This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/EX0J0xvnJG9c66QV7uljwQw0Ktc.roa
File:                     EX0J0xvnJG9c66QV7uljwQw0Ktc.roa (raw, json)
Hash identifier:          iA1sbCr56iM0C6g6aMRw8NM/1oXaheju9R0Q9IHCg6U=
Subject key identifier:   11:7D:09:D3:1B:E7:24:6F:5C:EB:A4:15:EE:E9:63:C1:0C:34:2A:D7
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       019B7A5B85FC279201F3AA2186D0C6706806
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/EX0J0xvnJG9c66QV7uljwQw0Ktc.roa
Signing time:             Thu 01 Jan 2026 16:19:36 +0000
ROA not before:           Thu 01 Jan 2026 16:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205207
IP address blocks:        77.104.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:85:fc:27:92:01:f3:aa:21:86:d0:c6:70:68:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Jan  1 16:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=117d09d31be7246f5ceba415eee963c10c342ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:be:47:b0:df:84:12:1d:42:ad:fd:93:e6:
                    4b:7c:f4:55:46:83:5b:e0:6e:2c:7a:64:e0:aa:44:
                    0a:1d:22:0e:dc:d0:9d:5c:0e:ae:a1:93:52:d8:e2:
                    aa:dc:a4:21:ca:21:e8:43:3b:cd:b3:dd:e9:ac:ba:
                    76:65:6f:27:94:c0:a6:1b:0f:be:cb:31:b7:53:92:
                    46:7b:42:fe:4f:07:20:16:01:38:1b:e1:30:8e:8b:
                    c7:55:02:05:78:89:08:6d:ef:2d:bb:51:72:9b:38:
                    06:48:37:72:1c:09:18:1a:d8:06:35:b9:6a:ed:c5:
                    fa:af:20:42:91:d5:82:c4:6b:1a:f7:17:3d:74:81:
                    03:8b:6f:4f:3a:4c:11:c2:2b:66:68:2a:d6:ca:6f:
                    e8:a3:eb:9a:f4:e5:03:2d:f0:8f:4c:93:07:56:0c:
                    e6:f6:c0:45:17:2b:b3:27:d0:86:9f:b1:fd:fe:d0:
                    0b:69:72:59:0d:d2:c8:20:6c:b5:0c:8a:ea:fb:65:
                    42:53:1f:49:72:14:fb:17:fe:d3:6f:36:7e:8e:e0:
                    79:fc:79:b3:e7:aa:40:91:fa:de:6a:1c:45:ec:09:
                    9e:3f:12:e4:20:d4:a6:f5:0e:54:21:48:68:2f:3d:
                    05:5e:01:07:85:12:ca:c3:b8:49:db:17:62:ee:2f:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7D:09:D3:1B:E7:24:6F:5C:EB:A4:15:EE:E9:63:C1:0C:34:2A:D7
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/EX0J0xvnJG9c66QV7uljwQw0Ktc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.104.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:fb:4b:72:7f:c3:23:3e:1a:0c:c0:fe:0a:67:4f:f8:ac:ec:
         e9:39:0a:06:12:08:8b:5b:82:6d:85:75:c1:12:f8:e0:1b:17:
         0d:4d:72:e5:3b:a4:c7:ad:9e:f2:d4:5c:75:0d:02:cb:ae:95:
         82:43:d5:5a:0e:9a:26:d8:2e:33:c5:e0:97:42:3d:70:b1:49:
         5f:e7:98:7f:5a:27:21:31:b2:e0:cb:c0:ca:41:f0:ec:60:1a:
         a3:3f:b8:a9:9a:ce:51:6a:27:9a:0a:32:0c:fd:15:8a:0a:70:
         d1:ac:8e:85:ed:f0:f6:2e:1f:89:2e:07:15:45:1e:ad:79:d6:
         b7:da:73:4c:dd:e0:bf:f3:37:99:97:3f:49:b4:a5:7b:2a:ca:
         7b:f0:f2:7c:5b:2c:dc:92:55:db:4e:47:9f:ee:94:52:65:93:
         db:1e:73:45:5e:a8:65:47:5d:17:92:71:b1:ea:6b:37:00:d0:
         ca:f5:29:1c:77:9f:ca:04:6f:d7:28:58:da:71:00:33:79:ee:
         5a:31:98:81:05:5b:79:13:1c:cb:a7:8e:8c:85:c1:19:b9:b6:
         dc:63:22:40:5c:c8:d7:b6:61:9e:02:3b:6c:a5:a1:34:3d:d0:
         bb:fe:9f:9f:25:f8:2a:0e:fa:0e:af:9b:14:7d:c5:d3:d8:02:
         a0:3a:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:32:44 2026 by rpki-client