This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa
File:                     Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa (raw, json)
Hash identifier:          zKEK4KKUZ3gGuC6GoGIG9wJZcEYp/lskXr6MfelP6ws=
Subject key identifier:   2E:4D:95:34:9A:99:66:A7:AA:39:5F:A6:45:07:63:23:AA:98:9F:EE
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       019B7FF13983C6EEB448A85A103D8B99C8A7
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa
Signing time:             Fri 02 Jan 2026 18:21:13 +0000
ROA not before:           Fri 02 Jan 2026 18:21:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50889
IP address blocks:        77.111.248.0/24 maxlen: 24
                          77.111.249.0/24 maxlen: 24
                          77.111.250.0/24 maxlen: 24
                          77.111.251.0/24 maxlen: 24
                          80.84.160.0/24 maxlen: 24
                          80.84.161.0/24 maxlen: 24
                          80.84.162.0/24 maxlen: 24
                          80.84.163.0/24 maxlen: 24
                          80.84.164.0/24 maxlen: 24
                          80.84.165.0/24 maxlen: 24
                          80.84.166.0/24 maxlen: 24
                          80.84.167.0/24 maxlen: 24
                          80.84.168.0/24 maxlen: 24
                          80.84.169.0/24 maxlen: 24
                          80.84.170.0/24 maxlen: 24
                          80.84.171.0/24 maxlen: 24
                          80.84.172.0/24 maxlen: 24
                          80.84.173.0/24 maxlen: 24
                          80.84.174.0/24 maxlen: 24
                          80.84.175.0/24 maxlen: 24
                          80.250.96.0/24 maxlen: 24
                          80.250.97.0/24 maxlen: 24
                          80.250.98.0/24 maxlen: 24
                          80.250.99.0/24 maxlen: 24
                          80.250.100.0/24 maxlen: 24
                          80.250.101.0/24 maxlen: 24
                          80.250.102.0/24 maxlen: 24
                          185.136.69.0/24 maxlen: 24
                          185.136.70.0/24 maxlen: 24
                          185.136.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:39:83:c6:ee:b4:48:a8:5a:10:3d:8b:99:c8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Jan  2 18:21:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e4d95349a9966a7aa395fa645076323aa989fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:9d:20:cf:d5:bc:6d:00:7e:73:9b:c2:71:
                    6b:4b:db:75:2d:d7:a5:4a:e5:87:a8:47:93:43:76:
                    d7:4a:df:97:07:3b:c6:07:82:36:4b:80:50:e1:35:
                    38:2c:9e:7d:bc:e8:22:bb:41:e4:7c:75:20:fe:e7:
                    52:28:1c:89:98:2f:83:bd:9d:d1:25:1a:98:9b:23:
                    77:42:25:cc:c2:e7:d3:b4:cc:6c:bb:aa:14:59:a0:
                    30:5f:a0:95:5f:0c:54:d1:6d:f8:25:9f:84:ab:8a:
                    86:ae:33:c7:dc:0f:42:01:69:e6:1a:1f:ef:62:1c:
                    93:a7:7b:44:8d:db:2e:1f:fc:7b:13:94:65:47:92:
                    00:c5:f9:86:3d:d4:c9:49:a4:bc:1b:c8:ce:65:53:
                    86:a4:c7:72:17:11:0d:a3:9b:01:26:17:b4:8a:ed:
                    46:e2:56:1c:eb:3b:1f:61:ab:83:fd:ab:1e:4d:ab:
                    c0:ae:8f:a8:93:d4:1f:51:91:7b:57:63:1c:26:c9:
                    e1:f6:ac:c6:46:5e:4a:08:5c:2e:e2:49:65:63:b8:
                    56:b3:e4:07:07:4c:c0:75:6f:0c:f3:6d:2e:30:76:
                    0c:c6:d9:2c:7c:e6:81:65:b9:ab:bd:ff:13:a8:8e:
                    df:9c:ee:d7:36:84:21:ad:e2:60:f3:64:3e:2d:8f:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4D:95:34:9A:99:66:A7:AA:39:5F:A6:45:07:63:23:AA:98:9F:EE
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.248.0/22
                  80.84.160.0/20
                  80.250.96.0-80.250.102.255
                  185.136.69.0-185.136.71.255

    Signature Algorithm: sha256WithRSAEncryption
         89:db:5b:90:67:68:26:f7:82:a4:88:97:3c:3d:28:cc:6e:d1:
         9b:ab:d3:f5:4b:89:3e:dc:1c:e6:75:0e:0f:9c:8d:02:d7:b6:
         14:38:3a:07:43:6d:dc:d0:86:e6:71:9d:5c:b7:2f:f8:bb:c6:
         c0:d6:0d:5a:95:17:d1:be:24:07:c6:cb:ee:d0:78:70:bc:25:
         96:32:85:f7:c6:38:28:d5:a1:a5:e7:ae:4c:92:00:be:96:53:
         3d:9e:3b:b9:e9:15:03:1b:48:f4:0b:b3:a2:19:27:b0:92:40:
         ed:a5:1e:62:c3:93:ed:c1:09:2d:3f:5a:9a:45:e3:70:0a:86:
         1f:b4:e9:31:6e:ec:3d:dd:cb:16:d8:91:a3:5e:49:77:bf:06:
         9c:7f:ef:c6:8d:ad:5b:e8:c5:fb:96:99:20:09:1c:ed:bf:9e:
         a2:62:55:8b:ec:60:e5:33:db:e1:4b:35:33:2a:74:98:51:9d:
         c9:7d:d0:6a:e9:fb:89:f1:bd:9c:7e:82:8e:57:56:2e:3c:dd:
         22:f5:1a:44:bc:1f:a0:f1:4e:17:c2:8b:52:a3:d6:aa:2e:2b:
         b6:5d:6a:51:bb:2f:2d:89:16:77:ae:df:10:21:3b:59:6c:43:
         bb:37:9a:0c:53:51:4c:46:12:b3:a4:f1:c1:3e:c4:fe:44:34:
         0e:c6:4b:f9
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZt/8TmDxu60SKhaED2LmcinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYTBmNzE0M2ZmYTIyMTEzNDQyZGM4NTg5ZWUxMzUyZWJl
M2RhYTMwHhcNMjYwMTAyMTgyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTRkOTUzNDlhOTk2NmE3YWEzOTVmYTY0NTA3NjMyM2FhOTg5ZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO2dIM/VvG0AfnObwnFrS9t1Ldel
SuWHqEeTQ3bXSt+XBzvGB4I2S4BQ4TU4LJ59vOgiu0HkfHUg/udSKByJmC+DvZ3R
JRqYmyN3QiXMwufTtMxsu6oUWaAwX6CVXwxU0W34JZ+Eq4qGrjPH3A9CAWnmGh/v
YhyTp3tEjdsuH/x7E5RlR5IAxfmGPdTJSaS8G8jOZVOGpMdyFxENo5sBJhe0iu1G
4lYc6zsfYauD/aseTavAro+ok9QfUZF7V2McJsnh9qzGRl5KCFwu4kllY7hWs+QH
B0zAdW8M820uMHYMxtksfOaBZbmrvf8TqI7fnO7XNoQhreJg82Q+LY/PLQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFC5NlTSamWanqjlfpkUHYyOqmJ/uMB8GA1UdIwQY
MBaAFBOg9xQ/+iIRNELchYnuE1Lr49qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NDNmODctNGFlMC00MTk4LWJjYjgt
MTA0YTMzNDM3NjY1LzEvTGsyVk5KcVpacWVxT1YtbVJRZGpJNnFZbi00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80NDNmODctNGFlMC00MTk4LWJjYjgtMTA0YTMzNDM3NjY1
LzEvRTZEM0ZEXzZJaEUwUXR5RmllNFRVdXZqMnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCTW/4AwQE
UFSgMAwDBAVQ+mADBABQ+mYwDAMEALmIRQMEA7mIQDANBgkqhkiG9w0BAQsFAAOC
AQEAidtbkGdoJveCpIiXPD0ozG7Rm6vT9UuJPtwc5nUOD5yNAte2FDg6B0Nt3NCG
5nGdXLcv+LvGwNYNWpUX0b4kB8bL7tB4cLwlljKF98Y4KNWhpeeuTJIAvpZTPZ47
uekVAxtI9AuzohknsJJA7aUeYsOT7cEJLT9amkXjcAqGH7TpMW7sPd3LFtiRo15J
d78GnH/vxo2tW+jF+5aZIAkc7b+eomJVi+xg5TPb4Us1Myp0mFGdyX3Qaun7ifG9
nH6CjldWLjzdIvUaRLwfoPFOF8KLUqPWqi4rtl1qUbsvLYkWd67fECE7WWxDuzea
DFNRTEYSs6TxwT7E/kQ0DsZL+Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:19 2026 by rpki-client