This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/JGb2stShvCknmJb-1rStrrkJ6_o.roa
File:                     JGb2stShvCknmJb-1rStrrkJ6_o.roa (raw, json)
Hash identifier:          Npa20YGAfZVydsPDhXcDHQpyIM5Ga8DFoLPQfZu0mz0=
Subject key identifier:   24:66:F6:B2:D4:A1:BC:29:27:98:96:FE:D6:B4:AD:AE:B9:09:EB:FA
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       019B7834A35954CB11BE2097A509DBFFA365
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/JGb2stShvCknmJb-1rStrrkJ6_o.roa
Signing time:             Thu 01 Jan 2026 06:17:54 +0000
ROA not before:           Thu 01 Jan 2026 06:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209242
IP address blocks:        77.37.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:a3:59:54:cb:11:be:20:97:a5:09:db:ff:a3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Jan  1 06:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2466f6b2d4a1bc29279896fed6b4adaeb909ebfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:86:48:26:3c:f2:16:29:73:f9:cb:1e:a3:
                    38:09:89:7f:48:af:5a:a9:58:db:eb:6b:ec:b7:7b:
                    33:dd:3b:35:d1:fd:79:a2:cc:a8:15:a4:24:14:ae:
                    c0:ec:f4:a3:92:76:a6:96:37:a3:c4:66:fe:59:8b:
                    ff:12:65:0b:5a:d0:a5:a7:ea:76:d7:8b:2f:05:00:
                    56:70:db:5c:b6:f3:c7:e9:e9:98:5a:f8:a7:ac:89:
                    77:a1:d2:f2:5b:10:1d:76:67:61:45:e8:47:7d:4e:
                    a7:ad:2d:68:10:64:25:8d:76:86:d1:a6:ec:04:bf:
                    3e:63:1d:bb:d3:e3:5e:e9:e9:37:e8:99:1f:3f:a9:
                    8d:14:e7:88:59:0c:05:3b:50:a6:a6:ee:4e:da:b0:
                    58:48:d4:c4:14:92:af:8a:e1:17:62:74:86:bc:44:
                    06:2d:7e:41:b3:74:23:50:75:8d:88:f7:84:d0:70:
                    46:90:a5:9d:58:8b:c3:46:03:86:d2:7b:9f:f6:f7:
                    aa:c9:4a:f2:ad:aa:29:78:9d:fd:cc:3d:e3:02:bf:
                    27:e3:26:4f:9c:5b:5d:ed:10:f2:c8:93:f1:26:eb:
                    98:50:c5:fb:46:0b:7c:ce:6e:8e:f4:c5:21:b9:b9:
                    ca:b0:45:c3:0d:ea:98:1f:fa:a1:40:52:c0:13:de:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:F6:B2:D4:A1:BC:29:27:98:96:FE:D6:B4:AD:AE:B9:09:EB:FA
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/JGb2stShvCknmJb-1rStrrkJ6_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:d1:52:40:aa:39:95:93:ad:2e:1c:22:18:19:f1:21:b6:c2:
         49:35:28:a3:41:e9:83:94:bc:e8:6e:93:2f:d1:26:44:5f:17:
         bb:1b:8e:b1:31:cc:c9:2e:fb:05:57:9e:79:39:d4:bd:30:e1:
         7c:72:f5:ce:3a:4c:85:0c:13:d7:5c:2e:42:14:59:0c:a6:e6:
         be:ff:aa:f1:4b:ca:d4:d5:62:84:46:ad:c2:b3:5a:0d:a2:b6:
         d8:6f:57:e0:23:48:cc:4a:7b:99:a4:21:6a:32:15:cb:95:a2:
         e3:cc:39:ae:32:ef:29:d1:ee:6b:e2:d0:81:09:f0:ac:c6:07:
         97:5f:fb:30:45:a9:e1:a9:26:05:b8:4f:60:e5:04:b9:d7:38:
         6e:be:12:4a:3e:c0:b4:14:79:42:94:16:68:e0:24:6c:3b:60:
         2e:88:b0:02:9b:06:1d:78:74:37:d9:a9:4b:84:37:08:7a:fa:
         b4:d0:ef:8a:21:33:54:c1:22:41:2b:d5:aa:3f:18:ea:96:fd:
         12:2c:b9:10:9d:e1:29:ff:b1:f4:02:c8:c4:98:ad:c2:fe:85:
         be:42:e7:cd:36:5f:d5:e7:9d:b2:25:7e:fa:31:bf:e3:c3:de:
         9e:98:c7:ff:be:be:0f:49:eb:97:72:41:85:ce:73:3b:16:95:
         6d:52:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:28 2026 by rpki-client