This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AMBg3ZzlzMyTIKOw9a9qOxoCr_4.roa
File:                     AMBg3ZzlzMyTIKOw9a9qOxoCr_4.roa (raw, json)
Hash identifier:          tLyEIShOxXyRXHnUroKydXoULeyTNsospNNFZnqSy7c=
Subject key identifier:   00:C0:60:DD:9C:E5:CC:CC:93:20:A3:B0:F5:AF:6A:3B:1A:02:AF:FE
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C77F201F223EC25DD97515E1345917
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AMBg3ZzlzMyTIKOw9a9qOxoCr_4.roa
Signing time:             Thu 01 Jan 2026 04:18:41 +0000
ROA not before:           Thu 01 Jan 2026 04:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62025
IP address blocks:        82.177.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:7f:20:1f:22:3e:c2:5d:d9:75:15:e1:34:59:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=00c060dd9ce5cccc9320a3b0f5af6a3b1a02affe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:81:d8:7a:49:a6:75:c6:89:ca:e1:b8:af:
                    9d:eb:3c:f7:29:ae:52:a9:0c:20:48:9d:8d:9f:10:
                    fd:7a:70:55:be:4a:6f:61:fd:b5:88:c8:97:21:a7:
                    69:a6:1f:a8:45:50:de:fe:24:21:82:84:e2:f0:40:
                    28:02:e6:ef:bb:45:02:cb:6a:5f:6b:5d:ef:e4:65:
                    01:80:bc:4c:6e:15:a0:1d:ce:e7:2a:14:e1:f3:30:
                    be:92:84:0e:2f:ca:56:b2:a8:cb:b8:0d:a0:70:c8:
                    cd:1e:d8:eb:7f:e6:72:fa:a3:6e:87:29:ed:b7:53:
                    40:fe:35:11:6e:5d:ce:36:1e:e9:16:fd:08:0e:0b:
                    7f:2d:cd:5d:5f:49:d8:d9:91:62:f8:f1:e7:0f:cb:
                    6a:ff:da:3c:d6:e2:59:55:95:37:bc:f9:26:ad:ba:
                    45:84:7a:d1:c0:ea:9f:26:c7:b9:76:21:46:bb:c2:
                    21:f1:14:f8:60:fb:f4:c8:fd:3f:51:8c:85:b3:32:
                    9c:5f:96:89:a8:08:19:5b:ad:07:6b:05:cb:b3:1d:
                    d1:21:80:00:1e:17:33:3f:88:7e:17:a9:19:d1:f4:
                    1e:99:cf:9d:c2:de:1e:aa:42:38:ad:0c:4c:ff:9d:
                    65:a2:4c:7f:a8:8a:de:a4:f9:e6:aa:82:db:ce:da:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C0:60:DD:9C:E5:CC:CC:93:20:A3:B0:F5:AF:6A:3B:1A:02:AF:FE
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AMBg3ZzlzMyTIKOw9a9qOxoCr_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:08:77:c8:97:b0:f4:6f:b8:ea:6e:68:7d:ef:40:86:af:4b:
         3e:f6:3d:96:9d:9f:0e:34:1a:18:83:0c:4f:42:3c:db:f4:79:
         b8:6e:dc:ee:9a:67:52:66:67:b1:ab:c2:77:df:4d:66:04:a9:
         bd:f1:86:08:6f:48:99:25:86:a5:c9:78:b4:45:03:5a:f8:ee:
         b8:62:cb:ff:54:d9:01:d9:e3:5d:ef:fb:a0:3f:42:59:60:cb:
         20:ec:f4:9e:98:0f:26:7b:63:65:4d:41:e6:06:28:52:e2:18:
         53:53:7b:c2:5c:9d:9c:68:90:e3:a2:17:0d:54:2a:18:9f:9f:
         85:36:3a:14:32:05:94:77:c1:c5:34:74:a3:01:9d:f0:5c:e0:
         97:5d:bc:ba:9d:19:d2:a8:47:d0:07:0a:78:c6:dd:9f:6c:b1:
         23:17:95:0a:75:45:d5:61:67:ac:88:5c:d8:2f:93:8d:c7:67:
         47:64:fb:17:79:7b:e9:fe:9d:63:2f:56:50:31:2a:6b:da:ff:
         00:7c:50:f6:7e:56:6a:c5:c5:a0:dd:df:b0:3b:c6:b5:77:b3:
         e5:cd:e7:97:d4:5f:0f:d6:0c:35:6a:fc:3f:88:5a:ab:da:39:
         a8:a3:f0:d7:51:41:70:72:1a:d2:1c:99:88:e8:11:8a:63:2b:
         46:0a:fd:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x38gHyI+wl3ZdRXhNFkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjYwMTAxMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGMwNjBkZDljZTVjY2NjOTMyMGEzYjBmNWFmNmEzYjFhMDJhZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dqB2HpJpnXGicrhuK+d6zz3Ka5S
qQwgSJ2NnxD9enBVvkpvYf21iMiXIadpph+oRVDe/iQhgoTi8EAoAubvu0UCy2pf
a13v5GUBgLxMbhWgHc7nKhTh8zC+koQOL8pWsqjLuA2gcMjNHtjrf+Zy+qNuhynt
t1NA/jURbl3ONh7pFv0IDgt/Lc1dX0nY2ZFi+PHnD8tq/9o81uJZVZU3vPkmrbpF
hHrRwOqfJse5diFGu8Ih8RT4YPv0yP0/UYyFszKcX5aJqAgZW60HawXLsx3RIYAA
HhczP4h+F6kZ0fQemc+dwt4eqkI4rQxM/51lokx/qIrepPnmqoLbztopPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADAYN2c5czMkyCjsPWvajsaAq/+MB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvQU1CZzNaemx6TXlUSUtPdzlhOXFPeG9Dcl80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUrEIMA0G
CSqGSIb3DQEBCwUAA4IBAQAoCHfIl7D0b7jqbmh970CGr0s+9j2WnZ8ONBoYgwxP
Qjzb9Hm4btzummdSZmexq8J3301mBKm98YYIb0iZJYalyXi0RQNa+O64Ysv/VNkB
2eNd7/ugP0JZYMsg7PSemA8me2NlTUHmBihS4hhTU3vCXJ2caJDjohcNVCoYn5+F
NjoUMgWUd8HFNHSjAZ3wXOCXXby6nRnSqEfQBwp4xt2fbLEjF5UKdUXVYWesiFzY
L5ONx2dHZPsXeXvp/p1jL1ZQMSpr2v8AfFD2flZqxcWg3d+wO8a1d7PlzeeX1F8P
1gw1avw/iFqr2jmoo/DXUUFwchrSHJmI6BGKYytGCv3n
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:16:41 2026 by rpki-client