This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/13qwekY4GjAcz5yVaJHHXBWQpgs.roa
File:                     13qwekY4GjAcz5yVaJHHXBWQpgs.roa (raw, json)
Hash identifier:          fmublu91Ntmu81PKh1AFUCuBP9ZsM4t5yIMkiVJ3Bds=
Subject key identifier:   D7:7A:B0:7A:46:38:1A:30:1C:CF:9C:95:68:91:C7:5C:15:90:A6:0B
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019B7F1501C9749494F95200F58078BE34A0
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/13qwekY4GjAcz5yVaJHHXBWQpgs.roa
Signing time:             Fri 02 Jan 2026 14:20:41 +0000
ROA not before:           Fri 02 Jan 2026 14:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60976
IP address blocks:        81.12.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:01:c9:74:94:94:f9:52:00:f5:80:78:be:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jan  2 14:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d77ab07a46381a301ccf9c956891c75c1590a60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:e3:30:16:a2:aa:7f:ab:00:03:43:66:86:
                    df:22:02:7d:5d:2e:ac:e8:d5:0b:04:39:83:ef:1a:
                    15:31:f7:59:73:29:3d:d2:98:5c:21:ad:bd:9c:51:
                    31:37:36:22:7f:81:89:77:1f:cf:f7:30:b5:25:d8:
                    7b:b8:e2:e4:d2:99:db:5c:0a:ca:31:cb:d3:ae:1b:
                    fd:a4:a2:33:f8:a7:25:81:d0:31:20:dc:2b:3c:f4:
                    aa:c4:32:ae:c7:e6:40:79:29:bc:a1:6b:87:e8:7b:
                    5e:76:26:2b:f0:62:14:c8:3d:68:85:0f:53:15:4c:
                    63:a2:ea:c8:05:6b:0b:8d:02:86:2b:c3:2d:ea:65:
                    b7:73:57:f3:e7:c6:e8:aa:d8:30:52:6d:53:80:8a:
                    ed:dd:c5:b6:d1:42:ba:dc:d1:3d:e3:50:b3:dc:20:
                    14:ae:32:1b:27:39:dc:a8:0c:90:d9:99:f6:c8:fc:
                    47:cb:18:fd:b3:52:d3:a2:3b:fd:0a:e2:94:c6:4e:
                    ee:c3:e6:6e:01:52:d5:f8:43:42:3e:e7:3e:ae:f7:
                    84:50:c9:2b:bc:bb:82:8f:64:ca:8b:b5:cf:bf:bc:
                    3f:4b:ba:b5:de:01:d3:ab:3c:3c:c4:5d:8c:36:88:
                    58:1d:0b:2b:58:e7:5b:ed:cd:e9:7d:a1:85:d1:9b:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7A:B0:7A:46:38:1A:30:1C:CF:9C:95:68:91:C7:5C:15:90:A6:0B
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/13qwekY4GjAcz5yVaJHHXBWQpgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.12.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:49:60:5a:ff:db:e2:0e:21:b2:72:e9:d6:3f:6e:b0:a0:
         62:3e:c1:50:71:a0:23:a0:aa:4e:6f:cc:e3:fc:b4:26:75:c3:
         f7:81:a7:c2:be:c5:ad:f0:47:ba:c2:d4:4f:f0:16:8e:c1:a2:
         69:2c:c4:d5:7b:77:f8:54:4c:03:4e:8a:5b:8e:de:d8:ff:95:
         ca:a9:b0:e8:91:e1:9d:b8:fa:36:b8:e0:ef:d4:85:d6:04:87:
         fe:f5:b3:fe:24:73:2b:7f:fe:e4:10:ea:07:5d:03:a0:8f:c0:
         38:46:12:13:3d:4a:43:a7:81:9d:d3:77:ab:a0:ea:47:0b:79:
         e3:fb:08:31:08:80:cf:5d:b8:0e:92:22:dc:e1:bf:ee:c4:bd:
         02:5e:17:7f:84:28:aa:34:0f:87:39:9f:78:26:b2:12:9f:b2:
         83:8b:19:b4:fe:0a:84:22:a0:b3:64:cc:48:b6:17:af:d7:cd:
         26:80:7a:e9:71:68:e5:db:af:e7:72:3d:05:3c:42:bb:40:8d:
         1b:34:b7:55:bc:5e:15:24:8f:a6:4e:19:44:b7:2c:78:a0:db:
         5e:45:cc:65:0a:2b:bf:5d:60:eb:30:71:21:a6:c9:75:59:4a:
         7d:55:2b:a6:f3:a1:6f:2d:92:99:f0:3e:cf:ce:23:03:c4:10:
         ac:2e:a9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:00:26 2026 by rpki-client