This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/1JIM2kMeVJoHRDwhcEraJMNWzzk.roa
File:                     1JIM2kMeVJoHRDwhcEraJMNWzzk.roa (raw, json)
Hash identifier:          7HnRkqXRdr1xWTIy9iiHnk4cqifwXb86Gt3ZsfiE8YQ=
Subject key identifier:   D4:92:0C:DA:43:1E:54:9A:07:44:3C:21:70:4A:DA:24:C3:56:CF:39
Certificate issuer:       /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial:       019B7CED3AB03C57B5F3542D5E6B2290728C
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/1JIM2kMeVJoHRDwhcEraJMNWzzk.roa
Signing time:             Fri 02 Jan 2026 04:18:00 +0000
ROA not before:           Fri 02 Jan 2026 04:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3303
IP address blocks:        193.246.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:3a:b0:3c:57:b5:f3:54:2d:5e:6b:22:90:72:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
        Validity
            Not Before: Jan  2 04:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d4920cda431e549a07443c21704ada24c356cf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:56:7c:3d:2c:99:33:1b:fa:81:3c:bf:a3:
                    07:00:3b:3d:3c:52:84:22:21:8b:9b:1d:ac:00:18:
                    50:39:83:7a:52:93:8e:8e:12:87:52:f6:ec:13:b0:
                    62:ef:83:f8:65:82:47:66:cd:a5:3b:f0:b5:3d:24:
                    15:1c:86:fd:bf:89:f7:f0:a5:9b:92:41:7a:a3:6f:
                    98:79:17:b1:64:19:0b:f5:e0:da:6a:7e:6c:68:2f:
                    ea:5a:f2:50:26:ef:8d:81:78:bf:a2:3a:17:23:81:
                    bd:1c:21:d6:e3:75:9c:0e:b0:3f:c4:e7:d9:36:13:
                    88:87:0c:6b:8d:eb:eb:9c:6c:d8:58:1a:d0:90:f7:
                    fe:22:54:e7:36:c3:b8:17:c2:cc:fe:8a:dc:43:c0:
                    01:a3:af:45:66:7d:7c:b4:84:b4:a2:ed:2f:4f:4d:
                    33:20:ca:6c:46:2f:72:34:fb:92:4c:f1:21:45:95:
                    f7:b7:1c:b1:78:e4:e2:48:b4:da:37:ba:fa:85:a7:
                    32:a9:70:b9:6b:8b:19:b0:b7:f7:8c:02:d8:76:42:
                    77:60:63:d7:19:7e:b1:78:7f:2c:4d:68:c6:ea:ba:
                    7f:0e:68:5b:c3:20:4a:86:1b:ff:89:ec:f6:33:55:
                    0a:2c:5f:8b:ff:88:b5:43:d5:b8:f5:fc:a2:04:38:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:92:0C:DA:43:1E:54:9A:07:44:3C:21:70:4A:DA:24:C3:56:CF:39
            X509v3 Authority Key Identifier:
                keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/1JIM2kMeVJoHRDwhcEraJMNWzzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:26:b0:5d:15:0a:ff:0c:78:ae:ee:32:6c:26:96:80:54:
         f7:5f:68:d2:84:c1:40:41:f7:92:03:e6:08:e6:c8:1f:28:f9:
         a0:a7:b1:44:50:1e:ef:82:d6:de:3d:64:00:97:68:b4:98:58:
         f5:63:19:8b:55:6d:b0:8d:25:1f:4a:e8:c5:6f:27:7c:eb:50:
         25:1b:83:05:ab:2f:06:c0:9e:95:b8:92:12:95:e3:e4:28:65:
         f8:b6:d2:9f:be:9c:31:85:b5:7c:1b:6c:ed:95:5a:fe:a8:1c:
         d6:6c:6e:1c:27:44:9e:0b:2f:74:5c:61:f2:c5:c0:e0:6b:5a:
         c5:de:ba:b8:62:20:bd:a3:25:96:00:ef:92:3b:e9:3d:6b:48:
         3a:36:64:a3:aa:2a:2b:88:63:f6:62:ae:76:08:55:10:ea:84:
         40:1c:73:2a:0f:65:3d:fa:3e:6d:73:67:26:a7:c4:0b:74:4a:
         97:48:96:ef:83:c2:ca:8a:af:2c:fc:bf:a3:bd:10:34:53:59:
         8c:5c:2f:08:dd:de:25:79:9e:8c:34:6c:c5:8f:e2:e5:e8:86:
         d7:ea:4d:b4:cd:f4:40:ef:10:dd:70:ea:e7:67:2d:cb:9b:43:
         11:49:35:8d:ae:f8:ef:5f:4d:7c:07:d7:91:0d:52:73:fd:d6:
         eb:97:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:21 2026 by rpki-client