This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/nvDGi2VWUxlJY5ddjwd_81AUYcU.roa
File:                     nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (raw, json)
Hash identifier:          nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=
Subject key identifier:   9E:F0:C6:8B:65:56:53:19:49:63:97:5D:8F:07:7F:F3:50:14:61:C5
Certificate issuer:       /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial:       019B7C12A766847110863E6E10D08EEC63C7
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/nvDGi2VWUxlJY5ddjwd_81AUYcU.roa
Signing time:             Fri 02 Jan 2026 00:19:15 +0000
ROA not before:           Fri 02 Jan 2026 00:19:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60359
IP address blocks:        80.78.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:a7:66:84:71:10:86:3e:6e:10:d0:8e:ec:63:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
        Validity
            Not Before: Jan  2 00:19:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9ef0c68b655653194963975d8f077ff3501461c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:c3:92:76:cd:b2:06:f1:d1:c2:70:ae:7f:
                    9a:a9:18:ba:27:53:35:d0:4f:cc:39:29:29:f6:0e:
                    78:66:a8:cf:85:85:43:8a:11:a8:0e:fd:fc:ec:3b:
                    b5:65:9f:56:ae:09:0a:97:2d:32:4f:98:40:84:64:
                    81:88:2e:4f:26:11:76:a0:7c:d2:7c:ac:9c:d0:44:
                    62:11:bb:1a:de:17:32:bb:51:ea:be:57:05:9e:1b:
                    f3:61:5f:2c:8f:07:8e:d3:92:73:4f:b6:fe:e8:54:
                    ae:c6:05:48:90:c6:fc:4a:ff:b8:54:3b:e5:53:b9:
                    fc:c8:91:1c:de:dc:5b:a0:2e:1e:eb:27:61:92:31:
                    30:e7:f0:6a:df:ab:8a:1b:f0:e9:ad:03:14:39:10:
                    53:a0:91:57:1f:05:f4:f9:a1:0a:f7:f0:a7:bc:11:
                    99:b0:9a:12:fc:78:98:2e:ad:13:9f:3b:31:d9:f7:
                    df:2d:26:79:02:8b:fc:44:33:65:9d:a1:6b:8e:d0:
                    0b:8e:63:d0:cf:ac:7d:ad:30:c7:5e:8c:3c:ee:79:
                    db:37:89:7d:ac:cc:9f:9d:e5:91:b7:72:24:ac:aa:
                    cc:ea:b4:c1:60:bd:78:98:f8:7f:a7:30:5c:95:67:
                    79:cd:24:56:e1:c6:e8:f0:e4:3b:4e:76:05:07:c6:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F0:C6:8B:65:56:53:19:49:63:97:5D:8F:07:7F:F3:50:14:61:C5
            X509v3 Authority Key Identifier:
                keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/nvDGi2VWUxlJY5ddjwd_81AUYcU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.78.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:7d:2b:1d:36:13:b8:3c:5a:b3:9b:10:de:40:12:bd:b6:d0:
         de:89:17:ee:3b:c3:e3:87:0b:0a:c1:e7:f8:0d:78:34:92:52:
         b7:c3:df:e9:fd:ef:2e:f0:3c:9a:34:ed:29:f7:d7:aa:56:31:
         aa:19:be:30:66:41:35:ca:4b:da:55:80:5f:b4:f0:64:ac:9f:
         bb:f1:24:a2:aa:58:85:92:45:1c:8b:60:67:2c:c9:f4:9a:e1:
         73:e3:b0:06:46:7b:e2:9a:0a:84:46:e7:e0:4e:67:ce:c2:1a:
         36:37:46:41:c0:34:06:b9:3b:54:ac:16:05:f5:1c:b2:48:b8:
         85:a3:2b:31:26:d5:66:05:f2:90:bb:ab:94:9f:e5:14:ca:fe:
         5d:f4:45:9f:b7:0f:5d:d1:a3:f7:57:cc:3b:9e:c0:40:d6:4f:
         20:93:7f:08:af:05:b1:ca:9e:3d:8f:c8:87:79:2c:d9:d8:95:
         a9:58:c6:ae:5a:37:83:a9:94:c7:cf:44:7e:4a:2a:56:a1:61:
         7c:4a:9f:93:f2:16:cb:c7:73:c5:4e:62:ec:3d:1c:0c:ed:fe:
         ae:b0:a3:76:38:7d:28:2c:c1:f1:10:1c:e0:d6:f0:43:e2:16:
         a5:67:3a:96:60:81:21:85:92:1e:12:ef:07:6f:fd:b6:3d:b0:
         01:48:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:19:50 2026 by rpki-client