This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Ir7BxX6z_EBB0mDNxFdEQ55iiOs.roa
File:                     Ir7BxX6z_EBB0mDNxFdEQ55iiOs.roa (raw, json)
Hash identifier:          yQWJLmZGnE0j5tjdQsvXjm4UxMpyJ+/kHzTEWWGPjOI=
Subject key identifier:   22:BE:C1:C5:7E:B3:FC:40:41:D2:60:CD:C4:57:44:43:9E:62:88:EB
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C78F79A54A7AD20A37A5A50BE6EC6E
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Ir7BxX6z_EBB0mDNxFdEQ55iiOs.roa
Signing time:             Thu 01 Jan 2026 04:18:45 +0000
ROA not before:           Thu 01 Jan 2026 04:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205813
IP address blocks:        81.15.239.0/24 maxlen: 24
                          81.15.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:8f:79:a5:4a:7a:d2:0a:37:a5:a5:0b:e6:ec:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=22bec1c57eb3fc4041d260cdc45744439e6288eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:9e:d4:24:15:7c:66:9f:35:f0:89:39:87:
                    01:85:87:c7:f8:c0:38:7b:57:7c:a6:46:78:1a:68:
                    35:59:5a:89:0a:2e:2c:78:0b:2d:e4:0b:1e:a9:e2:
                    40:03:8d:29:85:16:58:8f:55:67:83:ce:13:e5:b0:
                    c4:69:f7:66:69:44:26:40:d8:c7:21:ea:32:0a:63:
                    70:83:67:cf:5d:17:3c:77:01:13:b5:79:7b:dc:1f:
                    be:5b:62:e1:69:32:20:72:c9:46:5e:90:a6:03:d2:
                    14:e1:a3:26:1a:d9:32:a2:e4:dc:39:b2:d1:3a:19:
                    6c:df:f4:79:6d:cb:61:23:b3:8c:6c:a4:12:c7:21:
                    be:30:42:81:14:ed:0e:16:32:f5:a4:cd:43:ba:d1:
                    47:b4:1c:05:16:33:c4:9e:45:d6:18:30:7a:c4:7f:
                    e7:bd:4a:d6:4a:37:6d:04:db:5e:cc:78:3b:4c:bd:
                    ab:d8:7b:76:86:5d:3d:96:3f:20:ff:16:b1:de:77:
                    79:40:f3:af:95:d3:ac:f6:23:a7:46:b9:22:72:e8:
                    65:e2:6a:4a:45:27:d7:62:b7:35:89:18:c7:00:7b:
                    8c:6d:e2:8f:f1:73:a2:0e:f6:08:fa:77:1f:09:43:
                    3f:04:e4:5d:7b:14:c8:ab:8b:b0:d0:39:3f:5d:0e:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BE:C1:C5:7E:B3:FC:40:41:D2:60:CD:C4:57:44:43:9E:62:88:EB
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Ir7BxX6z_EBB0mDNxFdEQ55iiOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.239.0/24
                  81.15.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:83:6e:98:68:84:08:51:4f:ee:8b:26:67:3c:77:8b:4e:df:
         6b:2d:14:77:e7:75:77:54:bc:70:78:27:c6:73:b1:cb:c1:36:
         40:14:68:7c:c0:59:52:b4:95:76:3a:2b:81:b2:09:6b:6e:d7:
         1e:4e:34:1f:b4:c5:fa:ce:bc:c4:98:4c:54:f3:28:09:82:28:
         cc:81:93:c5:22:ce:dd:10:2b:90:75:e8:f5:5b:d7:92:ef:93:
         43:5b:7c:59:d5:72:c4:03:64:1d:09:f2:4a:7d:e5:5b:1c:43:
         27:43:59:ab:65:c5:39:92:68:8f:2c:37:b8:9b:1e:8a:8d:1e:
         39:6b:b5:28:83:66:8a:55:f9:81:2c:52:ab:ec:89:a6:f2:ee:
         d8:ed:84:1f:c6:bd:25:69:0a:18:ff:9b:0d:c1:4b:40:5d:e1:
         f7:c0:39:98:a5:f5:f9:86:73:a9:b0:58:0d:42:92:b8:85:db:
         ba:9c:57:ff:ef:51:f2:cb:98:8f:9c:9d:44:84:29:cd:e8:2e:
         fb:61:f2:c6:51:d5:52:41:b4:1a:64:58:e5:8d:37:41:2c:b4:
         55:b2:25:4a:58:ec:fe:14:ff:d0:79:1a:34:cb:17:6e:e6:6a:
         95:66:7c:b8:6e:e6:03:7e:9f:6b:cc:c8:bd:35:47:05:af:3a:
         4e:03:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:46 2026 by rpki-client