This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/j7E0VOUyJDRGY1mXB_LTgfCHtec.roa
File:                     j7E0VOUyJDRGY1mXB_LTgfCHtec.roa (raw, json)
Hash identifier:          DmIJX6VYUzzGV5IX9wpqM+xTHY2Teuv8gdmzrljcdLA=
Subject key identifier:   8F:B1:34:54:E5:32:24:34:46:63:59:97:07:F2:D3:81:F0:87:B5:E7
Certificate issuer:       /CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Certificate serial:       019C0F9B1FC2EB7AEB39EC103F387D111752
Authority key identifier: 77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/j7E0VOUyJDRGY1mXB_LTgfCHtec.roa
Signing time:             Fri 30 Jan 2026 15:52:30 +0000
ROA not before:           Fri 30 Jan 2026 15:52:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        217.179.124.0/24 maxlen: 24
                          217.179.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:9b:1f:c2:eb:7a:eb:39:ec:10:3f:38:7d:11:17:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
        Validity
            Not Before: Jan 30 15:52:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fb13454e53224344663599707f2d381f087b5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:01:4f:c2:c4:55:b1:1f:4f:4f:9c:de:78:
                    e3:34:9b:4a:5b:66:c1:f9:27:91:0e:83:fc:47:fb:
                    89:0f:e8:83:62:ed:15:e4:36:f8:d3:1f:0e:c6:eb:
                    5c:f6:83:54:df:28:92:2d:26:a7:33:fc:6d:3f:a2:
                    c4:80:6c:c2:e5:be:8d:4c:00:b6:5f:ab:24:2c:f8:
                    ea:9e:94:4c:94:3d:be:14:d1:d6:68:d8:e8:57:39:
                    7e:0e:29:d9:4c:e4:45:5d:7b:3e:e9:b4:e6:8a:92:
                    d1:ab:ec:7a:a3:b5:ad:42:92:a2:0c:91:9c:ea:7d:
                    de:65:16:6c:2f:62:50:5c:ce:4d:df:db:1b:d2:6e:
                    03:17:50:1c:1f:8a:61:ae:8e:a5:ac:39:27:42:fb:
                    3a:aa:1c:fc:28:b4:4b:64:c9:f0:d0:8a:79:ed:24:
                    c2:d1:12:f4:90:a8:98:cd:d0:54:a2:a6:6a:46:d1:
                    97:86:bd:e0:30:f6:7a:b3:17:66:9a:96:1e:a7:b6:
                    46:1d:d0:6e:3a:5d:ce:0d:1e:72:d0:bc:73:74:d5:
                    65:c2:08:05:2e:21:b4:2f:16:8a:ed:4b:bb:05:ef:
                    02:71:c9:9a:41:4e:b2:c3:f6:5d:e5:50:d3:6c:d7:
                    21:84:e2:9c:36:5d:e1:19:49:a2:10:14:4c:50:13:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B1:34:54:E5:32:24:34:46:63:59:97:07:F2:D3:81:F0:87:B5:E7
            X509v3 Authority Key Identifier:
                keyid:77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/j7E0VOUyJDRGY1mXB_LTgfCHtec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.179.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:2c:8a:05:16:a2:56:45:ec:12:59:4c:70:0a:dd:3e:82:bd:
         45:d1:b7:2c:8e:e0:0a:b8:99:1d:63:71:a1:51:e2:0a:27:ed:
         5c:50:2d:2a:d0:1d:7d:c3:f3:7a:fc:77:45:9d:ff:d1:62:a6:
         6d:ad:a9:60:e0:cb:2e:66:a6:39:6e:fa:cb:6e:e7:26:28:2e:
         40:6d:55:78:5b:53:a9:af:3a:97:0d:b5:6f:a9:4e:91:70:ac:
         cf:35:9f:6d:1d:9f:0a:71:33:5a:cb:4f:95:eb:23:4e:1a:23:
         cc:05:22:fb:5e:47:1e:7e:b9:c9:e6:9e:9a:ab:c4:5a:2c:69:
         e9:4b:2d:21:0d:b9:aa:f2:d9:48:00:5c:3f:7a:9c:35:45:13:
         0d:c3:15:84:d5:35:cd:ec:43:50:4e:56:a9:52:3b:2c:96:87:
         b6:67:43:d6:75:6b:51:6f:e8:7a:52:96:31:1d:40:06:6f:81:
         c2:32:bf:09:f1:01:b2:bb:e2:ab:14:d3:87:ac:ed:63:13:e1:
         23:3f:2d:73:b7:55:79:13:0c:0c:7f:83:94:d7:39:76:9b:11:
         ea:3c:76:02:a4:92:21:d2:49:76:9e:32:86:2b:62:53:d5:6c:
         e7:41:4e:46:44:6b:d7:20:8b:2b:d6:17:f8:bc:61:4e:92:4a:
         70:b5:46:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwPmx/C63rrOewQPzh9ERdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY3MDM1YzI4OTNiMjhjZDA0ZmQxYTliM2NhY2QyNDI4
YzhkZmQwHhcNMjYwMTMwMTU1MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmIxMzQ1NGU1MzIyNDM0NDY2MzU5OTcwN2YyZDM4MWYwODdiNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveYBT8LEVbEfT0+c3njjNJtKW2bB
+SeRDoP8R/uJD+iDYu0V5Db40x8Oxutc9oNU3yiSLSanM/xtP6LEgGzC5b6NTAC2
X6skLPjqnpRMlD2+FNHWaNjoVzl+DinZTORFXXs+6bTmipLRq+x6o7WtQpKiDJGc
6n3eZRZsL2JQXM5N39sb0m4DF1AcH4phro6lrDknQvs6qhz8KLRLZMnw0Ip57STC
0RL0kKiYzdBUoqZqRtGXhr3gMPZ6sxdmmpYep7ZGHdBuOl3ODR5y0LxzdNVlwggF
LiG0LxaK7Uu7Be8CccmaQU6yw/Zd5VDTbNchhOKcNl3hGUmiEBRMUBN9GwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+xNFTlMiQ0RmNZlwfy04Hwh7XnMB8GA1UdIwQY
MBaAFHcvcDXCiTsozQT9Gps8rNJCjI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQt
ODMwMzVhZmU0YTM3LzEvajdFMFZPVXlKRFJHWTFtWEJfTFRnZkNIdGVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQtODMwMzVhZmU0YTM3
LzEvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2bN8MA0G
CSqGSIb3DQEBCwUAA4IBAQCvLIoFFqJWRewSWUxwCt0+gr1F0bcsjuAKuJkdY3Gh
UeIKJ+1cUC0q0B19w/N6/HdFnf/RYqZtralg4MsuZqY5bvrLbucmKC5AbVV4W1Op
rzqXDbVvqU6RcKzPNZ9tHZ8KcTNay0+V6yNOGiPMBSL7XkcefrnJ5p6aq8RaLGnp
Sy0hDbmq8tlIAFw/epw1RRMNwxWE1TXN7ENQTlapUjssloe2Z0PWdWtRb+h6UpYx
HUAGb4HCMr8J8QGyu+KrFNOHrO1jE+EjPy1zt1V5EwwMf4OU1zl2mxHqPHYCpJIh
0kl2njKGK2JT1WznQU5GRGvXIIsr1hf4vGFOkkpwtUYQ
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:38 2026 by rpki-client