This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/f0fgVq5v0RIgF3TPT5OnTGWLJ2Q.roa
File:                     f0fgVq5v0RIgF3TPT5OnTGWLJ2Q.roa (raw, json)
Hash identifier:          lizHfK/KBKKD9ai3P/psSzSxCpVwKggQHwNWthTy8rI=
Subject key identifier:   7F:47:E0:56:AE:6F:D1:12:20:17:74:CF:4F:93:A7:4C:65:8B:27:64
Certificate issuer:       /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial:       019B7C800D09AC8B0F6A4190F9B432708A19
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/f0fgVq5v0RIgF3TPT5OnTGWLJ2Q.roa
Signing time:             Fri 02 Jan 2026 02:18:45 +0000
ROA not before:           Fri 02 Jan 2026 02:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14898
IP address blocks:        81.80.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:0d:09:ac:8b:0f:6a:41:90:f9:b4:32:70:8a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
        Validity
            Not Before: Jan  2 02:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f47e056ae6fd112201774cf4f93a74c658b2764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:c7:ff:61:e4:b3:df:d9:1b:16:c9:b3:2c:
                    53:cd:0a:5e:ee:f0:ef:ea:e5:a5:6f:b8:3b:c6:41:
                    67:59:61:30:b4:58:07:53:cc:8a:aa:4f:06:7f:13:
                    60:6a:51:03:d3:a3:39:13:26:2f:4f:b6:aa:03:c6:
                    6d:64:4e:27:e7:cb:8d:5a:5a:db:ca:46:19:f0:f6:
                    2a:4f:26:85:8b:76:a1:0c:26:68:ac:41:09:e8:d0:
                    b0:7b:09:b5:9c:da:0a:11:0b:5f:68:16:61:9b:f9:
                    e2:1b:1b:4c:c8:42:99:78:7e:1b:fd:12:c9:08:59:
                    87:de:08:99:5c:dd:75:70:2c:60:8f:80:06:e8:80:
                    7f:89:b3:21:d3:39:32:e7:b4:ce:2a:44:57:ce:fe:
                    98:2f:ce:59:ea:94:bc:ad:e1:e0:a7:cd:2d:05:f7:
                    1c:bd:72:f3:b5:2e:93:f8:b8:65:15:05:c2:6e:34:
                    44:87:97:4a:77:e9:dd:b8:4f:5f:c6:aa:02:2e:10:
                    a7:20:2c:3c:cc:af:1e:e3:48:9b:60:33:f3:98:5f:
                    c6:7b:35:39:cb:6f:d1:f2:55:92:29:7d:c2:b6:bd:
                    d5:2b:34:45:71:2c:bd:a0:42:75:37:b8:5f:df:9f:
                    e0:ed:99:78:90:3a:72:37:07:24:8f:d4:b7:93:81:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:47:E0:56:AE:6F:D1:12:20:17:74:CF:4F:93:A7:4C:65:8B:27:64
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/f0fgVq5v0RIgF3TPT5OnTGWLJ2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.80.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:d7:8c:af:af:66:99:f1:b8:9d:e0:dc:20:7a:ad:14:3f:65:
         99:bf:4b:64:0e:58:3e:17:71:13:24:8a:6c:39:89:14:68:9a:
         51:8e:0b:88:2e:12:61:89:f7:c9:dd:7f:25:8f:a6:ce:7e:f5:
         12:25:b6:30:01:fe:b2:ad:40:70:97:dc:fa:df:b6:65:45:b7:
         63:4f:fe:cb:85:04:3c:ca:c1:bf:d2:fa:42:9f:67:81:a4:0d:
         2d:ae:91:7d:f6:cf:83:82:1b:8a:8c:60:26:24:e5:4b:99:81:
         e0:11:cf:96:99:35:40:a1:7c:b4:29:46:17:6a:2c:21:97:a4:
         2d:c5:96:aa:64:90:f7:20:92:0d:e0:4a:c7:d7:fe:59:26:d5:
         1a:f2:8c:ef:9e:80:70:b2:8e:f3:6d:b3:ec:ed:ee:23:37:f9:
         b0:0d:13:6c:9c:c6:07:af:4c:b1:24:62:36:84:63:43:49:0e:
         fa:76:81:34:a7:83:2c:50:86:b0:c4:9f:62:b1:3e:2b:75:90:
         bc:16:da:88:ae:0b:30:dc:1d:d0:ff:ad:b8:82:1d:e0:e7:b6:
         59:02:5a:01:ea:e6:92:5c:20:b3:01:0a:cd:98:f7:65:20:50:
         35:83:9c:52:11:01:47:48:d2:65:46:a5:97:a5:e0:85:b3:0b:
         fd:48:28:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:28:57 2026 by rpki-client