This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/01fcbO9Bfxx1VFKSbJlE6EkZBDQ.roa
File:                     01fcbO9Bfxx1VFKSbJlE6EkZBDQ.roa (raw, json)
Hash identifier:          EvZLdX9Binx5+1EbIcTN/VUYvU4nOSU+e5FUofioFRw=
Subject key identifier:   D3:57:DC:6C:EF:41:7F:1C:75:54:52:92:6C:99:44:E8:49:19:04:34
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019B7F1508A59606B14C73D0EA894251BDF2
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/01fcbO9Bfxx1VFKSbJlE6EkZBDQ.roa
Signing time:             Fri 02 Jan 2026 14:20:43 +0000
ROA not before:           Fri 02 Jan 2026 14:20:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210470
IP address blocks:        87.107.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:08:a5:96:06:b1:4c:73:d0:ea:89:42:51:bd:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jan  2 14:20:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d357dc6cef417f1c755452926c9944e849190434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:66:48:05:b2:31:d3:a5:d2:4f:2b:47:fe:
                    a0:b9:61:02:7b:75:b6:ca:a4:a2:f8:fb:74:0b:e6:
                    8f:e5:6a:8d:13:8c:2a:0b:cf:5e:e7:25:ab:62:af:
                    ab:e6:ea:08:2d:59:9c:14:da:ad:dd:95:dc:d5:c6:
                    27:72:d4:69:54:2f:56:45:ba:4b:b8:68:3d:e0:5e:
                    1b:6a:05:a7:05:db:f0:6c:9e:55:30:6c:d2:d0:84:
                    53:e3:8a:2c:54:39:36:56:a8:2d:07:22:07:53:bd:
                    82:93:63:b1:dd:ec:a3:e7:95:38:03:68:ca:b0:ad:
                    cb:d6:d0:cd:13:7e:7f:92:70:ca:01:10:fd:90:f0:
                    bd:9c:2c:36:f9:36:20:33:69:7b:31:00:1d:aa:2e:
                    41:43:a9:3b:ad:d1:3a:fb:4e:1d:5c:74:03:79:71:
                    86:d6:7e:5c:c5:c2:85:b7:5e:24:71:07:e8:b4:3b:
                    49:8a:04:26:3c:03:3d:8b:a9:c0:f0:34:65:a6:8f:
                    b6:25:93:a1:cf:ef:85:87:67:55:ab:f5:67:4f:87:
                    9f:03:a6:b8:6d:77:22:f2:b8:1e:fb:8b:c8:7e:86:
                    a3:0a:a9:5d:b8:ca:18:83:55:90:31:cc:f5:59:f0:
                    e3:76:46:61:7a:31:06:41:5a:1c:39:15:70:99:38:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:57:DC:6C:EF:41:7F:1C:75:54:52:92:6C:99:44:E8:49:19:04:34
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/01fcbO9Bfxx1VFKSbJlE6EkZBDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.107.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:0f:f6:00:bb:21:4c:93:3b:93:69:dc:00:f6:e3:13:dd:
         80:4a:21:b0:fb:19:3d:30:26:82:c5:cd:3c:fc:7f:ce:5b:37:
         a1:7f:6d:c1:06:70:38:d9:67:f7:42:3d:e4:1b:8c:78:53:70:
         10:53:d7:f4:61:cf:26:cc:b9:ef:ef:08:12:28:b6:fc:3f:bf:
         9d:ca:84:7e:c4:34:62:86:61:6c:05:1d:7e:74:dd:f6:d8:86:
         07:8a:57:66:40:93:37:7b:65:3a:69:5a:a8:77:6c:16:15:48:
         6b:48:70:04:4a:36:bd:51:ac:0b:05:83:d3:a6:00:69:01:7b:
         f4:08:06:a5:55:e3:a9:6c:1d:a3:37:5a:d5:b7:36:25:76:a4:
         58:87:b8:05:c5:7b:85:e9:ce:df:5d:a7:90:b0:d5:59:4b:d8:
         59:c8:52:c9:8d:36:08:ba:24:72:b4:d2:e0:98:f6:01:c1:c1:
         73:5c:9a:3e:5f:6a:ff:47:72:b3:1e:be:6e:e5:5f:81:06:f5:
         74:52:bc:32:2a:da:88:40:0f:45:6a:88:71:b3:c5:6e:c5:fe:
         ae:97:95:6f:4d:a9:e6:0b:0e:bb:e8:a4:d5:f9:be:6e:78:bb:
         3d:b3:9f:5e:26:d3:c9:77:c7:fe:3f:70:e5:9c:fa:9e:4d:9f:
         f4:fb:25:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FQillgaxTHPQ6olCUb3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzU3ZGM2Y2VmNDE3ZjFjNzU1NDUyOTI2Yzk5NDRlODQ5MTkwNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqlmSAWyMdOl0k8rR/6guWECe3W2
yqSi+Pt0C+aP5WqNE4wqC89e5yWrYq+r5uoILVmcFNqt3ZXc1cYnctRpVC9WRbpL
uGg94F4bagWnBdvwbJ5VMGzS0IRT44osVDk2VqgtByIHU72Ck2Ox3eyj55U4A2jK
sK3L1tDNE35/knDKARD9kPC9nCw2+TYgM2l7MQAdqi5BQ6k7rdE6+04dXHQDeXGG
1n5cxcKFt14kcQfotDtJigQmPAM9i6nA8DRlpo+2JZOhz++Fh2dVq/VnT4efA6a4
bXci8rge+4vIfoajCqlduMoYg1WQMcz1WfDjdkZhejEGQVocORVwmTjGkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNX3GzvQX8cdVRSkmyZROhJGQQ0MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvMDFmY2JPOUJmeHgxVkZLU2JKbEU2RWtaQkRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2ufMA0G
CSqGSIb3DQEBCwUAA4IBAQBFWw/2ALshTJM7k2ncAPbjE92ASiGw+xk9MCaCxc08
/H/OWzehf23BBnA42Wf3Qj3kG4x4U3AQU9f0Yc8mzLnv7wgSKLb8P7+dyoR+xDRi
hmFsBR1+dN322IYHildmQJM3e2U6aVqod2wWFUhrSHAESja9UawLBYPTpgBpAXv0
CAalVeOpbB2jN1rVtzYldqRYh7gFxXuF6c7fXaeQsNVZS9hZyFLJjTYIuiRytNLg
mPYBwcFzXJo+X2r/R3KzHr5u5V+BBvV0UrwyKtqIQA9Faohxs8Vuxf6ul5VvTanm
Cw676KTV+b5ueLs9s59eJtPJd8f+P3DlnPqeTZ/0+yVT
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:57 2026 by rpki-client