This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3ildpq-xyC-TEuwQ7VgVUpGxBsI.roa
File:                     3ildpq-xyC-TEuwQ7VgVUpGxBsI.roa (raw, json)
Hash identifier:          MX/aDv/cNu9xwgyJImXLK9SHqjNudoC7xsQvQ5pNcew=
Subject key identifier:   DE:29:5D:A6:AF:B1:C8:2F:93:12:EC:10:ED:58:15:52:91:B1:06:C2
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019B7C1301DF32808BD130CAFF185AAA1F59
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3ildpq-xyC-TEuwQ7VgVUpGxBsI.roa
Signing time:             Fri 02 Jan 2026 00:19:39 +0000
ROA not before:           Fri 02 Jan 2026 00:19:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213851
IP address blocks:        77.90.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:01:df:32:80:8b:d1:30:ca:ff:18:5a:aa:1f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jan  2 00:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=de295da6afb1c82f9312ec10ed58155291b106c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:91:50:c5:c3:df:97:2f:5a:6b:07:3a:63:
                    e4:64:01:b4:10:52:25:45:65:f4:5e:6f:e4:2f:ae:
                    df:cd:d3:e3:4f:3c:37:93:ea:0c:ef:f3:b0:3e:91:
                    ef:4c:af:82:36:0a:84:88:84:2c:e0:48:1c:67:56:
                    b6:51:48:74:e7:f3:38:70:42:30:6a:65:58:b3:b9:
                    be:45:41:ea:6d:0f:bb:90:1d:7f:98:c0:86:65:3e:
                    a1:77:4e:a0:01:3d:ba:e5:d7:5b:59:2c:ec:3a:be:
                    0a:73:71:16:2b:13:7f:d2:b7:9a:cf:1d:43:41:63:
                    e4:4f:98:f9:51:95:aa:ec:0e:d7:18:44:7d:e0:6d:
                    5b:7c:2c:4f:3e:c1:50:d8:82:50:9f:5c:8d:6f:e9:
                    cf:b4:b2:82:70:1a:19:14:b9:88:12:55:ec:18:6f:
                    bd:7e:06:4a:50:c7:60:00:66:a5:f6:8e:de:32:d2:
                    6e:43:38:19:6f:66:b4:57:80:20:a5:e7:4d:3b:95:
                    02:93:e6:7e:0c:65:ca:c2:ab:89:53:e2:58:78:f1:
                    9d:4e:ce:24:71:a7:6a:a2:1d:a2:7e:cd:cc:58:36:
                    8e:68:69:b6:9b:2a:5b:d0:a6:4a:30:0e:a5:a8:73:
                    03:5a:34:3c:9d:ac:5b:02:7e:1c:71:ad:42:2d:40:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:29:5D:A6:AF:B1:C8:2F:93:12:EC:10:ED:58:15:52:91:B1:06:C2
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3ildpq-xyC-TEuwQ7VgVUpGxBsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:e5:77:5e:08:db:5e:d4:d0:f8:f1:cb:b3:b0:19:7e:d0:
         1d:6c:4a:92:87:aa:00:d5:5b:c2:21:f7:7f:70:a9:3d:60:4b:
         44:31:9a:da:91:58:46:c8:40:ad:b5:17:e4:bc:45:ab:41:4d:
         53:3d:1c:12:00:a0:8d:59:53:91:d3:42:1e:07:17:2d:5e:6d:
         ea:d0:37:55:4d:2a:8f:ed:13:38:fc:54:5f:3f:4b:07:59:a1:
         89:f1:fc:d0:20:1d:54:9e:2c:c4:d9:37:35:c0:43:b9:42:4e:
         ac:1d:de:1a:51:9f:22:29:8e:b9:55:1a:a5:88:f0:1e:d6:41:
         df:1c:a0:f4:b9:c1:45:fd:5e:fa:a5:aa:b8:a5:ce:87:b8:dd:
         f3:67:cb:26:32:5b:27:dd:c8:6b:49:36:ad:70:73:4c:f6:c9:
         c9:96:26:ae:6e:5b:20:9b:c4:8c:e6:79:2c:92:e5:b3:eb:6b:
         08:16:07:31:91:5c:88:60:51:32:1b:3b:04:e8:cb:8b:08:5a:
         92:14:e4:c8:35:ac:bb:fd:ce:f2:46:24:51:97:4c:f3:40:68:
         79:03:4d:99:bf:3c:83:c5:82:05:f5:ee:81:a6:3a:b4:44:69:
         48:dd:3c:21:6b:cb:87:ff:76:9d:56:cc:dd:7a:0e:2d:02:16:
         13:f4:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:50 2026 by rpki-client