This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa
File:                     mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa (raw, json)
Hash identifier:          4af//0/sTljaocW55fj5PkOIaVuuWa8S7DrXdP1GzbU=
Subject key identifier:   99:0B:23:53:5C:CE:8D:54:4E:FE:ED:C3:D5:60:C2:FC:60:3F:AB:85
Certificate issuer:       /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial:       019B7CEE1EB2CB68639E171921C28567C69D
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa
Signing time:             Fri 02 Jan 2026 04:18:58 +0000
ROA not before:           Fri 02 Jan 2026 04:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39135
IP address blocks:        77.238.64.0/19 maxlen: 19
                          185.73.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:1e:b2:cb:68:63:9e:17:19:21:c2:85:67:c6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
        Validity
            Not Before: Jan  2 04:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=990b23535cce8d544efeedc3d560c2fc603fab85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:38:1d:9e:56:2f:bf:ad:7d:e1:06:2e:1c:
                    9e:57:80:4c:e1:67:21:04:75:86:3a:78:1d:f0:4e:
                    f1:f9:66:8e:80:46:db:e3:a7:7d:a4:9e:6a:25:10:
                    1d:1d:a0:03:d8:ff:12:45:e9:f9:8f:26:e9:74:e9:
                    e4:34:9f:45:3e:ef:44:2b:da:59:93:2b:dd:f8:90:
                    c9:00:52:63:a4:84:5d:43:38:5a:88:ac:f3:1d:47:
                    5b:2a:b5:e6:20:28:96:f1:3a:22:26:c7:c6:27:1c:
                    cb:8f:b1:b7:77:d4:8c:8f:d0:0d:67:2f:1b:e0:f0:
                    01:f5:b9:c1:ea:1b:76:46:66:47:7c:e0:f0:ae:a3:
                    5f:55:51:fc:62:03:72:1a:fe:04:2c:cd:8f:71:6c:
                    49:16:32:58:1b:50:cf:fd:85:78:83:76:72:79:7f:
                    2b:31:41:1d:c6:c7:b4:be:c8:80:47:76:41:07:b9:
                    ec:22:ea:d4:29:a5:42:de:fb:3a:ac:b4:25:fb:85:
                    29:7f:ea:97:13:78:9a:b9:fe:6f:9d:cb:03:2a:c9:
                    1b:48:c3:4d:25:97:b8:89:90:bf:dd:2e:24:5f:12:
                    e1:d8:04:f5:2d:80:d9:aa:e7:1d:eb:5f:c0:69:42:
                    e8:9d:18:b4:b5:84:35:0b:ff:0f:01:a9:1f:52:e3:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:23:53:5C:CE:8D:54:4E:FE:ED:C3:D5:60:C2:FC:60:3F:AB:85
            X509v3 Authority Key Identifier:
                keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.238.64.0/19
                  185.73.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:e9:af:8d:e3:03:44:1d:d0:20:02:ce:c2:fc:22:14:73:
         4b:55:49:3d:3a:c2:9c:db:db:3a:24:06:91:06:d1:4a:a7:3d:
         77:2f:12:6f:5d:f0:6e:63:69:ac:9a:ca:d8:ac:8c:f0:3d:8f:
         a9:f1:0e:92:82:bf:c1:a6:d4:26:93:3f:c7:6c:39:c5:4b:38:
         e3:85:33:7b:57:70:fa:3b:1b:3c:c1:61:86:67:3c:f2:f9:d4:
         0d:2c:79:68:ca:85:d8:21:d1:61:05:9f:e6:6b:d6:83:1a:59:
         f8:4c:38:d9:70:91:c7:01:01:c4:9e:7b:dd:03:bf:fc:b6:2a:
         90:a3:40:bd:d7:d8:49:5a:e8:69:d1:d1:8e:55:63:a2:25:46:
         2d:1f:ba:fc:e0:12:56:b7:47:78:8b:03:66:c0:f0:9c:b2:9f:
         7f:95:ab:d5:80:d7:fe:f2:51:07:70:49:e1:db:6f:a1:3b:1c:
         f3:e6:f4:2e:c6:1c:a1:21:a5:7f:5d:f5:41:df:84:13:59:8a:
         ae:f7:56:d2:49:08:aa:ba:2b:58:c3:19:3c:3d:91:ca:77:3a:
         97:23:f0:fa:27:05:48:27:66:03:6a:8b:40:58:9b:73:61:dc:
         4c:ea:0b:b9:0d:c6:84:aa:99:aa:70:21:0f:6b:30:5e:60:82:
         b5:ae:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:06 2026 by rpki-client