This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/78P4aUgGgr-eCo8Hz6segQhRG4U.roa
File:                     78P4aUgGgr-eCo8Hz6segQhRG4U.roa (raw, json)
Hash identifier:          8+PG1n2Ajn9CSbXdoZXtPBN9UnTxKEfFfUKv1/JdbEU=
Subject key identifier:   EF:C3:F8:69:48:06:82:BF:9E:0A:8F:07:CF:AB:1E:81:08:51:1B:85
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       019B7F15BFEAD3984EA4EF8EEE27DE98B451
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/78P4aUgGgr-eCo8Hz6segQhRG4U.roa
Signing time:             Fri 02 Jan 2026 14:21:30 +0000
ROA not before:           Fri 02 Jan 2026 14:21:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201976
IP address blocks:        195.53.40.0/23 maxlen: 23
                          195.53.40.0/24 maxlen: 24
                          195.53.41.0/24 maxlen: 24
                          195.53.42.0/23 maxlen: 23
                          195.53.42.0/24 maxlen: 24
                          195.53.43.0/24 maxlen: 24
                          195.57.200.0/22 maxlen: 22
                          195.57.200.0/23 maxlen: 23
                          195.57.200.0/24 maxlen: 24
                          195.57.201.0/24 maxlen: 24
                          195.57.202.0/23 maxlen: 23
                          195.57.202.0/24 maxlen: 24
                          195.57.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:bf:ea:d3:98:4e:a4:ef:8e:ee:27:de:98:b4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Jan  2 14:21:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efc3f869480682bf9e0a8f07cfab1e8108511b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:99:e7:21:32:55:11:f4:a7:34:3b:49:47:
                    19:4b:29:6d:b0:ab:df:db:3a:34:7c:45:61:3e:22:
                    54:a2:74:bf:b2:6e:77:05:74:fe:06:40:57:7f:29:
                    12:5f:f9:df:91:2c:34:5b:f7:64:59:ef:be:f5:e0:
                    5a:b7:c9:85:f6:e5:fc:0a:9a:61:c5:84:27:94:13:
                    d2:08:08:26:a3:82:3a:f2:39:f5:81:3f:61:5f:c7:
                    f6:6e:64:f2:f3:71:50:8e:93:bf:1d:ac:30:cb:fa:
                    8b:00:15:14:e1:09:87:63:d6:3f:19:a4:6b:89:64:
                    fb:10:ef:3f:6b:0b:9a:f4:33:81:ce:f3:04:ae:15:
                    22:53:15:03:54:20:31:6f:9e:d2:2c:58:db:df:9d:
                    3f:6d:37:18:2e:c7:ae:b1:8d:b1:8d:6c:8f:3a:a8:
                    5c:ea:0d:e3:a1:fe:e0:fa:18:0e:d5:02:bb:d0:a6:
                    b3:3e:43:30:0b:3f:b9:9f:5a:bd:98:0f:63:24:3a:
                    1d:18:ea:ae:e7:b8:d3:71:23:04:f1:13:a6:b0:14:
                    dd:35:52:66:c4:24:77:f2:83:80:e4:ab:62:88:20:
                    4d:db:ec:1e:54:2a:4a:8f:2c:7c:b0:ab:99:28:d5:
                    bb:46:7d:a0:f1:8f:59:3c:c7:6b:9c:a8:fe:e8:57:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C3:F8:69:48:06:82:BF:9E:0A:8F:07:CF:AB:1E:81:08:51:1B:85
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/78P4aUgGgr-eCo8Hz6segQhRG4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.53.40.0/22
                  195.57.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:81:68:50:9e:ef:ac:e7:c4:51:37:a2:77:7a:2f:bf:8b:
         c8:8f:5c:8c:e7:8e:e3:5d:fb:97:08:40:36:ee:a3:6a:e6:56:
         62:c1:eb:8c:58:a8:7e:5e:67:3b:2b:84:e2:6a:0c:5c:36:ab:
         ff:2e:f4:ae:1a:88:fe:d3:e4:a2:f0:74:93:1d:cc:e8:f1:94:
         75:b6:ce:f8:c0:a9:06:73:09:4b:65:80:75:a4:f7:a9:3d:6c:
         56:95:bf:aa:b2:ce:d6:44:59:dd:d3:8a:2c:17:0e:ff:f9:ca:
         c7:88:d6:8a:5a:56:cd:8e:4d:eb:15:00:17:b1:9f:d4:1b:14:
         4f:a6:0f:bc:ac:1f:48:94:af:c8:89:cc:95:72:ee:a6:ea:15:
         eb:04:74:4f:06:6f:ed:8b:87:02:c6:ba:45:4f:5a:ab:45:ee:
         2a:1e:b8:ab:77:d4:3a:3e:1f:1c:8f:58:6a:4a:a7:91:53:0b:
         34:b3:cf:f7:b1:ea:43:ab:b7:73:60:72:b1:d0:8e:33:a4:6f:
         30:a4:bb:60:62:0a:b4:05:a7:83:db:05:14:e5:8e:e5:c4:8f:
         68:58:74:02:0a:05:d8:6d:98:04:4b:52:eb:e3:90:21:4b:84:
         8f:6c:ed:36:e0:a5:81:4b:b0:d8:1d:fd:bf:c6:87:93:a0:3a:
         85:4e:35:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt/Fb/q05hOpO+O7ifemLRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmMzZjg2OTQ4MDY4MmJmOWUwYThmMDdjZmFiMWU4MTA4NTExYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJqZ5yEyVRH0pzQ7SUcZSyltsKvf
2zo0fEVhPiJUonS/sm53BXT+BkBXfykSX/nfkSw0W/dkWe++9eBat8mF9uX8Cpph
xYQnlBPSCAgmo4I68jn1gT9hX8f2bmTy83FQjpO/Hawwy/qLABUU4QmHY9Y/GaRr
iWT7EO8/awua9DOBzvMErhUiUxUDVCAxb57SLFjb350/bTcYLseusY2xjWyPOqhc
6g3jof7g+hgO1QK70KazPkMwCz+5n1q9mA9jJDodGOqu57jTcSME8ROmsBTdNVJm
xCR38oOA5KtiiCBN2+weVCpKjyx8sKuZKNW7Rn2g8Y9ZPMdrnKj+6FczIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO/D+GlIBoK/ngqPB8+rHoEIURuFMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvNzhQNGFVZ0dnci1lQ284SHo2c2VnUWhSRzRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwzUoAwQC
wznIMA0GCSqGSIb3DQEBCwUAA4IBAQB7tIFoUJ7vrOfEUTeid3ovv4vIj1yM547j
XfuXCEA27qNq5lZiweuMWKh+Xmc7K4TiagxcNqv/LvSuGoj+0+Si8HSTHczo8ZR1
ts74wKkGcwlLZYB1pPepPWxWlb+qss7WRFnd04osFw7/+crHiNaKWlbNjk3rFQAX
sZ/UGxRPpg+8rB9IlK/IicyVcu6m6hXrBHRPBm/ti4cCxrpFT1qrRe4qHrird9Q6
Ph8cj1hqSqeRUws0s8/3sepDq7dzYHKx0I4zpG8wpLtgYgq0BaeD2wUU5Y7lxI9o
WHQCCgXYbZgES1Lr45AhS4SPbO024KWBS7DYHf2/xoeToDqFTjXj
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:36 2026 by rpki-client