This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/t7fNoBUxnAU0549Ip1HeZ_iKUSs.roa
File:                     t7fNoBUxnAU0549Ip1HeZ_iKUSs.roa (raw, json)
Hash identifier:          YPXLajcelIcoxFRa369sesX/66jnpHQJLbuAqNSFoe0=
Subject key identifier:   B7:B7:CD:A0:15:31:9C:05:34:E7:8F:48:A7:51:DE:67:F8:8A:51:2B
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C78A4844C7D91A73FD5D35CD7F46D2
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/t7fNoBUxnAU0549Ip1HeZ_iKUSs.roa
Signing time:             Thu 01 Jan 2026 04:18:44 +0000
ROA not before:           Thu 01 Jan 2026 04:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203188
IP address blocks:        82.177.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:8a:48:44:c7:d9:1a:73:fd:5d:35:cd:7f:46:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7b7cda015319c0534e78f48a751de67f88a512b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d4:48:6f:ce:27:3e:12:88:63:0b:19:41:b0:
                    c7:39:31:0d:68:91:fb:d8:0f:27:a6:3c:6c:e3:5e:
                    3a:5e:74:8b:5c:91:e7:db:33:67:3f:31:82:20:28:
                    38:18:9e:9f:56:45:72:6d:a5:78:96:50:71:cb:f6:
                    02:9b:c0:0f:a0:de:e4:14:c1:92:cd:ec:e3:d6:bc:
                    22:cd:63:90:d9:6f:17:7d:90:77:2f:c2:4d:a5:cf:
                    5e:24:b4:f5:e6:29:8c:81:02:70:e5:fb:dc:ec:f6:
                    22:cc:a2:0d:ae:ac:35:9e:1a:5a:d2:eb:33:c2:df:
                    37:29:18:41:d1:13:a3:6f:d1:82:97:ea:a0:f8:41:
                    65:a5:5b:cd:64:b5:03:59:4a:d4:19:9c:3a:40:f5:
                    93:77:25:5a:82:87:2b:4a:ed:16:d5:48:fe:87:78:
                    83:d4:f2:1d:7e:97:6a:af:85:38:13:a1:14:44:28:
                    60:66:2b:59:61:c7:a7:5d:94:20:34:3d:36:83:67:
                    48:5f:ff:5b:4f:02:8d:2a:89:7b:17:41:9f:9f:8c:
                    3f:c3:73:36:ae:3c:d4:1d:02:4e:98:43:45:70:20:
                    29:7b:ba:19:06:5d:c5:96:ac:2f:ae:0c:56:bc:30:
                    6d:82:ea:1c:cc:d3:eb:fb:7c:82:ed:0e:08:54:88:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B7:CD:A0:15:31:9C:05:34:E7:8F:48:A7:51:DE:67:F8:8A:51:2B
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/t7fNoBUxnAU0549Ip1HeZ_iKUSs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:18:f7:9d:e5:e7:cf:ec:4c:79:69:e1:9c:67:b8:76:60:
         37:36:6e:3c:4d:f5:64:54:2f:f6:10:97:9b:11:51:30:7b:54:
         a0:96:70:a4:d0:1b:44:0a:d7:09:6d:d2:3f:ac:72:84:14:ae:
         31:ea:16:8e:7a:24:39:9e:8c:98:94:6b:e7:c9:e6:7c:78:fd:
         85:0d:37:5b:30:71:0c:50:a6:24:5f:f3:2c:9a:49:a1:0a:d0:
         7d:8f:95:03:45:d5:d3:fb:1e:2c:f8:d3:0c:d3:65:ac:b4:0c:
         6b:f4:91:cc:82:83:8a:44:36:ff:96:72:d9:e2:5c:7d:be:d0:
         ff:67:d5:a9:fc:8b:4e:cb:5f:aa:20:1a:ec:f2:39:5f:a2:37:
         65:5c:0e:4f:9e:93:aa:95:44:f3:ce:26:f4:43:c6:5f:8d:f3:
         be:9e:a9:35:17:87:53:9f:66:d6:f1:58:50:22:08:f6:5d:79:
         0a:d2:83:26:9b:ac:8a:ab:9a:ec:94:15:7d:6f:5c:1e:51:31:
         ff:e0:34:62:66:fb:cb:89:28:c8:8b:cd:de:36:cc:a8:fb:6f:
         16:7c:3e:28:32:91:d1:c3:2c:a9:e1:f6:c4:c3:2d:38:42:6d:
         54:23:b3:4c:6c:1a:fd:f8:93:a1:a4:16:dd:12:f9:43:be:f4:
         68:e0:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:05 2026 by rpki-client