This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/B3yLGefLT397xZdjHJwz631sCBE.roa
File:                     B3yLGefLT397xZdjHJwz631sCBE.roa (raw, json)
Hash identifier:          P6wNlsDfWCADEkpFOrgZZ2Ab/AJtAHaxxAaBB273BL4=
Subject key identifier:   07:7C:8B:19:E7:CB:4F:7F:7B:C5:97:63:1C:9C:33:EB:7D:6C:08:11
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019B7DCA260386D1FF2A9640CB2FD7C3264B
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/B3yLGefLT397xZdjHJwz631sCBE.roa
Signing time:             Fri 02 Jan 2026 08:19:18 +0000
ROA not before:           Fri 02 Jan 2026 08:19:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     40676
IP address blocks:        93.177.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:26:03:86:d1:ff:2a:96:40:cb:2f:d7:c3:26:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jan  2 08:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=077c8b19e7cb4f7f7bc597631c9c33eb7d6c0811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:cb:fe:58:12:60:ab:46:b8:25:01:77:15:
                    9e:e3:9e:5c:da:7a:6f:ac:17:9d:8b:f4:11:4c:16:
                    4b:77:26:07:b6:53:31:3c:c0:5b:cc:14:17:51:fd:
                    e7:3f:7b:b9:d1:0e:3b:49:a9:36:88:0d:e8:54:d0:
                    9d:38:83:7f:31:8f:ef:97:3b:e3:76:77:e9:56:96:
                    0b:3a:8c:ad:5e:16:c7:93:61:93:3a:4c:bb:02:ad:
                    6e:11:fe:c9:c9:bc:3c:cc:14:6f:c2:6a:97:8a:75:
                    6e:61:e2:bc:9e:85:58:b7:91:9d:e5:17:4b:a6:58:
                    e8:c5:e1:0c:2a:aa:58:73:8b:a1:50:f8:59:b0:7e:
                    f0:cd:a0:ec:ac:99:da:0b:10:6e:54:e6:5e:54:fb:
                    73:89:ed:12:0a:f9:64:1a:87:87:0f:4c:ed:45:2b:
                    fb:bd:0d:38:f0:be:4a:86:06:6c:00:64:5c:1d:2e:
                    44:10:06:25:b3:44:23:48:0c:f1:fb:21:40:1d:a0:
                    29:b4:8e:aa:99:70:2f:0b:62:58:e6:e0:5e:90:0b:
                    ca:7e:3f:c8:af:2e:eb:1b:96:07:97:9f:36:a1:0e:
                    7c:81:b5:1c:ff:e1:38:e5:c0:c0:e6:4f:3f:9a:4d:
                    bf:8c:28:b8:74:f7:22:55:63:e0:a9:ac:fb:7e:91:
                    17:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7C:8B:19:E7:CB:4F:7F:7B:C5:97:63:1C:9C:33:EB:7D:6C:08:11
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/B3yLGefLT397xZdjHJwz631sCBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:7b:5e:e4:96:1f:49:12:fc:45:5e:b7:13:8e:96:c6:54:80:
         53:1f:48:fb:27:3f:ff:20:c7:24:9d:af:63:6f:bd:ac:b2:cd:
         67:c8:77:ba:29:e1:a1:f3:23:fa:c3:66:56:55:45:fc:d0:3d:
         52:38:49:fe:a4:35:f7:9f:81:3e:ce:b8:57:0e:73:fd:1f:65:
         60:3e:3d:0a:24:fc:bd:2e:dc:28:c7:4f:40:ff:ad:66:b1:df:
         47:4e:70:28:8a:e4:c5:09:68:38:4e:09:4a:bd:64:f5:c7:d0:
         20:f3:07:57:a6:2a:5e:26:00:a4:57:f7:22:5d:ce:13:33:9c:
         3d:b8:65:f9:04:89:a9:18:bf:d9:55:d8:cf:7b:2e:af:b3:50:
         83:57:05:e5:60:29:de:d2:d3:74:3e:95:83:73:21:14:7c:da:
         51:6d:7d:dd:1b:d0:61:4b:2e:ed:c2:52:31:78:c5:3f:3c:2b:
         9e:6b:16:e8:d2:fb:45:49:e8:33:46:40:c8:0a:33:e1:b9:6d:
         2f:64:79:fe:fd:07:35:7d:c7:12:90:9f:85:f4:3c:07:40:01:
         e6:04:39:86:22:19:27:52:39:fe:0d:97:f6:b2:b0:0f:7c:1e:
         ab:17:00:09:8a:f4:9a:0f:d8:3d:2d:02:1c:57:02:95:54:32:
         2b:e6:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:27:21 2026 by rpki-client