This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/79z9Rd1-vTVQr4Hvq3kNUe7KSvw.roa
File:                     79z9Rd1-vTVQr4Hvq3kNUe7KSvw.roa (raw, json)
Hash identifier:          9bD+DoGdGirCnn1RLNpR2NtYexeEnqJM0s2E8jcV1eo=
Subject key identifier:   EF:DC:FD:45:DD:7E:BD:35:50:AF:81:EF:AB:79:0D:51:EE:CA:4A:FC
Certificate issuer:       /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial:       019B7BA3DA50CC1DA88E7ACE483CF6A160DE
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/79z9Rd1-vTVQr4Hvq3kNUe7KSvw.roa
Signing time:             Thu 01 Jan 2026 22:18:14 +0000
ROA not before:           Thu 01 Jan 2026 22:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62323
IP address blocks:        77.78.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:da:50:cc:1d:a8:8e:7a:ce:48:3c:f6:a1:60:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
        Validity
            Not Before: Jan  1 22:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efdcfd45dd7ebd3550af81efab790d51eeca4afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:51:02:27:04:c7:ca:8c:d6:d1:14:e7:c4:
                    f0:4e:b4:40:5f:af:e9:0f:d6:02:18:f5:04:50:7c:
                    49:d4:20:74:9e:67:58:33:47:68:6c:8d:7a:07:88:
                    e0:8a:a5:19:c4:64:a5:9c:91:40:45:26:0f:80:6e:
                    cb:12:56:3c:bb:30:13:45:b0:47:8f:04:90:bc:2c:
                    91:e4:22:34:00:14:5c:3b:1d:9f:1a:c8:9f:70:bc:
                    6f:66:56:48:df:b1:76:33:11:f8:5c:0b:0a:22:e6:
                    11:f8:46:04:78:54:ce:7f:0c:59:24:16:8a:90:4e:
                    3a:88:ed:cf:d1:77:93:81:bb:8d:14:86:d2:c8:b8:
                    e5:3b:c1:19:64:e9:58:c4:89:f6:11:30:b2:f3:70:
                    d8:74:80:0b:e9:04:38:e1:08:cf:a4:d4:28:19:6d:
                    90:1a:b4:2d:d7:e4:14:9c:2e:ae:51:66:9e:fa:5d:
                    04:94:f7:45:1b:dd:d2:89:d1:80:0e:70:c5:b4:9d:
                    fc:49:3c:24:91:c1:5b:5d:02:ad:c1:c3:61:41:e8:
                    7a:32:62:98:b4:6b:f6:5b:58:c4:a7:9d:4e:2d:c7:
                    e8:ce:4b:ef:99:d6:5d:35:1f:41:9b:62:32:43:6b:
                    55:4f:d8:4b:00:34:50:53:17:e3:7e:70:98:5b:ce:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DC:FD:45:DD:7E:BD:35:50:AF:81:EF:AB:79:0D:51:EE:CA:4A:FC
            X509v3 Authority Key Identifier:
                keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/79z9Rd1-vTVQr4Hvq3kNUe7KSvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.78.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:69:79:4e:a2:dc:f0:1e:b1:06:42:b7:ab:a1:99:e2:ff:65:
         d2:ec:8a:56:81:c8:8a:e3:6a:83:c6:38:fe:4b:aa:df:fa:47:
         1c:1d:80:e2:61:04:dd:cb:77:84:a1:2a:dc:e8:e1:5a:b3:19:
         aa:23:92:0e:aa:62:75:c2:32:a9:58:75:99:44:31:7c:3a:b3:
         26:30:4c:c9:c2:f5:f7:e9:72:98:b4:94:f2:30:b1:d7:8c:8f:
         2e:cc:de:ae:2d:09:47:c7:ed:4c:39:f3:e2:10:cd:99:b7:81:
         1e:9a:19:75:c4:1c:f3:82:92:90:89:c7:6c:2f:62:5b:48:8d:
         aa:db:18:98:e9:f8:fe:ce:2d:36:85:a8:74:aa:a1:46:c0:77:
         cb:b8:61:24:54:06:93:9f:6d:a2:0e:11:1a:45:19:18:05:13:
         91:a1:04:85:f2:d8:be:f9:4b:8a:13:fd:a9:93:d8:e5:3c:89:
         4a:ba:84:d6:4d:53:93:34:ef:9c:17:9e:ae:80:44:64:b7:0b:
         f2:97:0b:35:82:38:44:f1:60:b8:6d:85:c0:86:7a:6b:c3:70:
         cf:9b:00:26:9c:ae:e6:81:72:f9:88:d3:7c:58:7f:1e:ae:9c:
         59:46:93:65:04:53:0e:ed:cf:65:dc:23:a3:b6:53:01:e0:7c:
         d3:67:47:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:16 2026 by rpki-client