This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/751KubgOS7HBCPWTQZK8_c0bJh8.roa
File:                     751KubgOS7HBCPWTQZK8_c0bJh8.roa (raw, json)
Hash identifier:          pZSYTS5FX+8pRizhyqk288Z4lPS//MEroPNU3XHK8IQ=
Subject key identifier:   EF:9D:4A:B9:B8:0E:4B:B1:C1:08:F5:93:41:92:BC:FD:CD:1B:26:1F
Certificate issuer:       /CN=f54bfb01b03caa6fce887b4384253db20e59fa71
Certificate serial:       019B79ECAEC58840041AB0CAB66B45CE1094
Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/751KubgOS7HBCPWTQZK8_c0bJh8.roa
Signing time:             Thu 01 Jan 2026 14:18:32 +0000
ROA not before:           Thu 01 Jan 2026 14:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60772
IP address blocks:        77.94.64.0/22 maxlen: 22
                          77.94.64.0/24 maxlen: 24
                          77.94.65.0/24 maxlen: 24
                          77.94.66.0/24 maxlen: 24
                          77.94.67.0/24 maxlen: 24
                          185.26.140.0/22 maxlen: 22
                          185.26.140.0/24 maxlen: 24
                          185.26.141.0/24 maxlen: 24
                          185.26.142.0/24 maxlen: 24
                          185.26.143.0/24 maxlen: 24
                          2a00:83a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:ae:c5:88:40:04:1a:b0:ca:b6:6b:45:ce:10:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71
        Validity
            Not Before: Jan  1 14:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef9d4ab9b80e4bb1c108f5934192bcfdcd1b261f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0b:45:11:50:8c:57:52:01:85:07:79:f7:66:
                    5c:00:62:ca:b4:c5:c1:f9:3f:82:84:45:6b:a1:60:
                    67:ce:cf:11:65:c8:05:47:8e:68:c4:39:c0:5a:a9:
                    dd:3b:f3:4a:d1:5d:0c:76:56:94:00:38:16:be:39:
                    bf:3b:38:82:a7:e7:e7:a9:40:86:b2:91:0e:58:f2:
                    72:a0:6f:36:89:e6:63:19:72:8a:20:85:b1:9d:4c:
                    26:ac:33:4a:f7:da:06:0b:da:a9:c0:bb:db:cd:a2:
                    86:ca:63:db:77:5f:5c:26:34:09:94:12:06:b5:b8:
                    c8:f8:95:7a:b1:c9:7b:c9:ef:0f:5d:9a:f1:0a:a9:
                    a5:1e:4c:5f:ae:81:29:00:7f:a6:98:de:e5:76:68:
                    0f:81:b7:6a:fa:da:79:5d:6c:a3:2e:f2:f9:79:9c:
                    53:ad:79:12:21:8f:31:80:37:99:8f:04:f7:c7:02:
                    81:44:56:c1:41:05:65:b5:a0:d4:95:2c:a5:b5:9f:
                    ab:57:7c:41:f0:e5:a4:f8:2e:a1:5e:c3:9e:cd:a6:
                    e3:25:0e:35:86:22:e5:87:3a:25:c3:90:b6:c2:52:
                    58:d0:db:ab:00:d2:97:37:c9:df:b3:e0:2e:1d:b0:
                    68:ef:95:9f:cd:42:6c:e4:59:7e:09:51:f2:47:16:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9D:4A:B9:B8:0E:4B:B1:C1:08:F5:93:41:92:BC:FD:CD:1B:26:1F
            X509v3 Authority Key Identifier:
                keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/751KubgOS7HBCPWTQZK8_c0bJh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.94.64.0/22
                  185.26.140.0/22
                IPv6:
                  2a00:83a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:b2:fe:2d:19:f9:9b:ea:7e:18:80:3e:5e:5f:6f:8d:a1:
         b6:0d:a7:ca:76:e1:01:50:61:81:8c:9c:25:b7:6b:d4:c3:a7:
         7c:15:09:e8:42:f2:2d:3a:ee:d3:33:94:94:bb:90:77:82:70:
         f2:87:32:67:46:32:04:a2:2b:4d:5b:01:d5:15:f4:b1:f0:51:
         9c:2c:b0:7f:00:50:23:0b:62:42:4e:9d:1a:cc:f7:87:ef:68:
         5e:3f:d7:83:74:99:8c:33:95:40:4b:0d:ff:cc:40:87:b3:77:
         57:8a:9e:bd:c6:91:ee:05:08:00:b3:90:f2:7c:07:70:5c:19:
         ce:a2:00:b6:dc:c0:5c:2c:7a:9c:ba:bf:28:fa:b4:5d:6c:d3:
         96:cb:9a:e0:e5:6b:05:eb:65:ca:6f:fa:73:fb:31:a8:bb:fe:
         e7:0e:af:55:5e:95:09:a6:c9:ed:c6:ae:b0:2c:1a:24:ed:7b:
         d3:9e:61:8e:b8:05:47:1f:3e:28:28:2a:f4:57:88:a9:92:c0:
         0b:8e:1d:4d:25:14:19:29:01:b3:3a:ff:64:57:b4:84:a8:26:
         34:2d:cc:01:c8:e0:99:54:c9:64:b0:b6:d5:43:60:e4:3e:f8:
         6f:fa:be:f8:cc:8b:bb:5b:0d:fc:62:fd:73:cb:b4:af:61:69:
         04:a8:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:00 2026 by rpki-client