This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/e4fvp8yWlAX8buHeYzF-90rR6Bk.roa
File:                     e4fvp8yWlAX8buHeYzF-90rR6Bk.roa (raw, json)
Hash identifier:          cr5m93AUTTeXzPXmKSQPnNEYJwCdKzbaLZUVJBf9U6g=
Subject key identifier:   7B:87:EF:A7:CC:96:94:05:FC:6E:E1:DE:63:31:7E:F7:4A:D1:E8:19
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       019B77C6840CB9A5C9A7259FECBB5D61F085
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/e4fvp8yWlAX8buHeYzF-90rR6Bk.roa
Signing time:             Thu 01 Jan 2026 04:17:37 +0000
ROA not before:           Thu 01 Jan 2026 04:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16247
IP address blocks:        185.57.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:84:0c:b9:a5:c9:a7:25:9f:ec:bb:5d:61:f0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Jan  1 04:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b87efa7cc969405fc6ee1de63317ef74ad1e819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:29:df:9e:53:f2:39:4d:bd:15:8b:a5:11:
                    f3:e3:a0:70:40:64:4d:7f:ff:2a:c6:ce:f9:a5:b9:
                    41:5d:37:9a:f1:08:60:10:b6:16:41:e7:5b:8b:42:
                    98:df:d5:a5:8f:36:e1:eb:89:b7:83:34:df:56:bc:
                    2e:ee:9c:0a:38:d8:23:1f:96:69:5b:79:c5:16:30:
                    6f:f0:2e:2d:4a:13:30:7a:bb:a0:09:71:2d:f1:75:
                    b8:57:8f:58:7e:2b:82:79:b1:03:7d:c0:ea:6e:b6:
                    3b:2c:e6:49:a2:f5:72:f7:89:e9:ae:ad:74:e8:61:
                    91:ed:d0:02:d3:2b:31:0c:0d:c3:0d:67:00:dd:40:
                    62:ed:54:17:21:5a:e4:c8:58:f3:84:ed:a3:a1:3d:
                    63:a7:52:62:59:41:e5:8e:f2:c8:30:0f:5d:df:1f:
                    37:90:7f:14:e6:6b:6e:a4:3e:b5:8c:bf:97:38:99:
                    63:cd:1d:a5:e2:15:ef:c5:82:63:8a:cc:df:c3:15:
                    8f:a9:48:e5:24:55:6d:12:55:bd:e5:16:1f:bb:bd:
                    8a:ce:bd:8e:b4:ba:56:3b:18:bc:0e:a0:a6:f6:4f:
                    a1:c7:74:d2:6b:6f:87:37:f7:a0:d0:45:ae:9a:7e:
                    44:75:68:0d:9f:30:35:b5:3a:77:ce:23:64:50:3e:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:87:EF:A7:CC:96:94:05:FC:6E:E1:DE:63:31:7E:F7:4A:D1:E8:19
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/e4fvp8yWlAX8buHeYzF-90rR6Bk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:b7:d2:37:84:25:a2:1a:4c:2b:a6:94:db:e2:bc:0f:61:aa:
         64:ac:45:dc:94:dd:6d:13:c3:67:e1:0f:08:46:60:b6:63:3a:
         72:7f:4a:cf:53:c1:ec:03:c9:e8:e9:97:c0:3c:8e:7c:c2:81:
         dd:8a:6b:b5:0d:56:fd:99:2d:3c:00:43:c9:5c:06:2b:0e:1c:
         63:90:55:ee:64:b3:1b:09:6b:3d:ce:39:9a:cf:30:74:33:80:
         0e:6f:a3:ef:0e:25:7b:dd:5a:e9:39:cf:ff:53:f7:d3:65:80:
         5a:ad:0a:78:12:ee:aa:1d:c8:19:73:42:bd:f4:79:a5:36:57:
         d2:6d:07:d7:c5:ca:66:1a:49:4f:d7:11:30:e3:50:19:be:ef:
         d5:99:de:f7:ae:62:93:1e:6e:0a:79:bf:d3:35:54:a5:be:82:
         9b:1c:0c:87:a6:6a:a6:94:fb:33:2c:78:e6:4c:c0:be:87:91:
         76:22:07:bb:80:8f:00:e8:d9:9c:c0:36:be:b7:09:ed:e0:39:
         f2:57:2a:8e:90:9a:0a:d8:78:0a:3e:6d:2a:73:92:76:09:4f:
         22:75:99:23:72:7a:9c:fe:4d:62:2e:16:92:b7:25:aa:62:e0:
         27:f4:5a:5c:09:97:48:65:19:f2:6b:3d:10:05:b7:cd:59:bb:
         55:18:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:31:54 2026 by rpki-client