This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/t7r9nuarahXSWsPnUF4aZEkkXsg.roa
File:                     t7r9nuarahXSWsPnUF4aZEkkXsg.roa (raw, json)
Hash identifier:          yOWpMwrDGnAAAb3dzrsCU7/jNADVWOJ7LHSvuO3iOLA=
Subject key identifier:   B7:BA:FD:9E:E6:AB:6A:15:D2:5A:C3:E7:50:5E:1A:64:49:24:5E:C8
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       019B7D5B2BB86C39A8FCE4AEEB1E12467489
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/t7r9nuarahXSWsPnUF4aZEkkXsg.roa
Signing time:             Fri 02 Jan 2026 06:18:05 +0000
ROA not before:           Fri 02 Jan 2026 06:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215941
IP address blocks:        77.76.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:2b:b8:6c:39:a8:fc:e4:ae:eb:1e:12:46:74:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: Jan  2 06:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7bafd9ee6ab6a15d25ac3e7505e1a6449245ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:df:e8:63:74:06:c2:89:cc:de:93:56:b7:
                    75:fb:a9:a6:3e:15:a9:4f:29:28:4d:04:bf:aa:1d:
                    0a:79:b9:72:f3:ec:62:f7:eb:9d:5c:46:df:66:9c:
                    37:5e:a7:9e:e1:64:fd:a6:ab:a1:40:9d:87:12:84:
                    d1:87:32:64:7b:29:19:b4:cf:d7:1e:eb:58:a7:2d:
                    b1:a2:3b:91:18:89:e4:6f:5d:3e:e1:f0:63:32:6b:
                    5a:f9:9b:0b:1b:a2:7e:9e:19:48:91:50:ad:8a:66:
                    42:94:48:3b:8a:ce:51:0b:4a:85:82:9b:59:f8:b5:
                    1b:46:69:de:9b:d6:df:68:05:58:6a:83:5f:f2:13:
                    01:15:3a:23:ef:3f:3f:7a:58:7f:87:e4:bf:89:ab:
                    ee:4a:f3:5c:88:80:c0:5e:0b:f5:7a:71:10:97:11:
                    05:1f:2e:c1:40:c1:2f:19:d5:32:65:64:2e:1a:c1:
                    8b:53:79:f4:53:0d:d4:37:a1:34:aa:88:4e:19:dc:
                    9c:47:69:07:28:14:b7:cb:d6:7a:a8:9f:92:47:f9:
                    ac:85:99:04:73:e2:74:83:aa:d0:42:06:f7:63:2f:
                    c3:78:4a:a1:a8:1a:92:01:8b:8a:73:2b:b8:fd:35:
                    d4:39:8c:9a:d0:8f:8f:6a:0a:8a:35:bb:41:a6:41:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BA:FD:9E:E6:AB:6A:15:D2:5A:C3:E7:50:5E:1A:64:49:24:5E:C8
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/t7r9nuarahXSWsPnUF4aZEkkXsg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.76.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ab:fc:3b:83:03:63:42:5a:9b:3e:a6:f7:e5:ce:96:81:cf:
         21:22:fe:d1:98:7a:65:9f:d8:8d:27:73:9a:19:a0:79:d3:9f:
         6d:59:0b:d4:66:22:95:97:89:1f:c0:ed:92:5d:20:8b:14:2f:
         ed:87:03:39:95:07:a0:2c:23:e8:fc:14:ce:4c:ba:50:52:df:
         c2:a5:bb:55:80:57:f7:7e:fc:37:f4:1c:bc:77:87:06:13:de:
         c4:c9:cb:6b:4b:2e:7f:e5:8f:40:1e:bd:ea:8e:1e:58:10:4d:
         b5:32:a5:c0:e5:1a:4e:c2:81:7f:32:28:b8:6b:c1:93:75:ff:
         72:91:ad:f7:d6:0d:e9:b2:1c:16:d8:a9:66:00:5e:ed:79:33:
         58:97:fe:6f:e0:9e:a9:23:68:e1:45:ea:57:75:8b:9d:95:0f:
         9c:a7:c1:de:5d:92:51:27:8b:c1:5b:1d:af:bf:40:20:be:8a:
         bf:d5:9a:84:cd:2b:75:99:43:f6:7e:a2:7d:77:49:65:e7:58:
         cd:10:21:18:04:78:21:08:9d:43:bd:4a:3f:22:95:3c:d6:5a:
         ec:fd:77:ce:e3:75:12:43:97:dc:48:7c:d4:38:0a:c9:25:68:
         3b:41:d1:cc:29:fb:4e:ed:15:e8:98:79:ae:e1:52:7e:4f:36:
         1f:e6:43:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9Wyu4bDmo/OSu6x4SRnSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2JhZmQ5ZWU2YWI2YTE1ZDI1YWMzZTc1MDVlMWE2NDQ5MjQ1ZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfLf6GN0BsKJzN6TVrd1+6mmPhWp
TykoTQS/qh0Kebly8+xi9+udXEbfZpw3Xqee4WT9pquhQJ2HEoTRhzJkeykZtM/X
HutYpy2xojuRGInkb10+4fBjMmta+ZsLG6J+nhlIkVCtimZClEg7is5RC0qFgptZ
+LUbRmnem9bfaAVYaoNf8hMBFToj7z8/elh/h+S/iavuSvNciIDAXgv1enEQlxEF
Hy7BQMEvGdUyZWQuGsGLU3n0Uw3UN6E0qohOGdycR2kHKBS3y9Z6qJ+SR/mshZkE
c+J0g6rQQgb3Yy/DeEqhqBqSAYuKcyu4/TXUOYya0I+PagqKNbtBpkEQQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLe6/Z7mq2oV0lrD51BeGmRJJF7IMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvdDdyOW51YXJhaFhTV3NQblVGNGFaRWtrWHNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUwPMA0G
CSqGSIb3DQEBCwUAA4IBAQATq/w7gwNjQlqbPqb35c6Wgc8hIv7RmHpln9iNJ3Oa
GaB5059tWQvUZiKVl4kfwO2SXSCLFC/thwM5lQegLCPo/BTOTLpQUt/CpbtVgFf3
fvw39By8d4cGE97EyctrSy5/5Y9AHr3qjh5YEE21MqXA5RpOwoF/Mii4a8GTdf9y
ka331g3pshwW2KlmAF7teTNYl/5v4J6pI2jhRepXdYudlQ+cp8HeXZJRJ4vBWx2v
v0Agvoq/1ZqEzSt1mUP2fqJ9d0ll51jNECEYBHghCJ1DvUo/IpU81lrs/XfO43US
Q5fcSHzUOArJJWg7QdHMKftO7RXomHmu4VJ+TzYf5kO9
-----END CERTIFICATE-----
Generated at Fri Jan 23 18:50:56 2026 by rpki-client