This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/gOxCfBe1lb07Dd9lS3azAI_drcM.roa
File:                     gOxCfBe1lb07Dd9lS3azAI_drcM.roa (raw, json)
Hash identifier:          PjS4rrXO8Wuzfyz+7dGFwXl0RtklTG2PNwxKVtX++as=
Subject key identifier:   80:EC:42:7C:17:B5:95:BD:3B:0D:DF:65:4B:76:B3:00:8F:DD:AD:C3
Certificate issuer:       /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial:       019B7834B769670771C29DC9474164C178AD
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/gOxCfBe1lb07Dd9lS3azAI_drcM.roa
Signing time:             Thu 01 Jan 2026 06:17:59 +0000
ROA not before:           Thu 01 Jan 2026 06:17:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        46.253.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:b7:69:67:07:71:c2:9d:c9:47:41:64:c1:78:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
        Validity
            Not Before: Jan  1 06:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=80ec427c17b595bd3b0ddf654b76b3008fddadc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:71:4b:43:c6:6b:99:dc:6c:4b:ed:55:6f:a6:
                    87:c7:19:70:16:ab:7a:ba:3c:eb:01:a3:25:0a:7b:
                    94:e4:21:6f:31:19:8f:28:54:ba:43:db:2d:97:1f:
                    5c:0b:73:cb:16:7a:12:14:f0:0c:c5:f7:4b:a7:34:
                    de:c3:7c:3b:be:13:d6:78:90:2b:6b:eb:8d:a8:12:
                    85:a1:3e:00:12:4b:49:7b:c5:2b:df:f2:72:ab:b2:
                    70:6f:11:39:ae:e8:7a:14:51:b0:c0:9c:29:c9:26:
                    b7:e5:7b:08:4e:5c:06:16:31:54:6e:fe:d8:a9:7e:
                    1f:4e:ea:f1:28:68:8c:3d:28:bd:57:88:a6:4b:42:
                    9d:54:47:a2:20:8f:e3:a3:5c:16:bb:b4:ab:28:77:
                    2b:f5:4c:81:4c:4d:8f:39:c0:67:48:15:ac:5c:e5:
                    2d:5b:b4:75:2c:0f:ae:40:93:19:3f:13:aa:fc:c7:
                    17:91:c2:12:6a:a5:fb:db:19:c4:42:ae:33:09:cc:
                    4c:f1:51:6b:25:0a:73:8a:03:bc:d5:5f:9d:09:93:
                    ea:12:d2:f1:1e:e6:dc:93:b6:c5:74:15:d0:06:26:
                    3a:0b:b7:a8:8e:f2:34:b6:9e:9d:7a:30:35:0f:2d:
                    be:88:b6:da:41:a4:f7:9e:f8:d9:c4:e8:06:8d:c5:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EC:42:7C:17:B5:95:BD:3B:0D:DF:65:4B:76:B3:00:8F:DD:AD:C3
            X509v3 Authority Key Identifier:
                keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/gOxCfBe1lb07Dd9lS3azAI_drcM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:f2:b0:88:25:c9:7d:61:fc:88:d0:c8:6b:50:87:05:ba:
         41:36:4d:22:36:3a:55:5b:1e:db:44:21:b6:85:53:45:97:6d:
         cf:77:1a:0b:58:ff:10:51:d8:7e:00:7c:36:63:89:77:be:7d:
         f8:9e:08:49:56:a3:e3:21:49:cf:15:6b:f1:a6:eb:ce:f5:53:
         09:ea:82:7c:51:28:2c:f1:b7:dc:e9:88:8a:55:7d:eb:05:91:
         4a:b8:a1:6d:ae:20:bd:6b:85:66:e6:ae:d8:a4:cf:6e:f8:6f:
         33:11:81:8e:17:af:dd:84:ad:a9:65:c6:db:27:46:f9:69:76:
         be:f2:f8:8d:06:18:09:da:13:e1:47:2f:90:90:8c:d0:be:fe:
         dd:03:df:15:0a:78:e0:4b:ab:16:ef:65:bc:83:67:09:65:a1:
         1d:a0:da:a2:24:ed:40:ac:36:1d:d9:68:5d:83:ca:65:cf:1b:
         aa:89:45:27:df:3b:e5:30:ca:d4:00:0d:ec:e0:76:49:f3:f9:
         ca:67:39:28:b9:ea:bb:87:d3:6f:f4:95:22:fc:1a:16:6d:a0:
         8d:10:4b:75:9b:0f:05:97:a5:a5:ae:1a:0f:e0:7e:79:60:33:
         11:6c:84:af:06:df:1b:f4:e7:20:d1:56:d7:4b:95:2a:a5:63:
         0e:31:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:39:03 2026 by rpki-client