This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/JNeDgfvAI53eq-OHxTP_g4E7ONw.roa
File:                     JNeDgfvAI53eq-OHxTP_g4E7ONw.roa (raw, json)
Hash identifier:          0K7M2hZwaw6ZT/yMinMmZewL0SiW6EdTaWoR/ZLyf9c=
Subject key identifier:   24:D7:83:81:FB:C0:23:9D:DE:AB:E3:87:C5:33:FF:83:81:3B:38:DC
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       019B7834991A3FE722F93460393D447B553C
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/JNeDgfvAI53eq-OHxTP_g4E7ONw.roa
Signing time:             Thu 01 Jan 2026 06:17:51 +0000
ROA not before:           Thu 01 Jan 2026 06:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        77.37.84.0/24 maxlen: 24
                          93.127.148.0/23 maxlen: 24
                          93.127.152.0/23 maxlen: 24
                          93.127.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:99:1a:3f:e7:22:f9:34:60:39:3d:44:7b:55:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Jan  1 06:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24d78381fbc0239ddeabe387c533ff83813b38dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cc:3d:d4:ec:a8:15:69:60:b1:a3:28:bb:c6:
                    a2:b6:d5:37:74:a5:78:f1:dc:1e:88:9d:42:b8:51:
                    8f:28:b0:dd:5f:70:c3:fb:f2:6b:16:6f:90:b1:a5:
                    7b:fd:97:26:63:a2:a7:62:81:d4:f1:eb:20:7f:90:
                    dd:aa:42:48:b5:3b:6e:de:ee:f6:a1:0a:d3:54:18:
                    a3:d2:d2:3a:ab:b1:90:cd:60:c3:d1:61:21:2d:71:
                    eb:b1:6c:69:e9:ba:aa:6b:af:18:14:42:63:ee:b4:
                    50:b2:d8:e6:52:ae:d2:8a:c4:dc:b9:a1:fd:87:5f:
                    9e:a7:91:87:5a:b4:e2:5f:c3:0a:52:06:09:fa:c4:
                    4c:37:16:0a:be:3b:08:3f:1c:bc:e8:74:51:8f:7d:
                    ae:88:92:f5:a2:54:79:01:74:af:18:b9:2c:56:22:
                    82:54:69:fe:4b:0c:43:46:ee:1e:9a:70:76:d6:03:
                    9a:f8:d8:a9:97:ac:d6:cd:78:04:be:db:7f:86:10:
                    ae:c4:f3:5b:83:63:7c:91:b8:a8:9a:61:3a:a9:94:
                    28:d3:d9:a0:ef:38:af:20:2b:ae:12:31:b0:25:f4:
                    12:6d:55:75:9e:91:16:be:6a:e0:29:88:9c:8d:7c:
                    9b:53:a2:22:fa:a8:2b:82:6a:82:e2:2d:59:bd:50:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D7:83:81:FB:C0:23:9D:DE:AB:E3:87:C5:33:FF:83:81:3B:38:DC
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/JNeDgfvAI53eq-OHxTP_g4E7ONw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.84.0/24
                  93.127.148.0/23
                  93.127.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:a0:99:aa:ab:17:f7:dc:bd:ae:0b:db:e5:28:53:a3:4c:48:
         85:44:34:05:13:5c:75:01:78:3d:54:07:84:a8:d6:aa:d0:1a:
         fc:48:37:67:47:7e:88:1d:7c:46:e7:b9:c0:46:6f:54:42:52:
         46:7f:9c:97:1f:87:9b:e2:4a:b8:72:39:96:e1:48:cd:0c:2b:
         2f:1a:c1:f8:39:a1:22:40:b3:73:dd:81:6c:19:3e:d2:c4:07:
         60:47:2c:83:90:c3:f0:37:8c:d6:df:4f:bc:29:39:00:89:3b:
         62:63:a3:fc:b8:de:a1:87:8c:34:5a:6c:15:0b:eb:6c:1e:88:
         77:53:87:9f:2a:ce:95:79:ed:94:38:61:49:87:fd:10:6a:91:
         d6:d6:0e:07:e4:2e:75:ba:31:60:19:a6:f2:64:c4:c3:7e:e7:
         4a:4e:b6:46:21:db:d6:5f:a7:bd:1f:bc:58:c1:8b:99:7f:70:
         89:15:a9:9b:3f:cb:be:9b:28:b7:8b:dd:96:16:d9:da:4c:6d:
         16:e9:4b:a9:06:65:5f:af:ca:9c:e5:10:45:e4:a1:46:5b:4c:
         f4:3e:4b:f8:50:ba:6c:4e:57:8c:fb:c4:2d:65:7e:3f:12:a2:
         3f:6e:57:eb:fc:ee:42:e3:e0:7b:5a:dc:7f:af:81:69:9e:be:
         a6:e2:c4:72
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt4NJkaP+ci+TRgOT1Ee1U8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGQ3ODM4MWZiYzAyMzlkZGVhYmUzODdjNTMzZmY4MzgxM2IzOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Mw91OyoFWlgsaMou8aittU3dKV4
8dweiJ1CuFGPKLDdX3DD+/JrFm+QsaV7/ZcmY6KnYoHU8esgf5DdqkJItTtu3u72
oQrTVBij0tI6q7GQzWDD0WEhLXHrsWxp6bqqa68YFEJj7rRQstjmUq7SisTcuaH9
h1+ep5GHWrTiX8MKUgYJ+sRMNxYKvjsIPxy86HRRj32uiJL1olR5AXSvGLksViKC
VGn+SwxDRu4emnB21gOa+Nipl6zWzXgEvtt/hhCuxPNbg2N8kbiommE6qZQo09mg
7zivICuuEjGwJfQSbVV1npEWvmrgKYicjXybU6Ii+qgrgmqC4i1ZvVCdnwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCTXg4H7wCOd3qvjh8Uz/4OBOzjcMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvSk5lRGdmdkFJNTNlcS1PSHhUUF9nNEU3T053LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATSVUAwQB
XX+UAwQCXX+YMA0GCSqGSIb3DQEBCwUAA4IBAQBcoJmqqxf33L2uC9vlKFOjTEiF
RDQFE1x1AXg9VAeEqNaq0Br8SDdnR36IHXxG57nARm9UQlJGf5yXH4eb4kq4cjmW
4UjNDCsvGsH4OaEiQLNz3YFsGT7SxAdgRyyDkMPwN4zW30+8KTkAiTtiY6P8uN6h
h4w0WmwVC+tsHoh3U4efKs6Vee2UOGFJh/0QapHW1g4H5C51ujFgGabyZMTDfudK
TrZGIdvWX6e9H7xYwYuZf3CJFambP8u+myi3i92WFtnaTG0W6UupBmVfr8qc5RBF
5KFGW0z0Pkv4ULpsTleM+8QtZX4/EqI/blfr/O5C4+B7Wtx/r4Fpnr6m4sRy
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:40:58 2026 by rpki-client