This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/t5iCf-UJbzJSLvdDHxsfmv0tkZM.roa
File:                     t5iCf-UJbzJSLvdDHxsfmv0tkZM.roa (raw, json)
Hash identifier:          wY+imOWE2VyNmkjWd3jPfrAhat5CaWirZqYCTJHHloE=
Subject key identifier:   B7:98:82:7F:E5:09:6F:32:52:2E:F7:43:1F:1B:1F:9A:FD:2D:91:93
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019B7AC867D062D2E3A143BF5374617877D1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/t5iCf-UJbzJSLvdDHxsfmv0tkZM.roa
Signing time:             Thu 01 Jan 2026 18:18:32 +0000
ROA not before:           Thu 01 Jan 2026 18:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395374
IP address blocks:        77.111.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:67:d0:62:d2:e3:a1:43:bf:53:74:61:78:77:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Jan  1 18:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b798827fe5096f32522ef7431f1b1f9afd2d9193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:5a:fe:51:77:d2:e9:4e:41:11:59:a6:b5:
                    11:62:8f:67:85:d4:db:46:43:b6:df:ac:82:f6:87:
                    a4:eb:df:69:f1:b9:c9:63:f3:5d:06:ec:3d:48:4a:
                    27:9c:ce:c9:c2:76:bd:bb:51:57:8c:2d:a1:fc:58:
                    dd:0c:48:e0:fc:84:32:90:8f:15:2b:49:b2:e0:9c:
                    30:8d:71:3d:49:6a:68:8c:96:9d:3a:1e:cf:10:ed:
                    b3:fb:d1:02:85:85:46:5b:87:1f:24:2a:75:e4:6d:
                    73:84:d1:56:51:1f:34:a1:1b:63:3c:c8:4d:9b:e0:
                    18:2a:7b:6d:27:7a:c5:60:31:22:99:58:55:f7:cf:
                    76:d3:61:c2:fb:af:96:ef:96:3f:6b:ae:e2:72:30:
                    ad:10:cf:e6:58:55:de:74:93:93:db:d1:6c:d8:75:
                    78:6a:28:d2:cf:82:33:01:83:b0:e1:18:1d:31:d5:
                    7c:fd:71:7f:5c:06:44:58:a1:80:24:12:19:0a:4d:
                    b0:ad:60:7a:09:01:77:e7:85:77:c2:e7:b6:26:b1:
                    ec:34:ac:75:d8:9f:30:48:19:0a:d1:3a:bc:69:18:
                    00:47:30:1c:ea:8e:f4:9e:e1:6b:67:66:6a:34:4b:
                    e4:9b:c2:51:ef:dc:cf:60:d2:36:b5:62:4d:fb:b7:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:98:82:7F:E5:09:6F:32:52:2E:F7:43:1F:1B:1F:9A:FD:2D:91:93
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/t5iCf-UJbzJSLvdDHxsfmv0tkZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:07:10:79:93:4a:24:a9:2e:39:90:80:1e:ef:14:42:ff:0e:
         e7:61:35:fe:9d:03:5d:85:e8:09:37:90:42:4f:f9:d9:ed:da:
         85:cd:3b:13:84:c8:76:6a:41:00:c2:9c:e5:57:31:f2:38:16:
         d2:5c:f7:eb:f2:51:8c:04:eb:83:07:95:10:44:08:c4:4a:43:
         95:24:a9:db:a5:70:88:7b:6e:f9:af:db:b8:38:33:47:f5:4a:
         2f:e9:8c:da:f2:97:3a:38:f5:8c:bc:65:16:7c:e8:8e:d5:aa:
         f5:d9:5e:fd:d3:e9:a5:87:60:bb:30:29:b0:12:f0:1b:8b:f0:
         7b:51:59:68:f9:9c:8e:e9:68:8e:b1:02:75:64:fe:21:3a:2d:
         0d:96:44:bc:e5:59:e7:55:55:cf:84:e4:3f:64:e5:1f:d5:d4:
         26:b4:3c:a8:8b:57:2c:9c:a5:ab:b2:7b:47:24:53:48:61:35:
         e8:1f:6d:b5:73:14:a0:6c:19:0b:a9:e0:b1:87:e3:4f:5a:58:
         07:cf:f0:f2:65:42:92:b3:40:c0:b5:02:c7:6d:bd:b2:df:48:
         01:f1:9e:30:5c:6d:48:22:1e:4e:d2:49:9e:94:20:33:61:f5:
         f9:0d:5e:41:eb:b4:c0:f2:74:de:14:c7:50:2a:44:99:6c:6f:
         ba:b2:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:49 2026 by rpki-client