ca:c3:1a:ab:66:6d:ca:36:df:6a:b5:06:90:
         c1:c3:00:a9:3a:08:6b:0a:f4:64:38:87:2d:e3:77:2d:19:4f:
         ce:aa:80:ff:0f:fa:42:89:3e:9f:58:81:44:30:df:c0:69:f8:
         42:67:8c:7d:ba:8f:e8:d6:3f:22:f2:86:ff:1e:8c:b6:22:cc:
         56:9b:f4:f8:d9:9c:cf:d4:9b:89:92:0b:32:a1:c8:29:c9:ec:
         8c:4e:24:2c:5b:26:97:8f:21:7c:70:1d:5e:0d:99:0a:4f:24:
         fb:e4:6e:8e:76:c7:3d:4c:6c:19:f6:55:2b:f0:7e:ee:86:6e:
         7a:ea:d4:2e:51:f3:f5:eb:b3:61:de:c2:39:99:85:57:50:bc:
         02:59:2e:c2:15:bd:e3:04:e7:92:ce:de:2a:77:73:71:2f:af:
         32:42:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:50:00 2026 by rpki-client