This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/tyNPCkeOnMPE8ffpgSI6cQ46rco.roa
File:                     tyNPCkeOnMPE8ffpgSI6cQ46rco.roa (raw, json)
Hash identifier:          1bhYy/zNueI3junFzpZGGhw3wm4zlmN3upkt7WLic/0=
Subject key identifier:   B7:23:4F:0A:47:8E:9C:C3:C4:F1:F7:E9:81:22:3A:71:0E:3A:AD:CA
Certificate issuer:       /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial:       019B7FF299F0FB1CEB0A79941B3E88ADB364
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/tyNPCkeOnMPE8ffpgSI6cQ46rco.roa
Signing time:             Fri 02 Jan 2026 18:22:44 +0000
ROA not before:           Fri 02 Jan 2026 18:22:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206929
IP address blocks:        77.237.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:99:f0:fb:1c:eb:0a:79:94:1b:3e:88:ad:b3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
        Validity
            Not Before: Jan  2 18:22:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7234f0a478e9cc3c4f1f7e981223a710e3aadca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:c3:e2:ae:ec:84:75:f2:30:e5:38:e1:3d:
                    c9:02:15:23:6a:e8:9c:fc:eb:de:47:9c:78:94:36:
                    95:ea:5f:b7:fe:01:61:bf:fb:52:60:d5:94:05:c8:
                    40:75:89:8b:dc:6b:2b:bf:de:74:73:4c:76:53:e2:
                    ec:c7:ff:d2:80:05:a0:24:79:cb:e6:7f:04:50:8f:
                    58:75:6a:e7:24:a8:41:58:54:17:a4:a0:35:f9:ed:
                    00:f6:ef:bc:96:80:35:24:d1:17:aa:72:ab:31:f2:
                    04:31:bb:d8:e8:2e:7f:ec:04:d9:96:76:8c:a5:ea:
                    b7:58:c2:dd:46:1a:61:3e:1d:dd:7e:66:ff:47:e7:
                    7a:f9:f9:f2:a9:ec:cf:5a:0e:12:e6:74:c5:13:64:
                    db:ce:8b:d0:64:5e:a3:9a:1a:f0:eb:ff:93:bf:9d:
                    ba:e6:de:c2:a8:a5:c3:4e:8e:83:ec:11:3b:40:2a:
                    38:4c:21:ce:7d:97:a4:49:0d:98:99:51:19:5d:b4:
                    17:e5:69:2b:f1:72:98:1b:aa:6b:21:c1:98:af:73:
                    58:38:7c:63:70:30:e7:7d:b1:df:26:35:ea:cc:6a:
                    72:ab:af:58:9f:13:4c:01:1c:d5:eb:83:59:95:ba:
                    7e:ab:ab:41:51:f1:05:9b:1f:8c:75:48:2d:f6:f4:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:23:4F:0A:47:8E:9C:C3:C4:F1:F7:E9:81:22:3A:71:0E:3A:AD:CA
            X509v3 Authority Key Identifier:
                keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/tyNPCkeOnMPE8ffpgSI6cQ46rco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.237.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:41:b7:88:5e:b2:ec:aa:13:58:c9:4b:e9:48:88:07:7a:6e:
         80:74:e8:6a:d2:fb:1a:72:68:be:87:b7:f1:dd:1b:a1:1f:a3:
         a3:1a:08:62:63:dc:be:f2:6a:23:e5:17:5d:53:f0:3a:b9:8d:
         3a:9b:ea:2b:66:28:f0:c1:c4:ca:ad:b3:d4:e0:67:ad:33:f2:
         6c:20:69:08:f3:5a:ea:c1:18:53:81:85:c1:9d:e9:e4:34:8b:
         c3:f9:e0:76:a7:53:99:dd:70:f1:4b:45:44:7d:92:80:d4:5e:
         47:4a:b3:f1:b3:e8:4a:36:24:56:52:ef:50:99:4f:77:0d:4b:
         ec:7f:9c:0b:46:03:3f:c1:dd:36:c7:a5:3d:2e:6f:62:7f:6a:
         79:a3:07:0a:48:01:4b:df:6c:79:2a:23:31:ad:4c:bc:d3:04:
         6e:2c:82:12:52:be:7f:54:01:76:9d:a4:b4:e3:6d:e4:26:a9:
         9c:bf:a1:06:1d:30:72:01:eb:99:c8:eb:48:7f:d6:df:59:5d:
         4e:0c:93:ec:e4:2a:f2:9f:88:62:fa:07:e2:48:95:fb:f3:9e:
         7b:21:fd:23:9a:97:ec:f9:7f:19:ef:19:13:01:7c:91:78:2c:
         b4:b2:c3:fd:18:40:51:a6:4c:0a:5b:9e:ea:f0:47:e3:12:6d:
         51:4d:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:52:57 2026 by rpki-client