This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nE77yAVktvNND76zFHdcdvI6EIc.roa
File:                     nE77yAVktvNND76zFHdcdvI6EIc.roa (raw, json)
Hash identifier:          Th+kKIF6e4RBmO4zKjy0HxzdMmRZyODUrOIMryq1yPY=
Subject key identifier:   9C:4E:FB:C8:05:64:B6:F3:4D:0F:BE:B3:14:77:5C:76:F2:3A:10:87
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A346194F691EF3D138FFCD51CFC8C3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nE77yAVktvNND76zFHdcdvI6EIc.roa
Signing time:             Thu 01 Jan 2026 08:18:44 +0000
ROA not before:           Thu 01 Jan 2026 08:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213796
IP address blocks:        94.156.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:46:19:4f:69:1e:f3:d1:38:ff:cd:51:cf:c8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9c4efbc80564b6f34d0fbeb314775c76f23a1087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d9:49:7f:66:b2:42:a3:f7:81:db:cb:d2:47:
                    ac:68:40:bf:46:05:e6:04:c4:af:ff:ce:7d:de:3b:
                    68:c4:00:41:77:bb:7e:c5:32:4e:15:aa:7c:da:5d:
                    69:d4:7d:31:f8:e8:a7:40:98:d4:a8:c6:1d:76:39:
                    1b:e2:79:b7:36:bd:dc:ae:56:27:5c:4b:20:30:94:
                    fd:5d:b2:6b:a0:70:07:b6:b4:bb:19:23:83:04:3d:
                    67:58:96:09:34:4e:c3:a0:8d:24:5a:01:e8:64:56:
                    47:a1:e7:7a:32:27:ce:25:19:eb:18:16:00:1d:e6:
                    ef:e8:65:5f:5a:4b:6d:49:64:0f:2b:29:6f:95:df:
                    df:b8:67:58:3f:41:bc:76:f6:8f:d7:39:38:b8:66:
                    2d:e3:b9:7c:ae:6e:b9:14:bc:14:01:8b:34:33:95:
                    2f:34:64:f2:ad:73:6a:9c:fb:0c:ef:52:b0:f1:e1:
                    27:0b:a8:37:fa:17:d6:8c:ab:f6:ba:d4:88:8c:ec:
                    72:c7:b4:e9:29:b8:78:f3:d9:10:21:5b:2a:af:7c:
                    1d:0b:c3:65:57:eb:f5:b2:0b:90:6a:36:6b:46:b0:
                    57:85:52:6a:1d:91:8f:77:29:e0:88:5a:9c:69:3f:
                    96:85:40:75:ee:6e:04:e8:a2:6b:a8:f0:34:d8:d2:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4E:FB:C8:05:64:B6:F3:4D:0F:BE:B3:14:77:5C:76:F2:3A:10:87
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nE77yAVktvNND76zFHdcdvI6EIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.156.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:34:5e:b5:dc:84:f6:ec:64:a7:09:ee:61:4d:ac:a9:55:fe:
         ba:0e:73:39:3c:ed:1b:b0:65:91:04:3a:c0:9a:ce:3d:b4:8c:
         5b:ca:0d:37:76:61:a4:bc:94:27:cb:1f:fb:38:19:5f:93:48:
         a3:a5:bb:42:16:26:e1:ed:83:80:a7:07:bf:f2:2b:67:3f:63:
         bc:c6:ce:d0:e6:89:48:8b:76:d2:0b:fc:22:60:7b:e6:0b:62:
         71:0b:e9:ca:67:77:1a:88:a3:29:23:7a:1a:18:30:f4:14:fe:
         43:03:2a:27:5e:07:9d:57:e6:84:09:c6:c7:6e:d8:69:6c:5b:
         52:47:13:32:43:93:9e:00:ca:22:41:ba:7d:ec:63:1b:f6:a1:
         db:81:60:e1:f6:7c:3e:3c:4a:b8:05:2f:46:91:cd:79:13:9b:
         7e:e8:7d:78:43:9c:0a:8b:d5:f4:b8:4a:f0:22:cd:fe:fd:52:
         58:cb:3d:f7:83:08:52:60:ae:6e:8b:28:e2:75:0b:20:e6:2f:
         9f:87:f6:b4:43:7b:27:b9:a9:8c:6c:17:a4:d3:3d:ec:58:1f:
         5a:1c:7e:fb:84:c2:0e:73:a6:a6:50:8c:d7:f2:95:52:f9:70:
         1c:d9:30:b6:64:73:99:b0:85:74:f4:b1:ad:49:2b:c2:7a:b1:
         52:c8:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:05:22 2026 by rpki-client