This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_XURM7cgkybG2Dz39fTL1geTozI.roa
File:                     _XURM7cgkybG2Dz39fTL1geTozI.roa (raw, json)
Hash identifier:          Mpag9CjsmZGIRpGjiFF6vS9x1fAq9xVA3NoBoVtVlnw=
Subject key identifier:   FD:75:11:33:B7:20:93:26:C6:D8:3C:F7:F5:F4:CB:D6:07:93:A3:32
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C793C9BA19C8BBF7B5582AA36DA22C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_XURM7cgkybG2Dz39fTL1geTozI.roa
Signing time:             Thu 01 Jan 2026 04:18:46 +0000
ROA not before:           Thu 01 Jan 2026 04:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208227
IP address blocks:        82.177.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:93:c9:ba:19:c8:bb:f7:b5:58:2a:a3:6d:a2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd751133b7209326c6d83cf7f5f4cbd60793a332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:af:45:e3:ac:5f:64:df:87:5b:d3:36:02:
                    55:b0:8c:52:e6:dc:84:27:49:c2:8f:d7:3c:46:de:
                    fd:07:6d:16:03:31:a3:2b:25:22:05:02:0f:6c:14:
                    f9:ae:31:f6:e3:ba:89:29:68:fc:1b:9f:5a:7e:27:
                    6b:15:02:a8:9d:57:28:7c:aa:ad:4f:3b:d4:7e:3d:
                    73:b0:bc:c8:16:fe:6f:53:0d:a0:ca:d6:1d:b4:38:
                    cb:88:d2:5d:e0:85:7a:e1:fa:95:50:dc:c7:f5:04:
                    2d:31:b2:fe:57:02:3f:6d:08:94:37:c4:72:13:f1:
                    0e:69:e8:0f:68:8f:be:5a:11:6f:d6:06:f2:33:36:
                    ff:76:85:d8:3e:47:72:ce:fe:92:08:51:9a:2d:4c:
                    28:0f:f5:82:f3:2d:24:4d:6b:c5:3e:5f:3f:3f:95:
                    16:a7:2d:c5:e9:a4:32:b4:61:09:bc:01:2d:63:ed:
                    e5:89:60:1d:22:81:eb:52:34:4d:22:3b:e7:18:4e:
                    af:aa:1b:e8:1e:1d:46:14:06:b4:0c:f0:79:b7:12:
                    46:43:84:c5:82:37:b3:34:b6:22:d5:9a:b3:5a:08:
                    68:69:d0:29:4a:d3:c2:50:18:80:f1:ef:54:c9:89:
                    6f:4b:fc:7e:66:9d:0b:d8:3b:3d:c1:4d:c2:72:98:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:75:11:33:B7:20:93:26:C6:D8:3C:F7:F5:F4:CB:D6:07:93:A3:32
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_XURM7cgkybG2Dz39fTL1geTozI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:c1:11:7b:8d:87:ac:96:50:6c:f0:1a:9d:c4:b9:5e:a8:46:
         86:68:e2:70:65:cc:f5:16:9a:fa:ac:fd:54:a0:eb:7c:3c:6f:
         21:b3:5f:d2:26:59:28:8c:77:e2:77:a7:22:1d:be:6d:9b:d1:
         1f:29:0b:0f:ce:de:de:af:52:7f:3a:7c:67:fa:39:2e:fb:fd:
         07:f6:57:69:82:7f:5b:d1:c0:a0:89:ef:89:4a:e1:43:28:ba:
         05:3d:11:dd:35:3f:21:5b:75:80:c0:74:50:94:0e:86:a6:3a:
         e2:7f:17:db:d1:1f:3a:0d:c3:e8:af:52:e1:d8:e4:45:0f:4c:
         ff:71:cf:ae:c0:8d:44:1b:c0:df:71:f0:f3:ee:af:5f:11:58:
         bb:8f:3e:32:cd:d0:a8:b0:97:92:a3:60:48:1c:73:23:85:69:
         84:1a:f2:2e:92:18:a9:8a:fe:24:35:4e:70:46:e9:be:8d:38:
         e5:7d:62:83:11:1f:8f:43:25:70:a8:fa:b0:e8:d1:6d:03:dc:
         50:61:00:a2:e9:01:d0:a2:60:57:69:b3:0d:d5:3a:e6:66:90:
         fd:5b:70:37:2b:f6:f3:ce:ea:ff:b1:95:11:d2:6a:27:01:4a:
         09:ec:e1:9a:ca:74:67:06:e7:1d:c9:7e:28:f3:75:3b:53:3f:
         88:f2:25:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:25 2026 by rpki-client