This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/1-77MLKbMDtDiajP4cnfRaQ3miEM.roa
File:                     1-77MLKbMDtDiajP4cnfRaQ3miEM.roa (raw, json)
Hash identifier:          uR4xAscZt2UY723RU9mF1OjyVpc+mJ5l3PG1PYSxgqc=
Subject key identifier:   FB:BE:CC:2C:A6:CC:0E:D0:E2:6A:33:F8:72:77:D1:69:0D:E6:88:43
Certificate issuer:       /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial:       019B7A5B0CC44829502D5A0A4DEC92E8D6F3
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/1-77MLKbMDtDiajP4cnfRaQ3miEM.roa
Signing time:             Thu 01 Jan 2026 16:19:05 +0000
ROA not before:           Thu 01 Jan 2026 16:19:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2119
IP address blocks:        91.233.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:0c:c4:48:29:50:2d:5a:0a:4d:ec:92:e8:d6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
        Validity
            Not Before: Jan  1 16:19:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fbbecc2ca6cc0ed0e26a33f87277d1690de68843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:37:71:5c:4f:44:63:9d:46:dc:e9:a7:d0:f0:
                    8f:4f:7d:07:fe:91:29:2b:2d:6f:1b:77:f3:64:7c:
                    c3:52:da:02:0f:4f:46:ca:bd:b5:ae:e9:ae:bc:5a:
                    22:d4:e0:78:a4:ef:d1:fe:73:d4:67:ab:08:85:b5:
                    43:c8:38:79:c5:88:2c:e3:3c:8c:41:1f:8d:3d:ab:
                    ab:b6:e8:15:d6:aa:a4:f4:74:fc:08:05:ed:d1:b7:
                    6c:8c:52:c8:50:61:5b:66:3d:53:ea:74:5e:8b:de:
                    c5:a4:94:0e:29:9d:28:a1:06:6c:bd:df:20:29:c6:
                    71:de:33:f3:7f:1a:2d:1a:29:a1:72:37:16:4c:dd:
                    bf:f5:2f:ea:14:8c:ca:c7:9f:98:70:ac:c6:47:73:
                    f2:36:2b:52:3a:28:32:db:a8:eb:04:c7:56:58:d1:
                    17:d5:64:e5:38:14:34:9b:c6:80:4f:f1:ff:2a:48:
                    f2:e9:26:c5:d3:4f:f1:1a:67:89:39:fe:80:9b:81:
                    d9:df:bf:a0:42:44:b0:e5:40:f8:65:c0:19:6f:62:
                    4e:20:ef:0b:03:db:62:65:2a:37:ef:0c:89:22:89:
                    af:c8:4f:f8:31:4d:7f:03:c1:60:2d:4e:68:17:24:
                    23:38:93:4d:28:76:a3:a2:64:bf:8b:b2:bb:42:43:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BE:CC:2C:A6:CC:0E:D0:E2:6A:33:F8:72:77:D1:69:0D:E6:88:43
            X509v3 Authority Key Identifier:
                keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/1-77MLKbMDtDiajP4cnfRaQ3miEM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:a4:47:8d:fa:a8:e4:d7:24:ab:d9:5d:6e:70:16:c6:e6:
         9c:76:27:8f:d0:b4:e7:46:4b:36:36:7f:0b:1a:5b:ef:f0:96:
         98:48:4f:68:ce:ed:e1:77:89:58:b0:4c:7e:51:b9:2f:f7:50:
         54:4a:36:c9:a6:51:45:02:cb:ef:30:2f:f2:7b:04:f3:d5:0c:
         78:63:03:57:86:8f:8e:af:02:2c:92:ec:2d:b9:f0:92:2d:1b:
         36:07:7f:7a:ee:d5:fa:54:d1:51:d0:3a:a6:32:1c:6f:28:a2:
         59:9d:f0:9c:56:b3:7d:09:90:33:9a:ef:d0:22:30:b2:f4:35:
         d5:f0:56:80:4e:c9:55:75:5b:61:76:18:84:1c:17:ae:55:c4:
         07:38:c1:45:6e:da:19:ca:f7:4e:0a:8b:b9:64:28:9e:de:5d:
         a9:b1:b2:6d:6b:d6:c9:97:56:e3:a9:7c:d3:fc:4b:85:37:53:
         6c:2d:63:3c:7e:89:1e:fc:02:fe:7b:43:33:04:5a:23:82:b8:
         51:43:ca:dc:e8:c8:16:9d:0e:19:f6:a0:ff:37:15:4e:e2:5f:
         bb:83:a3:1f:08:4f:1e:a8:88:c7:8c:dd:5b:6d:f3:c2:16:b5:
         57:bd:81:cb:87:60:bd:f9:5e:9c:34:d1:8d:90:52:f4:09:39:
         73:a3:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:11:36 2026 by rpki-client