This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/d79pVbNl6KV7mE-TmGcgiFhhpy0.roa
File:                     d79pVbNl6KV7mE-TmGcgiFhhpy0.roa (raw, json)
Hash identifier:          6sQKNK+i7JugUTkWCMHqg5UJuTLwVJ2b0IOTbHFw/EY=
Subject key identifier:   77:BF:69:55:B3:65:E8:A5:7B:98:4F:93:98:67:20:88:58:61:A7:2D
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       019B7910B4C414D1FDBC541B7A85C84224C5
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/d79pVbNl6KV7mE-TmGcgiFhhpy0.roa
Signing time:             Thu 01 Jan 2026 10:18:16 +0000
ROA not before:           Thu 01 Jan 2026 10:18:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62457
IP address blocks:        95.178.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:b4:c4:14:d1:fd:bc:54:1b:7a:85:c8:42:24:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Jan  1 10:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77bf6955b365e8a57b984f93986720885861a72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:c1:c0:70:d1:71:ad:21:ff:cf:6f:68:d8:
                    21:1f:72:26:bc:4f:cf:4d:26:4b:d1:6e:6c:2c:66:
                    01:5a:75:a1:bf:f6:f1:6e:13:1f:f0:e2:d1:26:ee:
                    dd:9f:96:dc:ef:26:93:db:66:82:d8:4d:a2:e7:6f:
                    4c:03:47:50:1d:47:e7:b2:eb:f8:91:f4:cf:92:2b:
                    19:06:fb:0a:30:d2:40:b6:8b:6d:41:f2:e8:ab:b7:
                    9a:73:a3:db:93:01:85:af:fe:fa:0e:20:d0:91:77:
                    93:c5:2f:b8:38:44:1f:17:d4:e3:7f:eb:3b:69:ed:
                    fb:87:d8:0c:aa:6f:83:4d:41:11:05:90:b4:6e:e3:
                    08:39:d4:da:a4:36:cc:2f:69:7c:b1:33:6b:38:7c:
                    f9:fc:d7:81:80:02:05:d2:b9:5e:33:57:28:1a:b7:
                    f9:00:7e:2f:b2:61:97:d5:6c:e6:a8:96:67:49:ab:
                    18:b8:9c:31:9b:67:68:c9:42:29:84:92:31:dd:0a:
                    c0:d9:e1:47:e3:3f:07:cc:88:d6:39:df:21:bf:8d:
                    7c:e6:c3:58:c5:57:d5:3d:26:9f:c8:96:93:7c:61:
                    d8:20:bf:86:2d:cb:a8:6c:12:69:81:1a:e8:14:f3:
                    45:54:b7:3b:2e:dd:4e:36:44:a5:3b:90:30:59:75:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BF:69:55:B3:65:E8:A5:7B:98:4F:93:98:67:20:88:58:61:A7:2D
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/d79pVbNl6KV7mE-TmGcgiFhhpy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.178.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c2:e7:4b:8e:4c:86:e2:69:87:43:fd:da:ee:f4:cf:5a:18:
         b9:2b:83:4e:f3:45:c8:7e:b6:c4:c4:d4:26:4e:a0:ed:aa:f7:
         ad:6d:d3:63:cb:28:ae:0c:55:37:c6:4b:07:ec:26:b5:ad:9c:
         02:23:e6:fc:b7:a3:f2:f9:96:b8:d9:9e:1b:94:88:8c:99:b8:
         0d:68:34:25:b6:1d:57:31:0f:14:e2:35:18:13:59:01:bb:ae:
         6d:92:d2:26:d5:cb:c5:b0:05:0b:e2:bd:ce:3d:19:e3:0b:3b:
         f2:f8:b5:96:56:ae:04:1a:f4:0c:08:50:cb:c1:21:ba:f7:4d:
         a2:d8:bc:1c:f8:77:1c:4a:3f:88:bd:c3:25:ea:fd:67:14:15:
         b7:73:9c:a8:6a:84:65:68:62:6e:33:03:6d:50:9f:d5:dd:b7:
         cd:83:5d:95:5c:ab:1d:42:84:67:30:19:00:92:2f:83:91:dc:
         a4:82:7c:6e:93:6c:0a:57:5a:58:c2:bd:a8:fc:05:e0:72:da:
         4d:c5:3e:fd:f6:84:6d:b6:41:06:b4:e9:e8:cf:b7:69:25:ca:
         da:b7:31:1f:7b:6c:7f:46:c4:13:36:88:88:07:17:8f:4a:98:
         ef:49:07:89:74:9f:4a:fa:0e:cf:af:76:fb:54:f4:3f:17:44:
         4f:db:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:37:44 2026 by rpki-client