This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa
File:                     WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (raw, json)
Hash identifier:          w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=
Subject key identifier:   59:1A:43:0E:A1:15:9C:13:D3:08:05:16:86:FB:46:1E:74:53:36:91
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       019B7C80717D23DFCD255D64127817F182E9
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa
Signing time:             Fri 02 Jan 2026 02:19:11 +0000
ROA not before:           Fri 02 Jan 2026 02:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209242
IP address blocks:        77.74.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:71:7d:23:df:cd:25:5d:64:12:78:17:f1:82:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: Jan  2 02:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=591a430ea1159c13d308051686fb461e74533691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:de:5e:0b:cc:48:2d:d5:54:c7:b8:ac:53:
                    e6:f7:11:80:01:8c:80:32:77:71:84:11:bc:94:c8:
                    69:2b:4b:40:a1:fa:b1:5f:81:0a:f9:87:b3:ef:47:
                    7c:3e:5b:86:84:d3:2d:40:d4:9b:99:39:8f:8c:c1:
                    8e:9b:3d:9d:9c:04:74:aa:ad:09:3c:c0:99:46:2d:
                    35:af:0e:ae:be:aa:47:99:29:66:ec:af:8f:d5:04:
                    aa:cf:2b:00:19:46:25:d5:11:f0:18:f0:2c:52:17:
                    75:4a:5f:a1:93:58:63:5c:b1:61:0f:f2:58:41:f8:
                    65:bc:8a:a5:b8:4b:6c:aa:59:31:ce:bc:7a:db:13:
                    1a:b9:98:6c:79:e5:e3:2e:06:25:4a:bb:4e:16:ec:
                    72:b4:73:4d:21:7c:19:b0:75:a9:eb:a8:88:1f:48:
                    1c:30:34:33:98:95:47:56:75:8d:a9:7c:1c:3d:74:
                    9b:db:80:e3:a9:a5:dd:d1:d5:44:a9:50:29:f4:ac:
                    7f:9b:7c:80:5a:5d:e9:50:2f:63:2e:84:45:6d:40:
                    6f:fc:6c:b9:69:0e:4e:f1:be:2a:fb:0b:8d:35:43:
                    3c:b8:88:4f:c1:0d:fc:d6:e7:71:fb:9b:1f:b0:77:
                    81:91:c4:f4:99:2d:16:b2:23:6f:e1:c3:d4:be:7c:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1A:43:0E:A1:15:9C:13:D3:08:05:16:86:FB:46:1E:74:53:36:91
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.74.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:aa:6d:82:3c:f1:92:2d:5b:c4:18:26:91:1d:02:44:62:ec:
         be:d7:59:d3:6e:72:7d:de:49:1e:21:e4:87:8d:b0:0e:1e:f7:
         2c:1c:26:c8:71:da:04:71:e3:3f:7f:da:ad:a2:1b:93:2d:7d:
         fc:cf:7a:62:61:41:a5:c3:4d:7d:a5:3a:14:91:31:b2:b7:c3:
         0f:5c:13:c7:b7:72:de:cf:e3:f9:37:14:b2:99:55:97:f4:86:
         d8:3a:a1:db:eb:54:33:ab:2d:7e:36:05:4e:4a:a8:83:10:4c:
         c4:4b:6b:fe:c9:bf:21:17:96:b8:23:f1:41:86:68:55:4c:e7:
         e7:c4:98:4a:a2:fc:d8:74:1c:fc:32:f5:0c:c1:9d:b9:24:e6:
         5d:bf:f9:26:1d:93:15:67:4e:cb:7c:b3:af:4d:b3:0d:5a:de:
         40:c6:0d:9e:42:2c:33:bc:c9:29:9d:b2:cd:b3:d1:28:26:55:
         f1:b9:5f:1f:e5:9d:10:c1:8d:3d:cc:75:22:99:7c:54:0a:92:
         e1:2b:be:d1:66:fb:c8:be:13:81:8a:69:56:86:c0:3c:59:c5:
         21:21:59:45:02:c2:1e:36:3b:da:ef:5f:55:8d:d1:78:59:4d:
         06:c3:43:83:ed:ab:11:9f:df:07:7c:f6:cd:47:06:9b:a1:e1:
         02:09:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:00:57 2026 by rpki-client