This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FE30V3TtX3TXLoKQQ1gkolKnqiM.roa
File:                     FE30V3TtX3TXLoKQQ1gkolKnqiM.roa (raw, json)
Hash identifier:          wlQuA9RJai+83hzP5I3QHsQlQqJ8gjcDBQ4ba9u/wn4=
Subject key identifier:   14:4D:F4:57:74:ED:5F:74:D7:2E:82:90:43:58:24:A2:52:A7:AA:23
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019B7AC853DC8E14CD3852A241EF92CA52BB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FE30V3TtX3TXLoKQQ1gkolKnqiM.roa
Signing time:             Thu 01 Jan 2026 18:18:27 +0000
ROA not before:           Thu 01 Jan 2026 18:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        77.111.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:53:dc:8e:14:cd:38:52:a2:41:ef:92:ca:52:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Jan  1 18:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=144df45774ed5f74d72e8290435824a252a7aa23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:22:0e:2d:50:24:f4:69:a8:0f:85:52:1f:9f:
                    45:36:70:44:f8:fe:d6:9d:80:08:a8:5e:dd:3a:f8:
                    7f:52:5f:43:56:63:aa:bd:09:00:0b:c4:f4:51:f7:
                    9e:37:cb:69:75:cd:d1:c9:c6:e5:cd:4c:96:e3:c6:
                    d2:4c:f4:b4:67:75:24:ea:c4:b8:46:8c:f4:14:b9:
                    67:50:5a:4e:74:50:19:3a:06:50:82:2c:61:67:5c:
                    d4:ce:e4:4d:7d:91:f6:ea:dd:c9:20:99:cf:76:78:
                    d8:a9:7c:13:41:37:86:aa:c5:c6:f2:19:cf:1f:22:
                    c8:c3:61:b9:88:5e:be:15:6d:2e:4e:63:85:8b:77:
                    27:c2:dc:1b:58:5e:56:db:39:3f:5b:2e:9b:29:40:
                    75:7e:a6:48:c8:00:6e:07:0b:85:00:ed:e5:97:3a:
                    3a:e0:71:c7:f6:87:51:31:cb:cf:36:12:94:22:6b:
                    be:32:16:36:40:69:c4:fe:46:b9:c2:ea:49:6a:69:
                    a1:80:a8:3d:0e:f3:bc:99:e4:6f:84:29:2b:16:4b:
                    73:d1:25:6b:f2:45:b1:d1:f5:fa:17:0d:c6:fd:f3:
                    34:9b:b2:7f:c7:cc:c6:c2:24:b6:be:41:a8:53:6b:
                    76:50:34:81:5e:66:7e:93:30:9a:dc:f5:42:62:8a:
                    17:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4D:F4:57:74:ED:5F:74:D7:2E:82:90:43:58:24:A2:52:A7:AA:23
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FE30V3TtX3TXLoKQQ1gkolKnqiM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:99:83:3b:bd:9d:06:69:0c:c8:6f:f4:c5:50:24:03:03:fb:
         2d:d8:a5:ed:a3:46:4c:22:8c:36:55:7b:87:2e:cd:00:00:9f:
         6b:9b:94:d3:9e:c7:a7:20:84:a7:f6:05:3e:53:f6:45:4c:04:
         cd:87:5a:7e:4c:f7:fb:5f:e5:38:a6:be:80:ef:d9:bb:eb:56:
         05:2a:28:c7:aa:6a:98:dc:cc:1d:78:77:e9:18:c8:ed:8a:81:
         22:f2:14:b3:15:fd:10:ec:63:5b:78:64:a4:3e:ac:81:b8:97:
         dd:3b:09:af:05:1f:b0:a4:b3:4e:20:52:2d:63:7c:22:6d:32:
         ce:50:ec:91:3c:e7:fb:47:5c:bf:3b:ca:05:85:2c:27:c6:fd:
         58:53:2c:7d:bd:37:9a:f3:82:e5:0c:2b:c3:36:44:76:a5:91:
         7a:f5:0a:1a:0a:4e:38:e8:f6:67:6c:51:b6:fc:60:d2:17:11:
         c7:ce:22:3b:17:7a:9e:e0:87:9e:69:c6:d0:6d:57:46:18:c1:
         45:68:c9:37:9a:f2:61:20:da:8c:6c:11:b3:e1:52:8a:66:10:
         6d:47:02:33:40:1a:ad:64:48:92:44:bb:2f:93:f1:98:06:16:
         42:60:2a:c1:02:cb:1f:87:5d:04:f2:c5:c3:94:49:10:1e:68:
         1d:84:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:09:25 2026 by rpki-client