This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IObvRVgbo-BUxxYo4SEbVR1zvFM.roa
File:                     IObvRVgbo-BUxxYo4SEbVR1zvFM.roa (raw, json)
Hash identifier:          71Jed/rmV3TiDiXsOYPVGwM9ipx3YesHNMZ3EWwGuDk=
Subject key identifier:   20:E6:EF:45:58:1B:A3:E0:54:C7:16:28:E1:21:1B:55:1D:73:BC:53
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019B7F14FA3878B56206469E2557CC0D72A6
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IObvRVgbo-BUxxYo4SEbVR1zvFM.roa
Signing time:             Fri 02 Jan 2026 14:20:39 +0000
ROA not before:           Fri 02 Jan 2026 14:20:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43415
IP address blocks:        87.107.80.0/22 maxlen: 22
                          87.107.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:fa:38:78:b5:62:06:46:9e:25:57:cc:0d:72:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jan  2 14:20:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=20e6ef45581ba3e054c71628e1211b551d73bc53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:92:a7:c9:fa:e4:50:78:88:99:92:be:db:
                    33:50:bb:32:45:f7:4e:89:6a:89:b6:08:82:f8:3e:
                    3c:fc:77:93:11:b8:f4:62:c5:30:bc:87:db:5f:11:
                    c3:3d:59:a5:a1:22:2c:7c:9d:01:3a:71:82:0e:c3:
                    5d:f2:bd:41:e9:b2:55:e7:b4:2f:30:66:c7:75:94:
                    9c:cc:b8:d1:f6:4b:be:46:cc:10:13:37:a7:98:90:
                    24:40:d1:d3:e5:ff:40:7e:ff:1c:9d:64:bd:e8:9a:
                    fb:ab:f9:e6:f2:6d:34:36:06:59:d1:a7:ef:af:8b:
                    59:3e:8a:51:16:fa:80:8a:19:c7:f5:13:f9:9f:55:
                    c3:b2:9a:66:53:49:ec:7e:8a:a1:86:76:28:d6:29:
                    5e:aa:82:ca:4a:e7:10:d3:17:4f:49:d4:e8:02:c4:
                    42:32:bb:1a:3a:c0:82:6a:35:72:58:4c:87:e3:c3:
                    6c:3d:a5:f6:2f:7b:45:1a:9d:74:aa:6d:76:76:7d:
                    85:f9:98:55:99:b6:03:a0:26:84:aa:ba:8e:6d:d5:
                    22:81:6a:9a:b9:f5:ba:62:66:a3:82:58:23:5c:9e:
                    6e:75:fa:00:9e:07:46:64:37:98:07:62:62:df:c8:
                    9a:66:96:08:3b:7f:0f:f2:ca:0a:d1:a5:74:89:22:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E6:EF:45:58:1B:A3:E0:54:C7:16:28:E1:21:1B:55:1D:73:BC:53
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IObvRVgbo-BUxxYo4SEbVR1zvFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.107.80.0/22
                  87.107.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:48:d1:7b:70:81:fc:5f:7f:f7:eb:37:e5:49:aa:4a:3e:
         94:03:f3:78:cc:d2:df:0b:5b:56:14:73:5b:17:75:c4:80:9f:
         fc:b5:4f:ea:fd:3b:49:86:bc:10:f6:57:59:b4:cc:d7:21:e4:
         3f:8d:97:30:53:49:2b:2f:37:fb:c3:15:3a:2c:7d:1f:a4:b8:
         61:c7:6d:4c:17:e0:50:74:63:1e:7b:43:ff:e0:90:c1:24:f7:
         98:c2:3f:3a:2c:7e:d5:3e:68:ce:0e:3c:95:62:06:34:aa:77:
         72:58:8d:67:ba:1c:a5:dc:b3:d4:79:d2:ee:e7:6c:3f:e1:09:
         f4:c4:d4:a5:f6:8b:98:b6:7e:c7:7e:61:fc:3b:a4:53:e7:79:
         c7:72:ae:ff:b6:71:6e:77:77:cb:56:4d:a0:69:12:6f:ba:06:
         b6:44:9c:4a:f3:ce:ab:75:41:8b:63:46:41:ef:49:6e:d9:0c:
         0c:e1:00:2c:7e:e1:61:57:a9:6c:e7:0d:6e:a3:ab:29:c3:c4:
         27:b9:8c:a4:e0:0d:e8:0c:51:88:d8:8c:e8:f4:a7:b9:fe:aa:
         11:f0:dd:18:d6:79:80:d6:c1:7c:90:32:03:0f:0e:d2:c2:da:
         f6:61:e8:16:79:09:31:bb:af:b8:b3:ab:17:0a:d8:c6:90:fb:
         82:4b:9d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:04 2026 by rpki-client